Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
File:                     qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json)
Hash identifier:          NajI0TurBAWgT6H3uafqETwN/Wajn2vAdvfZxI2iEwU=
Subject key identifier:   8C:2A:CF:BC:E7:6A:71:4A:FF:FE:D5:46:46:F4:B3:3B:FC:55:88:1C
Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
Certificate issuer:       /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Certificate serial:       03B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
Manifest number:          03B0
Signing time:             Sat 09 Aug 2025 01:16:01 +0000
Manifest this update:     Sat 09 Aug 2025 01:16:01 +0000
Manifest next update:     Sat 16 Aug 2025 01:16:01 +0000
Files and hashes:         1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: uhfpK/faYCyG81MHSJaLqbNpBZPxgglA7pnfTy1Dj2M=)
                          2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: H07H0KC74DRAPdC4SUe3j+pKIkb6uyeJtaN+ueDEin0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
        Validity
            Not Before: Aug  9 01:16:01 2025 GMT
            Not After : Aug 16 01:16:01 2025 GMT
        Subject: CN=6896a151-4e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:be:1e:e1:a5:fb:ea:91:c4:59:70:f4:60:
                    37:7b:8f:c4:b9:1e:f9:0d:cc:d4:47:f1:3d:2b:f5:
                    e9:31:0e:a1:22:3b:9b:c0:d5:93:ba:b5:63:b2:60:
                    fe:62:94:80:c5:14:0d:85:68:67:6e:79:1e:a4:dc:
                    54:0f:c2:88:c6:f3:d7:31:29:b6:7c:0e:7e:34:1f:
                    ee:c4:be:54:5f:31:42:c9:08:b4:61:f4:26:7a:c3:
                    b7:f7:74:4d:d8:75:60:5c:c9:75:a7:c4:8c:24:8a:
                    98:bf:d2:4b:7a:bd:5c:5d:d9:2a:38:a0:27:98:a6:
                    f3:29:51:b5:97:7c:69:5c:30:e8:4a:56:22:93:8b:
                    a3:f7:df:b0:66:df:30:e9:51:33:9f:8d:1c:46:00:
                    c4:77:04:74:fd:d8:e0:68:4f:33:57:b8:6c:e4:a7:
                    74:4a:e0:c6:76:dd:89:8e:6b:dd:12:75:b5:a2:73:
                    dd:a2:9c:43:6b:f8:8b:56:20:bb:b5:fd:c4:22:55:
                    d2:e2:7a:21:78:01:2a:92:c8:d9:4a:7a:a1:a3:54:
                    18:df:dc:3a:3c:dd:71:25:a4:d0:3c:b7:65:77:cc:
                    7a:0b:60:5d:b5:7e:d7:54:98:10:7b:39:45:c0:fe:
                    b2:79:10:09:63:3e:32:24:11:50:9e:db:f0:42:ce:
                    5a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:CF:BC:E7:6A:71:4A:FF:FE:D5:46:46:F4:B3:3B:FC:55:88:1C
            X509v3 Authority Key Identifier:
                keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f4:5c:4c:f9:65:ea:b5:12:69:56:62:f5:a1:bf:ad:9d:a9:
         e5:12:09:bd:e1:fb:06:f8:a9:6f:90:d6:9f:0d:01:6b:02:72:
         cb:16:e0:69:ee:91:69:b4:be:eb:e4:87:8d:7e:56:f8:cf:77:
         6b:82:68:fa:db:fa:a4:3f:00:4b:b1:8a:b7:38:ff:4c:81:2b:
         dd:61:f8:94:16:8f:93:29:a7:ce:dc:6d:66:36:b5:db:0d:ba:
         f5:d1:15:3b:70:bb:e0:d8:d5:b7:ad:0f:8e:6f:bb:8d:ac:d0:
         22:66:fe:6b:aa:de:48:90:b9:1b:d6:50:37:fc:a8:b1:d1:74:
         b6:b2:61:04:c8:af:53:e2:1b:eb:22:e4:8d:f2:31:cd:12:6d:
         27:0b:99:7c:31:2a:c5:ad:44:09:11:e5:2e:6a:bc:65:82:a7:
         e6:0a:3e:5f:57:1a:f2:b6:5e:94:b3:ef:e2:90:96:10:97:84:
         f6:76:03:61:b6:da:5b:84:19:54:70:3a:81:9d:50:89:2d:39:
         ac:c3:9f:53:30:e7:73:75:13:d1:d5:24:63:3c:99:7e:dd:be:
         64:ba:c2:8e:87:c9:72:4a:ac:72:ee:1e:f3:32:6d:14:08:b3:
         b9:e3:07:07:d2:d3:4a:bc:ce:48:16:c6:7b:e8:93:5b:d1:ca:
         63:b2:72:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz
Q0MxOUM3RkUwHhcNMjUwODA5MDExNjAxWhcNMjUwODE2MDExNjAxWjAYMRYwFAYD
VQQDEw02ODk2YTE1MS00ZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2bK+HuGl++qRxFlw9GA3e4/EuR75DczUR/E9K/XpMQ6hIjubwNWTurVjsmD+
YpSAxRQNhWhnbnkepNxUD8KIxvPXMSm2fA5+NB/uxL5UXzFCyQi0YfQmesO393RN
2HVgXMl1p8SMJIqYv9JLer1cXdkqOKAnmKbzKVG1l3xpXDDoSlYik4uj99+wZt8w
6VEzn40cRgDEdwR0/djgaE8zV7hs5Kd0SuDGdt2JjmvdEnW1onPdopxDa/iLViC7
tf3EIlXS4noheAEqksjZSnqho1QY39w6PN1xJaTQPLdld8x6C2BdtX7XVJgQezlF
wP6yeRAJYz4yJBFQntvwQs5a5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwqz7zn
anFK//7VRkb0szv8VYgcMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx
MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO
bEEyNkY1SGFwWWM4d1p4XzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBD9FxM+WXqtRJpVmL1ob+tnanlEgm94fsG+KlvkNafDQFrAnLLFuBp
7pFptL7r5IeNflb4z3drgmj62/qkPwBLsYq3OP9MgSvdYfiUFo+TKafO3G1mNrXb
Dbr10RU7cLvg2NW3rQ+Ob7uNrNAiZv5rqt5IkLkb1lA3/Kix0XS2smEEyK9T4hvr
IuSN8jHNEm0nC5l8MSrFrUQJEeUuarxlgqfmCj5fVxrytl6Us+/ikJYQl4T2dgNh
ttpbhBlUcDqBnVCJLTmsw59TMOdzdRPR1SRjPJl+3b5kusKOh8lySqxy7h7zMm0U
CLO54wcH0tNKvM5IFsZ76JNb0cpjsnKb
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:23:08 2025 by rpki-client