Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File:                     qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier:          i0AwAPa141AdfqzB5N1bq8VZaTkht/Ywn1PM2Cj5nDI=
Subject key identifier:   EE:C3:36:99:84:25:C7:A0:11:41:20:19:BF:A0:71:C2:16:2D:55:A8
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       08B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number:          0899
Signing time:             Sat 28 Jun 2025 20:14:33 +0000
Manifest this update:     Sat 28 Jun 2025 20:14:33 +0000
Manifest next update:     Sat 05 Jul 2025 20:14:33 +0000
Files and hashes:         1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: 4wUb6RDIexgo03DafyD5Ik8ySOMyKeS8vuUIrd/zVPk=)
                          2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: gExqM4aUKrBllmPpMCtcVSZCHfPpzfLPu3nuxUT8Qqs=)
                          3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: dLzX51Se2cwYVIN8Vmr+uVPw3hseY/U8FombHRxTBaQ=)
                          4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: ggS/okJOXO20WJl9u64hoMFD/RxIwy0K1iG0hR/vSB4=)
                          5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: mKgGrrGBQwDLJBId/uOdKFjLBgmwhREF0Lpo0O+T3TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 20:14:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
        Validity
            Not Before: Jun 28 20:14:33 2025 GMT
            Not After : Jul  5 20:14:33 2025 GMT
        Subject: CN=68604d29-8c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:26:1d:8e:a4:c8:f5:86:dd:9f:33:4a:fb:17:
                    ca:80:cb:7e:c2:c1:23:db:0a:ca:65:76:fa:13:7c:
                    37:cf:c5:8d:25:b2:4f:78:0b:ac:b9:1f:5b:a2:25:
                    24:d6:bf:85:47:0e:69:cf:31:20:a4:6c:d0:ed:f5:
                    bc:a3:06:7b:71:3b:e6:fc:c2:80:36:2f:5e:f7:ec:
                    d2:98:85:63:da:97:c6:f5:03:f2:97:fe:3b:cd:fa:
                    ed:84:d0:2b:16:bd:bc:b9:90:81:20:65:89:51:5b:
                    aa:11:69:ed:50:df:a8:88:a5:ff:e5:58:b5:52:83:
                    23:8b:99:81:11:a3:08:10:b8:36:20:8d:c6:ee:ca:
                    06:20:44:86:93:84:8e:e3:ab:d3:4d:3a:87:46:35:
                    9e:49:0e:46:db:4b:5f:76:b2:11:25:bf:36:14:07:
                    19:b0:c2:3d:dc:a6:d8:6a:a0:5a:e9:92:3c:7e:ab:
                    fa:06:4b:0a:ef:c4:6e:82:3b:4b:1c:7b:ee:df:c2:
                    ae:46:39:ab:22:1a:6e:58:be:3e:c8:c0:9c:72:d7:
                    b3:02:1e:da:bd:8f:71:77:c5:6d:e3:ed:fe:7b:35:
                    dc:4e:fe:d5:ef:38:64:7a:7e:86:46:d6:25:fe:dc:
                    74:2f:75:c2:24:c2:a7:a5:4f:c6:ba:ad:97:bf:de:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:36:99:84:25:C7:A0:11:41:20:19:BF:A0:71:C2:16:2D:55:A8
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:eb:92:94:a1:cd:fc:4b:07:7f:7e:12:12:07:f7:2c:3a:
         0a:c2:f0:c8:c2:69:1d:29:e2:de:13:f8:bf:cb:6a:59:0c:9c:
         21:46:0f:2c:a6:53:88:07:a2:a5:4f:8d:36:77:68:40:b7:8b:
         f1:34:be:bb:da:3b:4f:a3:d2:09:85:1d:49:ad:a3:93:54:f1:
         b0:cb:22:58:f0:32:1b:9f:8f:7a:48:46:3e:fe:f6:f0:6f:95:
         41:96:49:a8:33:9f:8e:f6:39:66:4a:8a:53:1f:9f:00:ea:dc:
         e4:1e:9d:d9:92:ae:6d:43:78:65:94:26:f2:a1:31:88:cd:77:
         bd:c7:6c:70:04:6e:27:31:0a:33:ea:53:83:6e:91:79:6a:23:
         63:67:67:af:cd:38:50:8b:5e:5b:32:75:27:54:60:d1:79:46:
         41:2d:42:d4:12:79:f0:32:bb:4d:24:93:6a:74:99:72:b7:f2:
         13:62:22:83:62:84:34:cb:dc:36:ae:81:d9:bf:1f:13:6f:6e:
         e2:5c:84:6e:00:3c:b8:0d:23:5e:f3:b7:f9:0c:6d:3d:c5:da:
         12:33:02:b7:1d:15:41:fe:e5:dc:8e:16:9c:f7:ce:fe:3d:0e:
         7f:46:82:85:f9:70:05:a2:4a:d3:ba:73:7c:00:aa:35:fb:85:
         6d:1c:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:02:38 2025 by rpki-client