Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File:                     QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier:          wX4F9nMTLtQUIEG1uNWbKy1VJWg7y7O67qgMYOhnNLo=
Subject key identifier:   76:DA:36:BD:BB:CD:BA:9C:4B:30:8D:44:1C:BE:81:F8:52:71:36:EE
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer:       /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial:       1E63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number:          32D1
Signing time:             Fri 22 Aug 2025 15:43:05 +0000
Manifest this update:     Fri 22 Aug 2025 15:43:05 +0000
Manifest next update:     Fri 29 Aug 2025 15:43:05 +0000
Files and hashes:         1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: /SVXOfmiCcwF3kukoLattyXyKnx6BoDcpRG32NXjvTs=)
                          2: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: rgEBVfEHrHQCIYu+8cT3x0Mx0w03fqFbIgZigqEcJN4=)
                          3: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: r0CHOQu1cJbmjwRlYBEiavWoEM4N4g/XqSKR2NA/Xr4=)
                          4: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: m2nIep6ftkfrIPBLf24Qcs2kiAMJ/4wpttb2LM7mGxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
                          rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7779 (0x1e63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
        Validity
            Not Before: Aug 22 15:43:05 2025 GMT
            Not After : Aug 29 15:43:05 2025 GMT
        Subject: CN=68a89009-da32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:dd:6e:0a:4e:82:6a:77:dd:f6:97:e4:a7:
                    9c:c5:57:ee:92:fb:6d:fe:d9:18:91:83:99:54:38:
                    f6:69:6c:20:69:88:0c:6b:db:3b:63:65:d6:46:b4:
                    58:15:29:17:a8:fd:cf:0c:9a:2d:cb:2a:5e:c8:ac:
                    e1:91:36:3f:18:b3:d6:71:03:a2:97:63:f5:3c:e2:
                    b1:ec:14:29:24:21:a4:f3:78:18:0b:b9:5a:5b:b6:
                    71:8a:1b:ad:fb:0d:0f:f2:fd:62:d4:e0:fd:2f:ca:
                    20:15:2f:f7:b9:bc:ba:65:f4:84:eb:5b:17:53:3c:
                    2f:e4:04:97:78:12:4e:e3:bc:9c:6d:c0:17:4e:cf:
                    82:ae:ee:e3:f1:ca:a6:9e:10:68:d6:10:dd:dd:6c:
                    5d:dd:a5:d9:81:7d:f6:4c:da:84:6c:27:23:99:1b:
                    13:61:06:de:57:d1:a9:0f:ae:3b:75:a6:76:06:ca:
                    ec:5b:83:62:3e:c6:00:35:84:d5:a9:a6:a5:32:33:
                    61:ea:3c:50:4e:9c:6d:d5:2c:99:f4:6c:a3:4b:31:
                    2b:0f:02:9f:1b:7c:90:be:90:ef:40:7b:d3:85:1e:
                    f1:44:ba:89:5e:44:53:b4:96:54:e8:b7:50:4d:04:
                    4b:81:de:e4:90:6d:e0:7b:0b:40:42:26:70:4b:a3:
                    66:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DA:36:BD:BB:CD:BA:9C:4B:30:8D:44:1C:BE:81:F8:52:71:36:EE
            X509v3 Authority Key Identifier:
                keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:8b:3e:ea:30:83:a1:2e:ab:f4:27:42:6f:6b:a8:1d:90:
         c2:a3:bd:41:b7:30:98:27:75:6a:62:3e:53:59:d1:45:72:15:
         88:4a:32:ab:ac:e9:29:66:dd:74:e0:a3:ba:b4:38:01:d4:39:
         e6:db:dd:22:e2:7f:f8:6f:7f:4a:f2:f0:48:72:03:b2:48:ee:
         f5:5e:32:22:38:87:79:48:7f:37:3c:47:5d:ad:1f:81:a1:21:
         10:61:d6:fa:c9:ef:56:23:98:23:88:c8:54:84:b9:26:00:a8:
         d9:27:a9:e2:12:77:95:9e:cd:6b:37:1c:1c:e1:2d:33:2c:50:
         31:90:b5:4d:18:a2:58:3c:57:64:23:91:d1:f3:27:bb:1c:ab:
         ac:02:d6:e4:4e:42:29:13:09:58:9f:f8:1e:1e:34:0b:62:37:
         87:bc:b1:bd:de:60:49:c7:71:51:56:0a:48:eb:fb:6d:1d:de:
         08:72:9b:f4:a9:bc:fe:21:8f:91:45:62:d0:05:4b:71:ac:91:
         97:a1:34:42:d0:62:2d:82:9c:e8:b0:db:23:54:6f:51:f5:4e:
         4f:d8:b2:44:54:ad:21:ae:84:9c:03:0c:d1:c6:ce:a4:66:f1:
         19:f0:0b:01:60:56:35:9c:b5:48:c6:dd:1f:2d:e4:9c:74:37:
         a4:14:c4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:03 2025 by rpki-client