Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
File:                     qTjv-5Y64q628LJmWWuKQSN3ydk.mft (raw, json)
Hash identifier:          7vEgQDH3DKZStFL6+TMnoSXX18rN3cDcS3W3e0CF/j0=
Subject key identifier:   77:15:E2:1C:99:74:3E:1A:58:27:78:D7:2E:C3:08:4E:85:89:69:7E
Authority key identifier: A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9
Certificate issuer:       /CN=A9120832/serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
Manifest number:          30
Signing time:             Sat 23 Aug 2025 07:53:19 +0000
Manifest this update:     Sat 23 Aug 2025 07:53:18 +0000
Manifest next update:     Sat 30 Aug 2025 07:53:18 +0000
Files and hashes:         1: qTjv-5Y64q628LJmWWuKQSN3ydk.crl (hash: 2YLr+EpKrQbawWc+X6tCimMynsJCohMJU5QYPpWBhy8=)
                          2: 605C88EC362811F08A82E10DC4F9AE02.roa (hash: ICDTjfptMFLAWgu+lY50xT8rCv9IQat8S3hCjv+v8vU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl
                          rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120832, serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
        Validity
            Not Before: Aug 23 07:53:18 2025 GMT
            Not After : Aug 30 07:53:18 2025 GMT
        Subject: CN=68a9736f-cd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:16:8d:12:42:c4:eb:55:39:8b:66:50:9b:c5:
                    a7:78:83:8b:3d:47:70:fb:7b:68:e5:21:16:6b:55:
                    7a:e7:61:f1:d1:fa:82:b7:90:2c:a1:21:a0:42:87:
                    a2:be:4b:fc:74:77:f1:c0:39:d4:27:92:63:e3:21:
                    92:35:6d:18:cd:18:21:4b:ca:d0:6a:68:e4:58:42:
                    60:7f:07:db:25:b2:b1:6f:79:5b:c2:6f:a6:78:01:
                    c8:f4:f0:3f:06:32:ac:7c:3d:c7:4a:45:f4:88:1d:
                    1f:db:88:46:bd:95:1a:3f:88:6a:2d:ed:67:f1:ef:
                    58:aa:58:0d:80:f6:3d:aa:87:32:7a:c5:50:40:5d:
                    37:93:fc:4a:c6:b9:8f:dd:a7:86:f6:55:a3:57:ab:
                    15:a4:a8:87:14:a7:36:23:73:01:81:f7:ca:1f:0a:
                    d4:dc:97:96:ff:5d:f6:06:b1:19:a4:58:db:37:44:
                    4f:2f:97:19:f7:39:6c:ec:e0:a1:79:06:08:4d:ff:
                    58:98:8e:cb:c2:18:da:df:0c:d5:a5:20:af:af:7d:
                    2c:4d:39:30:78:2f:17:b9:db:af:49:34:95:54:81:
                    76:73:2a:86:d9:ca:ff:a5:36:3c:f8:cd:54:bd:33:
                    d9:2f:14:2e:97:b2:d1:e9:d3:1f:2b:6b:c8:1f:09:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:15:E2:1C:99:74:3E:1A:58:27:78:D7:2E:C3:08:4E:85:89:69:7E
            X509v3 Authority Key Identifier:
                keyid:A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d4:2d:1b:e0:d6:a9:e8:14:6c:1e:b7:2d:ab:ee:71:76:00:
         42:44:65:fa:e7:26:f4:f2:10:11:2d:46:06:47:09:a3:31:2e:
         94:da:4d:6b:60:3b:bd:d5:21:8c:39:0a:1f:15:7d:01:37:9e:
         00:02:c6:65:24:35:c4:ab:19:08:93:3a:69:ff:5a:25:89:a0:
         30:f9:50:72:3d:24:40:d4:a4:51:64:e6:db:01:fa:45:8a:76:
         da:52:de:15:f1:61:64:08:cc:a9:cc:a3:b8:96:0a:77:0d:2c:
         83:04:6f:d6:1c:c8:23:09:80:4b:d3:89:e6:5c:7f:bb:0c:da:
         94:98:e3:7e:44:49:65:e0:96:d0:4b:7c:40:41:76:22:2c:f3:
         3a:69:65:96:80:51:6f:36:be:7f:0b:7a:84:4a:f9:14:38:92:
         c0:cf:8f:be:ca:e0:e5:2f:9b:2e:66:fe:e9:2e:dc:f4:0c:9c:
         8e:6b:a4:64:a1:43:b4:5f:00:ac:e8:8b:18:47:37:9e:78:6e:
         54:f1:00:55:57:2e:6d:1f:16:9e:a0:88:f1:0f:9b:47:09:11:
         76:d9:cd:05:18:26:63:52:2c:7c:a1:0e:d1:9d:d4:1f:2a:84:
         28:6e:6a:3a:2b:4d:de:4b:e8:73:29:7f:d8:52:d7:bd:33:3f:
         a6:35:dd:de
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MDgzMjExMC8GA1UEBRMoQTkzOEVGRkI5NjNBRTJBRUI2RjBCMjY2NTk2QjhBNDEy
Mzc3QzlEOTAeFw0yNTA4MjMwNzUzMThaFw0yNTA4MzAwNzUzMThaMBgxFjAUBgNV
BAMTDTY4YTk3MzZmLWNkMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcFo0SQsTrVTmLZlCbxad4g4s9R3D7e2jlIRZrVXrnYfHR+oK3kCyhIaBCh6K+
S/x0d/HAOdQnkmPjIZI1bRjNGCFLytBqaORYQmB/B9slsrFveVvCb6Z4Acj08D8G
Mqx8PcdKRfSIHR/biEa9lRo/iGot7Wfx71iqWA2A9j2qhzJ6xVBAXTeT/ErGuY/d
p4b2VaNXqxWkqIcUpzYjcwGB98ofCtTcl5b/XfYGsRmkWNs3RE8vlxn3OWzs4KF5
BghN/1iYjsvCGNrfDNWlIK+vfSxNOTB4Lxe5269JNJVUgXZzKobZyv+lNjz4zVS9
M9kvFC6XstHp0x8ra8gfCWTxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdxXiHJl0
PhpYJ3jXLsMIToWJaX4wHwYDVR0jBBgwFoAUqTjv+5Y64q628LJmWWuKQSN3ydkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwODMyL0MyNTlGNkIyMzYy
NjExRjBCMzVBRkE4NkM0RjlBRTAyL3FUanYtNVk2NHE2MjhMSm1XV3VLUVNOM3lk
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcVRqdi01WTY0cTYyOExKbVdXdUtRU04zeWRrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw
ODMyL0MyNTlGNkIyMzYyNjExRjBCMzVBRkE4NkM0RjlBRTAyL3FUanYtNVk2NHE2
MjhMSm1XV3VLUVNOM3lkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACzULRvg1qnoFGwety2r7nF2AEJEZfrnJvTyEBEtRgZHCaMxLpTaTWtg
O73VIYw5Ch8VfQE3ngACxmUkNcSrGQiTOmn/WiWJoDD5UHI9JEDUpFFk5tsB+kWK
dtpS3hXxYWQIzKnMo7iWCncNLIMEb9YcyCMJgEvTieZcf7sM2pSY435ESWXgltBL
fEBBdiIs8zppZZaAUW82vn8LeoRK+RQ4ksDPj77K4OUvmy5m/uku3PQMnI5rpGSh
Q7RfAKzoixhHN554blTxAFVXLm0fFp6giPEPm0cJEXbZzQUYJmNSLHyhDtGd1B8q
hChuajorTd5L6HMpf9hS170zP6Y13d4=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:29 2025 by rpki-client