Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
File:                     qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json)
Hash identifier:          wlZFCPOFpXtt7eb8ztRUtTJTYb6oSjGQIZowdrlqLXM=
Subject key identifier:   32:7A:6F:C8:8C:E8:EB:04:44:FC:6B:35:66:2B:BB:B5:1D:68:4A:F1
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Certificate issuer:       /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial:       0768
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
Manifest number:          0757
Signing time:             Wed 02 Jul 2025 22:00:30 +0000
Manifest this update:     Wed 02 Jul 2025 22:00:29 +0000
Manifest next update:     Wed 09 Jul 2025 22:00:29 +0000
Files and hashes:         1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: EmgxUM4jqVAoqCt/uaMZnIF4C2ODM05e1YFFo9qS1/E=)
                          2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: y5tNXSHIFMDA3JaGsuJYxDUjZjMTH1QaHVdqSkt/Cu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
                          rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
        Validity
            Not Before: Jul  2 22:00:29 2025 GMT
            Not After : Jul  9 22:00:29 2025 GMT
        Subject: CN=6865abfd-39c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:ad:33:47:b2:77:e4:a3:64:58:35:d5:07:
                    e3:2d:ce:b0:8f:3f:d7:b0:b7:69:3c:bd:cc:f0:db:
                    48:ef:ad:1a:b7:24:2b:08:6b:f2:e9:32:60:a0:f5:
                    94:32:80:da:9d:50:f7:03:bf:31:fa:44:db:72:dd:
                    ff:0a:a8:1b:ed:6a:84:30:7a:40:7c:b6:55:db:55:
                    7c:66:88:18:8e:d5:4a:77:be:61:ba:55:49:70:c3:
                    42:2a:51:66:7a:cc:33:f3:4e:af:da:e0:3b:a3:8f:
                    a1:b5:b0:85:98:a8:31:7c:fb:ca:39:05:1e:71:fe:
                    c3:82:71:d0:ec:0d:ac:84:f2:d9:75:90:35:d9:62:
                    94:76:11:39:0d:db:01:0c:ad:36:1a:9e:b3:5a:5b:
                    0b:37:f9:06:1b:12:56:a1:88:f8:7c:43:dc:30:5e:
                    70:e6:bb:44:e5:1f:65:9a:ff:fe:95:a6:35:0b:fc:
                    8b:c0:b8:9d:19:8c:02:1d:ed:9c:58:85:7f:83:2a:
                    7d:57:e1:3a:79:eb:60:ef:4b:a9:d4:9d:97:07:29:
                    30:b7:e4:2f:d6:db:18:1f:06:3e:c6:22:93:c1:25:
                    a8:44:75:61:13:2b:48:39:5d:50:41:ad:38:7a:c3:
                    79:cf:87:28:26:e5:58:47:9c:67:54:d4:3f:ae:fa:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7A:6F:C8:8C:E8:EB:04:44:FC:6B:35:66:2B:BB:B5:1D:68:4A:F1
            X509v3 Authority Key Identifier:
                keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:70:7a:32:f4:28:1e:5a:70:ce:d3:41:03:b2:3a:76:1c:c2:
         49:42:f8:40:dc:77:40:2e:21:c5:09:88:69:6e:ae:73:37:a5:
         73:cf:1c:81:58:69:89:69:25:6b:7a:be:f6:27:28:08:b8:14:
         2a:7e:1f:38:d4:a2:1c:39:4e:51:a1:50:3f:ae:9b:f4:57:4e:
         78:ca:61:83:fa:75:bb:6a:bd:23:f9:ac:84:07:34:9c:6c:42:
         02:dd:b5:c2:86:75:a1:37:66:2b:4f:a5:77:34:ef:ea:b1:62:
         9b:ee:23:d6:1d:e6:e6:90:58:ea:ab:d3:e4:fc:01:11:eb:ff:
         10:a0:1b:cf:33:d4:ac:54:76:f9:6f:1d:0c:da:9e:46:55:58:
         9b:13:1c:59:11:8b:5d:2f:81:70:49:36:11:8d:70:c8:9f:46:
         80:f6:23:4f:0d:5a:8e:b3:14:8e:87:03:40:20:cb:20:82:10:
         1d:6e:b0:90:05:89:e8:ab:7d:ea:cb:c7:93:43:f3:7b:df:1d:
         55:85:f5:02:48:f5:70:82:68:01:e0:6f:77:c5:a4:c7:f8:3f:
         10:a9:78:e3:2a:0a:db:df:88:96:48:89:fc:63:5b:b6:61:1d:
         39:ef:53:67:03:75:77:77:af:f4:63:82:42:67:cc:d0:a3:ba:
         c7:2a:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:17:12 2025 by rpki-client