Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
File:                     QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json)
Hash identifier:          v/y6DuSk3MG+VqP8fRezy0Q6J1DuK+MAUZRGjAiUrRE=
Subject key identifier:   96:35:4F:22:66:EF:46:5C:97:8E:C9:6C:26:BD:07:96:E1:B9:5B:0A
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Certificate issuer:       /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial:       0322
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
Manifest number:          031E
Signing time:             Sat 23 Aug 2025 01:24:56 +0000
Manifest this update:     Sat 23 Aug 2025 01:24:55 +0000
Manifest next update:     Sat 30 Aug 2025 01:24:55 +0000
Files and hashes:         1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: 3eVLCy6mk2IVvrT3d/fWLSgm3Lz+xDJOt7e/1aH2LRg=)
                          2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: WES9ucDGz8CEKO/wZoNG/u047WdQevrcBNglpR6DHnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
                          rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
        Validity
            Not Before: Aug 23 01:24:55 2025 GMT
            Not After : Aug 30 01:24:55 2025 GMT
        Subject: CN=68a91867-c426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:6c:fe:8b:2a:5b:aa:6c:88:20:77:25:07:
                    1f:ee:4e:80:62:a2:7a:7f:cc:8a:7d:d2:b3:7d:c2:
                    71:5d:b3:f0:be:32:11:8b:73:17:d3:4f:72:7a:05:
                    46:c8:59:6b:2a:95:68:8c:88:41:01:fb:9d:cc:88:
                    c5:17:4b:d8:06:73:0f:e9:70:5e:2a:6c:6b:1c:9a:
                    7a:0f:ad:e4:95:98:a5:2e:21:cd:68:7c:7f:0a:4e:
                    d7:5c:92:65:3e:7e:76:82:0b:00:10:9f:af:16:8c:
                    8c:75:6e:f0:9d:05:2c:03:4a:76:28:89:52:c4:f8:
                    71:47:04:13:ca:59:46:81:49:c9:79:d2:94:36:52:
                    c7:57:89:54:bf:13:f8:c6:4a:00:95:47:76:8a:a0:
                    8f:5f:96:50:26:30:15:21:38:b7:52:d4:84:27:69:
                    74:d3:c4:91:03:2d:24:f9:b9:50:04:e8:5a:2c:0f:
                    58:b9:2c:9a:5d:0b:ce:78:08:17:35:a7:99:b7:5c:
                    29:45:5e:41:81:20:43:5b:ac:54:68:3f:53:ec:18:
                    80:be:23:b7:8a:b6:f7:08:e6:1f:c0:03:47:4c:76:
                    93:37:d6:90:24:95:0d:01:31:db:17:fc:8a:10:6a:
                    68:23:af:94:8c:1d:e8:d1:ae:ee:38:b1:e9:a7:18:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:35:4F:22:66:EF:46:5C:97:8E:C9:6C:26:BD:07:96:E1:B9:5B:0A
            X509v3 Authority Key Identifier:
                keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:73:4b:7e:6b:e1:5b:04:57:d0:1c:63:94:62:2b:93:d3:c3:
         72:f8:e0:aa:38:9e:db:71:61:3a:7a:02:26:33:5b:40:5e:f2:
         aa:ee:b1:90:ab:7b:cb:55:5f:08:e0:28:37:f9:3b:53:02:ae:
         d6:ed:c2:88:89:0b:a7:41:41:7b:0c:22:9f:e6:44:73:0e:4e:
         b2:86:37:b9:18:b1:6f:10:88:84:7c:8a:17:c7:3f:6a:f2:d9:
         bd:a8:0d:49:7e:38:a6:51:b8:a8:05:d2:5a:2f:e7:03:8b:eb:
         d7:81:74:40:c2:07:98:0b:c6:3b:b7:a0:80:25:ec:2c:60:d4:
         2a:bb:52:5f:f7:23:3e:14:a9:5a:ad:dc:a6:af:6f:60:71:6f:
         47:ef:b6:64:12:d8:86:0d:d6:ee:83:e3:7e:d8:8a:2c:be:72:
         8c:a5:29:94:c7:b1:14:e4:9d:78:9f:dc:00:a2:fa:04:20:5d:
         96:6b:ed:83:86:d5:91:c0:0a:95:0c:90:24:7a:af:c4:e5:60:
         c7:0e:02:a9:58:96:71:33:51:60:13:be:7d:4f:42:d2:bd:c0:
         95:8b:1b:fa:93:98:8a:eb:37:fa:4a:01:c5:b0:61:68:bd:52:
         09:86:1e:7e:2c:47:48:82:d5:3b:b5:cf:9b:51:81:a1:d4:0d:
         96:88:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:43 2025 by rpki-client