Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
File:                     qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json)
Hash identifier:          +fLF/W8YyJ/NFiigCb1bMkqyQROsFo+ZbXtJ6u9pOU0=
Subject key identifier:   2C:B3:66:B7:28:FC:68:83:9B:72:61:85:25:CB:53:5E:06:2C:B8:58
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Certificate issuer:       /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial:       2CD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
Manifest number:          2CA1
Signing time:             Wed 02 Jul 2025 15:38:34 +0000
Manifest this update:     Wed 02 Jul 2025 15:38:33 +0000
Manifest next update:     Wed 09 Jul 2025 15:38:33 +0000
Files and hashes:         1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: OUBNXfjoStbieYNzj/8XjWl5/KUjvCxEBq6teACsKnk=)
                          2: C8E49B061B4A11EFB0254061C4F9AE02.roa (hash: Da3gilq2F4wW4dkNKWQ9yuSo221iFTPD958FIRS9awA=)
                          3: 8FFA11F41B4A11EFB2A0D360C4F9AE02.roa (hash: ulJtZ2Mww36RDb9DCGSsj4fbfbOfNMa0ECif5nIZSNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
                          rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11479 (0x2cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916216D, serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
        Validity
            Not Before: Jul  2 15:38:33 2025 GMT
            Not After : Jul  9 15:38:33 2025 GMT
        Subject: CN=6865527a-f9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5c:6d:49:c5:d1:4b:e4:d9:3e:da:f9:c1:75:
                    59:86:e0:12:6f:fb:ec:86:4a:42:11:76:7c:5f:bb:
                    02:63:2f:fc:d4:cf:04:60:74:b9:55:3a:f1:8c:8f:
                    ff:30:82:16:bd:a4:90:40:89:1b:d5:a7:7f:17:30:
                    a0:88:51:4f:fa:8b:ad:0b:de:3d:d8:7a:77:ca:d6:
                    e5:6d:24:59:e8:bf:c1:97:9f:ae:7d:b3:dd:a5:19:
                    e2:a0:b6:59:59:ab:ed:df:c1:3e:78:9d:b1:d3:99:
                    6e:37:ff:c2:25:ed:74:82:c2:a7:0f:16:1c:1e:e4:
                    90:ed:8c:6d:f6:70:1e:ff:e1:3d:9f:54:32:f4:41:
                    5a:4a:18:15:4f:69:e0:92:73:f2:67:a4:f4:8c:f2:
                    bc:b3:9b:f2:22:8b:9c:40:38:98:5c:34:5a:b5:65:
                    3a:48:6d:8e:9e:c8:02:cd:98:28:10:89:f5:9e:09:
                    fa:d2:25:d3:c0:ee:d9:22:83:04:f9:90:52:b6:3d:
                    f4:22:19:3e:14:3b:d7:f9:4a:1c:aa:02:0b:41:39:
                    9f:7d:fe:c6:f1:a6:70:d1:e3:8a:4d:ec:0d:c2:fd:
                    f0:00:89:81:b3:ce:a6:6a:41:33:f4:10:d5:ac:b1:
                    56:aa:d9:1b:82:ff:4f:eb:e2:29:0b:aa:50:a6:c7:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B3:66:B7:28:FC:68:83:9B:72:61:85:25:CB:53:5E:06:2C:B8:58
            X509v3 Authority Key Identifier:
                keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:35:74:3e:36:83:d3:c4:7b:32:02:d8:27:65:9f:62:03:04:
         bf:29:a9:c1:3f:26:42:e8:19:a7:01:a5:f6:33:d4:fc:a3:e5:
         57:78:86:1c:52:2b:46:a3:37:ff:ee:e9:79:64:9b:d3:d0:6d:
         d0:d8:86:79:85:cc:66:77:e8:a8:94:bf:39:b8:c8:2a:1c:06:
         dc:c2:2b:83:02:7a:76:43:5c:2e:32:99:c5:ee:7b:5b:8a:24:
         5a:fb:29:70:42:80:20:6a:7e:51:64:78:79:9d:ff:43:ce:87:
         db:7c:39:c2:7d:1e:75:fc:5e:fa:92:b1:3c:9a:9a:35:93:e7:
         ba:09:94:e3:ae:6c:76:b7:98:45:a8:ed:76:af:eb:27:bd:8a:
         54:14:6e:c8:0f:e1:8a:dc:b3:45:a5:01:61:8b:d4:75:93:ba:
         62:c1:19:a5:c7:1a:fc:7b:a1:ed:5f:15:64:18:30:af:0a:53:
         ab:75:ae:6c:a0:bc:c4:6b:f0:35:c9:79:2a:e1:96:d3:5e:be:
         2a:a1:e1:81:23:9b:99:7d:ec:56:b9:58:f0:52:87:89:bf:46:
         f9:87:3a:b8:7b:98:c6:f6:2f:3e:d3:e0:64:b7:39:a8:66:ad:
         d0:f8:a2:93:82:f4:ee:94:f1:f7:32:54:15:5d:90:10:57:93:
         65:a8:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:57:45 2025 by rpki-client