Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File:                     QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier:          cDEU93oVpVpoQW0/Jvz5zWQBW+uoL4gofy5E5QGDC68=
Subject key identifier:   CB:C4:63:3D:F9:0D:DB:C7:6F:85:C0:7A:95:F8:69:F0:C5:5F:49:8B
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer:       /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number:          010B
Signing time:             Sat 23 Aug 2025 05:13:48 +0000
Manifest this update:     Sat 23 Aug 2025 05:13:47 +0000
Manifest next update:     Sat 30 Aug 2025 05:13:47 +0000
Files and hashes:         1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: Q0i61fxLEBhu2C8wjSW+wTXyUp9oZNtK5WE+LauUGP8=)
                          2: 47142068221311EFB680F113C4F9AE02.roa (hash: eOIRibnSZ7zb8zXpiC5OYpXytGwFP6zwa+/fbeAxOO4=)
                          3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: k3OjV98AN2SowkZ89FdDV3rmcUlNd8FyOaF8PHB5wqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
        Validity
            Not Before: Aug 23 05:13:47 2025 GMT
            Not After : Aug 30 05:13:47 2025 GMT
        Subject: CN=68a94e0b-0cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c8:0c:db:28:76:fc:ae:ba:c7:8e:cc:20:79:
                    b7:34:52:cc:3b:2b:c0:bc:80:cd:d3:27:4e:9e:bb:
                    75:32:e7:32:dc:35:1b:03:3f:73:45:d8:ef:9f:3b:
                    c6:3b:bf:87:6f:36:47:84:78:c0:de:3f:f7:b2:8e:
                    38:e4:02:22:2d:89:2b:09:76:e3:ee:ed:06:33:5c:
                    e7:ed:50:0b:78:3f:e2:25:88:e9:99:c0:a0:cf:79:
                    2d:4c:79:ab:9b:99:3c:18:b6:18:fa:b5:43:67:7e:
                    e8:46:33:31:ad:e1:ad:89:ce:86:31:86:c4:3d:87:
                    be:47:ad:13:d8:a3:d6:68:46:58:82:6a:90:ae:1d:
                    c1:51:76:34:ba:92:93:25:de:79:c1:8c:7e:b2:ab:
                    ec:04:99:97:a7:61:bb:02:17:77:e0:38:5a:40:98:
                    b0:d4:64:e0:32:6a:ed:c8:98:a5:05:2e:e1:e3:49:
                    08:51:d6:c0:c4:e9:a3:7d:6d:4d:72:66:24:fa:bc:
                    90:5f:a1:af:b4:67:c2:c3:04:86:c4:1c:db:b2:bc:
                    48:1e:ae:fa:50:0e:a8:9c:cb:4d:09:87:03:77:b6:
                    84:68:a3:ae:3d:84:77:f0:e1:a3:5c:f2:b7:66:bc:
                    12:0e:3f:58:d1:41:9b:66:9c:43:80:b0:a6:c5:2b:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C4:63:3D:F9:0D:DB:C7:6F:85:C0:7A:95:F8:69:F0:C5:5F:49:8B
            X509v3 Authority Key Identifier:
                keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:fc:fe:ad:34:4e:f5:85:95:1a:bd:f8:ad:20:d5:91:c4:
         fd:d1:4c:81:b1:90:83:ab:c5:4d:56:7d:d7:5f:a7:f7:18:7e:
         7e:d9:69:ff:97:5b:7f:db:47:69:7b:a4:35:54:fe:56:24:fe:
         a5:95:c0:bf:9c:25:da:bf:c8:4d:a1:35:08:d0:fe:1b:fc:cb:
         9a:26:3e:08:22:be:e0:97:11:c6:72:4c:5f:c0:ec:44:96:3a:
         4f:86:b5:0e:aa:e0:e5:47:4b:66:03:5c:d6:2e:2a:04:0e:81:
         7d:1b:0a:dc:6a:34:24:7f:f3:56:28:8e:7d:a0:0e:40:81:40:
         d7:18:a8:45:13:a7:b5:b7:40:66:a1:33:2b:2c:ec:4a:a9:08:
         b2:b2:12:69:ac:c8:ab:31:c8:1b:c3:ce:0a:af:ee:0f:74:f2:
         a7:af:54:00:77:6e:63:51:f7:5b:f8:1c:a4:c6:98:3d:2c:6c:
         4f:20:9c:f0:be:6c:61:71:0e:43:49:16:22:6e:01:90:b2:dc:
         73:4f:e7:bf:7b:e4:81:19:34:15:af:f3:1c:7b:af:c0:90:10:
         e2:5a:d2:f3:10:7a:34:3a:c0:10:83:a2:c2:86:00:a2:e5:67:
         27:7a:f5:ea:2c:ff:c3:a8:96:75:37:c7:90:a0:68:10:e7:99:
         60:3c:7c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:31:13 2025 by rpki-client