Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File:                     qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier:          y+231lUwEwx/slORTm0qZP0uST9s6IdcyfnEuYPCJUQ=
Subject key identifier:   86:91:AD:23:BF:8C:EE:C8:2F:AD:0C:C9:B6:47:C4:DB:D1:96:5E:CA
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer:       /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial:       0862
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number:          084B
Signing time:             Fri 22 Aug 2025 20:52:37 +0000
Manifest this update:     Fri 22 Aug 2025 20:52:37 +0000
Manifest next update:     Fri 29 Aug 2025 20:52:37 +0000
Files and hashes:         1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: K7R5w14KWraihfMGLXHRg9vXSEYrc48FMYLvkv3Oqwg=)
                          2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: QEmg34gYMLcRImmZXOGPqukjodjpiHJ4l1SGgXAsmiI=)
                          3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: d2hFjD7xeVN3cyOnjASfx1gXiQEjM5kCyEH2NHogTpU=)
                          4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: eAvchTE2mjoaLizoiap/tIEL3DGgf3r4bWQpO2iGLTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2146 (0x862)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Validity
            Not Before: Aug 22 20:52:37 2025 GMT
            Not After : Aug 29 20:52:37 2025 GMT
        Subject: CN=68a8d895-e286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:ef:92:05:5b:cd:31:64:72:08:5e:74:dd:
                    e2:18:f9:e2:90:62:f6:a7:24:06:b9:14:f5:3b:db:
                    e9:7f:06:19:e0:7d:f5:8a:96:c1:90:b1:85:f7:a4:
                    3e:24:da:4c:5b:a9:f7:3d:c9:c7:37:df:b0:3e:b1:
                    d2:12:00:74:b3:0e:97:00:d4:63:f5:61:ce:8c:5f:
                    3b:45:d6:2d:6e:f1:eb:37:d1:08:e3:fa:9a:f1:75:
                    ec:3f:c9:b0:f3:57:86:bb:76:35:8f:73:93:a2:2e:
                    8c:9a:3f:0f:23:54:40:82:11:6f:79:da:c2:97:a1:
                    23:59:e0:c5:a0:ca:1e:1d:c1:24:54:d8:0d:6a:1f:
                    51:9c:77:1f:32:6d:cd:40:f3:7c:f2:2f:18:40:ce:
                    7a:fd:33:79:46:64:69:33:b3:21:b5:aa:ed:26:e6:
                    c9:d0:6b:6f:9c:f3:79:9e:14:97:bf:92:66:46:02:
                    80:19:bf:21:9c:b0:50:98:67:c0:a8:55:44:43:c5:
                    26:6c:bb:86:29:64:2b:38:a4:40:00:de:05:ca:d7:
                    55:40:30:db:85:77:25:32:52:43:e3:14:fd:6c:47:
                    f5:f5:07:c0:a6:17:fa:a4:30:30:b0:d3:70:b9:7d:
                    f4:3a:a0:a4:6a:3d:0b:df:e2:3f:b8:87:0d:41:90:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:AD:23:BF:8C:EE:C8:2F:AD:0C:C9:B6:47:C4:DB:D1:96:5E:CA
            X509v3 Authority Key Identifier:
                keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:92:d2:22:cd:7c:e2:70:0c:ca:f3:ac:46:6e:4d:54:01:56:
         75:e4:01:f9:49:1c:9d:fe:a8:a1:1f:be:98:c0:f2:c8:e2:46:
         2d:b9:1d:4f:c1:49:5f:a6:89:cb:d3:2d:48:da:a9:fa:7b:3e:
         8c:cb:40:5b:7b:33:ef:eb:67:b9:58:7a:f6:ac:da:15:9b:e5:
         be:89:3d:28:c1:80:fc:54:56:2f:af:fa:8d:61:50:f6:a2:fe:
         77:50:1e:10:53:79:45:2d:7d:f1:4e:f2:ec:ee:8a:0c:6b:b8:
         92:62:2a:b0:35:dc:cf:a0:08:49:d2:6e:50:f4:88:55:01:f6:
         70:16:10:43:ab:51:85:20:68:58:ed:31:62:db:ec:5b:76:ff:
         5f:d6:3f:9b:4d:b5:ce:4c:5b:58:87:be:7c:cf:62:c1:fb:bf:
         86:23:e1:e4:c7:60:be:2f:e8:87:5a:db:fb:bc:c8:11:f8:41:
         76:e2:fd:a6:af:f4:ed:19:2b:95:c3:d5:02:25:c6:ac:e2:e6:
         ec:b6:5f:88:1e:60:65:67:93:91:d8:a4:87:67:0d:64:0d:e9:
         ba:0f:cb:b5:c4:04:99:38:14:ce:84:f8:ef:a7:f8:88:72:f7:
         39:79:5a:98:0c:f1:c1:53:69:b7:03:ce:96:b4:6b:6d:2f:40:
         89:9c:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:25 2025 by rpki-client