Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File:                     qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier:          tLDAaWBQFbZFEChH17rmMk2HWGo3w7PfmUZI0G/zQGE=
Subject key identifier:   25:5E:D5:28:B3:95:C8:2D:A5:D9:4F:C5:C7:0A:5D:B0:35:E7:54:61
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer:       /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial:       0848
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number:          0831
Signing time:             Wed 02 Jul 2025 21:04:49 +0000
Manifest this update:     Wed 02 Jul 2025 21:04:49 +0000
Manifest next update:     Wed 09 Jul 2025 21:04:49 +0000
Files and hashes:         1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: EFvzmbu2f3geEuWmUuo5n+8lLOLDJ45LvI+yRi1aXTk=)
                          2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: QEmg34gYMLcRImmZXOGPqukjodjpiHJ4l1SGgXAsmiI=)
                          3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: d2hFjD7xeVN3cyOnjASfx1gXiQEjM5kCyEH2NHogTpU=)
                          4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: eAvchTE2mjoaLizoiap/tIEL3DGgf3r4bWQpO2iGLTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Validity
            Not Before: Jul  2 21:04:49 2025 GMT
            Not After : Jul  9 21:04:49 2025 GMT
        Subject: CN=68659ef1-283d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:79:7c:a8:93:23:e4:b0:15:c8:9e:3e:83:
                    32:27:48:6e:17:d2:3f:7c:7f:de:de:c6:47:1d:1f:
                    1a:e6:9f:f4:96:4f:da:35:22:3a:6e:f9:78:f4:af:
                    d7:7e:0e:26:81:9f:bf:34:12:de:f5:12:32:dd:10:
                    19:a3:68:19:99:fd:f6:b5:b6:39:b6:4f:53:2e:76:
                    73:5e:aa:4a:3e:41:49:13:0e:26:a5:9a:45:17:3f:
                    63:d7:72:e7:6a:13:fd:9c:e5:34:83:74:a4:d6:29:
                    78:b2:a3:ed:cc:c7:c8:89:63:81:89:20:80:b7:f8:
                    3e:48:31:a2:3e:c0:0f:8d:65:a8:1f:37:b6:fc:40:
                    cc:65:e1:a3:21:0b:14:ae:b3:64:c6:5e:da:8e:27:
                    a1:d9:46:4c:1c:e1:88:c9:de:3d:62:2d:35:8a:0f:
                    72:2c:86:3b:3e:f7:81:80:46:c9:20:50:22:c4:7d:
                    ce:a3:0c:2f:17:fa:b0:93:57:11:f2:b8:94:f9:01:
                    63:4b:14:c9:fd:9a:05:97:c3:35:ce:5d:f3:4b:e2:
                    b7:b4:94:d6:4e:62:43:bb:d3:27:2b:7e:eb:f1:d0:
                    3d:f6:6f:0a:bf:09:b0:b6:46:cf:5d:81:e2:e5:be:
                    1f:81:d9:f3:8c:9a:0d:25:a0:46:5a:f6:28:8e:a2:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:D5:28:B3:95:C8:2D:A5:D9:4F:C5:C7:0A:5D:B0:35:E7:54:61
            X509v3 Authority Key Identifier:
                keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:0d:00:3b:ab:bd:33:0d:1b:22:01:1c:ef:a3:f7:ba:e9:
         a8:1a:b5:98:e8:57:45:9b:56:9b:1a:71:89:ec:e1:e5:cc:61:
         ed:5f:38:e5:95:98:b9:84:ef:32:73:12:d0:7b:5b:7c:48:e8:
         ba:c7:12:29:7e:88:25:c5:62:cd:20:f6:88:a5:4f:de:ce:d4:
         73:d6:67:af:cd:4c:9c:c4:e4:3e:e5:65:84:0d:9a:a0:a2:a8:
         29:c4:03:b8:d8:2c:be:b1:84:ef:db:02:8c:18:fe:d0:3a:32:
         b2:de:12:f2:c1:4d:59:a5:18:42:97:61:ce:42:f1:70:7f:ba:
         7a:47:27:d9:9f:ad:f8:fb:79:25:5d:0e:95:1d:4a:76:6f:e8:
         ea:26:25:25:10:4d:29:83:ac:c6:ca:76:36:9f:d9:a1:25:83:
         8d:1e:36:3a:21:e4:28:7f:f3:84:e0:46:9e:66:8d:2d:2e:d4:
         27:54:80:d4:6f:53:d9:3b:3d:ec:52:71:3d:be:1d:49:b1:fc:
         9d:17:5b:63:53:c5:5a:7a:be:22:73:7c:1a:01:7b:7a:45:f6:
         61:e3:f8:65:6a:64:da:ed:58:f4:3e:e7:73:88:55:f3:06:c1:
         a4:65:34:00:a3:b0:f1:25:87:8d:0d:4f:7c:91:fb:20:6f:03:
         1a:9d:44:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFQjAxMTAvBgNVBAUTKEFBQTYyREI0N0YwMTJCMjZERDg2OThFMkNDMzVERThG
Mjk0Mzc3NjEwHhcNMjUwNzAyMjEwNDQ5WhcNMjUwNzA5MjEwNDQ5WjAYMRYwFAYD
VQQDEw02ODY1OWVmMS0yODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5B5fKiTI+SwFciePoMyJ0huF9I/fH/e3sZHHR8a5p/0lk/aNSI6bvl49K/X
fg4mgZ+/NBLe9RIy3RAZo2gZmf32tbY5tk9TLnZzXqpKPkFJEw4mpZpFFz9j13Ln
ahP9nOU0g3Sk1il4sqPtzMfIiWOBiSCAt/g+SDGiPsAPjWWoHze2/EDMZeGjIQsU
rrNkxl7ajieh2UZMHOGIyd49Yi01ig9yLIY7PveBgEbJIFAixH3OowwvF/qwk1cR
8riU+QFjSxTJ/ZoFl8M1zl3zS+K3tJTWTmJDu9MnK37r8dA99m8KvwmwtkbPXYHi
5b4fgdnzjJoNJaBGWvYojqKiXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVe1Siz
lcgtpdlPxccKXbA151RhMB8GA1UdIwQYMBaAFKqmLbR/ASsm3YaY4sw13o8pQ3dh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC82NUQxREIyQ0RB
RUExMUVBOTU4RUIzNUJDNEY5QUUwMi9xcVl0dEg4Qkt5YmRocGppekRYZWp5bERk
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FxWXR0SDhCS3liZGhwaml6RFhlanlsRGQyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEVCMC82NUQxREIyQ0RBRUExMUVBOTU4RUIzNUJDNEY5QUUwMi9xcVl0dEg4Qkt5
YmRocGppekRYZWp5bERkMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8pw0AO6u9Mw0bIgEc76P3uumoGrWY6FdFm1abGnGJ7OHlzGHtXzjl
lZi5hO8ycxLQe1t8SOi6xxIpfoglxWLNIPaIpU/eztRz1mevzUycxOQ+5WWEDZqg
oqgpxAO42Cy+sYTv2wKMGP7QOjKy3hLywU1ZpRhCl2HOQvFwf7p6RyfZn634+3kl
XQ6VHUp2b+jqJiUlEE0pg6zGynY2n9mhJYONHjY6IeQof/OE4EaeZo0tLtQnVIDU
b1PZOz3sUnE9vh1JsfydF1tjU8Vaer4ic3waAXt6RfZh4/hlamTa7Vj0PudziFXz
BsGkZTQAo7DxJYeNDU98kfsgbwManUSl
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:12:38 2025 by rpki-client