Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
File:                     q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft (raw, json)
Hash identifier:          bNOn6Ycn8LDon8Jb43Kd6OgaLO3UFupC9GVBWbgEiw0=
Subject key identifier:   EB:04:71:43:92:6F:F0:EE:EF:94:04:88:D5:8F:7F:C2:E0:F9:85:5E
Authority key identifier: AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9
Certificate issuer:       /CN=A9182A08/serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
Certificate serial:       089C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
Manifest number:          0897
Signing time:             Wed 02 Jul 2025 20:50:15 +0000
Manifest this update:     Wed 02 Jul 2025 20:50:15 +0000
Manifest next update:     Wed 09 Jul 2025 20:50:15 +0000
Files and hashes:         1: q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl (hash: 790vS3EbOScInyxxm8LKPL2cwHTWDDnDs7kRIYufHJ0=)
                          2: AAA8232C123411ED90E8CA59C4F9AE02.roa (hash: +d1wvy8yQ3YoFLntNLyk9Fck1IbhN/uojUrTCK6EF5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl
                          rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182A08, serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
        Validity
            Not Before: Jul  2 20:50:15 2025 GMT
            Not After : Jul  9 20:50:15 2025 GMT
        Subject: CN=68659b87-d9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:b2:6b:a0:d0:30:78:89:3e:64:aa:ff:0a:
                    e3:37:0d:cf:ad:86:ee:aa:0e:1a:18:ba:0e:69:29:
                    26:74:2b:cf:3c:b0:7d:ae:74:94:c0:7e:c9:c4:0d:
                    f6:e9:af:ef:70:ba:6e:44:33:64:38:49:98:c1:0a:
                    c8:e8:19:8f:da:65:4e:a0:a8:85:36:bf:15:62:10:
                    8f:70:93:3f:bd:91:72:06:09:55:cc:16:55:42:1c:
                    21:ee:41:f6:8f:76:15:3f:52:61:80:21:49:1a:1b:
                    d5:3c:a1:8a:84:c1:82:81:92:aa:8e:be:23:c7:38:
                    29:d9:e7:0a:57:8a:ed:93:54:35:e3:a8:b3:e5:4c:
                    98:95:45:fb:22:bb:d6:c0:db:fa:19:23:2b:0e:0d:
                    5f:8c:d6:75:ce:17:82:aa:76:5b:bb:1b:34:4b:f6:
                    9a:4c:12:c8:63:10:e5:50:04:08:ae:dc:68:93:f8:
                    ae:ff:40:1b:e2:d1:68:90:a4:a5:ee:6b:23:a9:61:
                    d5:f0:f8:d7:01:2e:dd:c6:fb:a1:2f:5f:4e:c3:2a:
                    6b:9b:51:e9:52:bf:16:1c:1b:f9:e7:59:9f:8b:93:
                    af:b0:fa:3e:d7:da:64:f9:22:15:a0:4e:6a:62:93:
                    bf:43:37:f7:a3:80:c9:0a:d6:53:80:14:fe:c9:98:
                    b2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:04:71:43:92:6F:F0:EE:EF:94:04:88:D5:8F:7F:C2:E0:F9:85:5E
            X509v3 Authority Key Identifier:
                keyid:AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:04:0b:ca:58:cc:55:d6:25:17:bb:d1:8c:5f:a9:d4:e9:41:
         cb:bd:ab:e0:87:53:7f:00:42:42:3a:d3:68:c8:48:50:ab:ae:
         f9:21:a8:12:4a:f3:f1:ba:43:f5:c7:b0:f7:a7:bb:6b:71:33:
         bb:57:d3:39:db:a3:f2:dc:c6:28:e9:de:be:0b:c8:40:15:83:
         6c:ce:db:09:43:99:e2:2c:22:09:6e:44:77:b3:c5:a4:c1:11:
         0c:e4:b4:8b:da:ee:db:29:bb:12:9a:20:7d:d5:b1:f8:50:b8:
         a3:b4:98:58:32:08:dc:db:10:f3:2a:53:f5:32:5c:31:8e:29:
         6d:93:2d:b3:2b:a8:28:b9:c0:39:7e:47:85:a3:ff:0e:b6:5c:
         58:04:31:7c:c9:bf:4d:54:00:fc:ae:45:90:dc:e5:d8:ca:0d:
         a3:c1:0e:36:c7:ba:9b:1d:72:9f:71:93:7b:4b:33:06:47:01:
         48:2e:f8:bb:d2:93:2e:19:c3:84:8a:a3:50:e7:b6:ea:2b:12:
         97:b6:7c:dd:3e:99:da:19:d0:77:79:0a:84:81:74:5d:50:e9:
         07:3e:f6:6e:d5:3b:e6:2f:7d:52:65:5c:71:b4:64:3c:ae:46:
         9c:b8:44:a0:c7:c9:33:69:a2:70:58:c7:c9:75:45:ae:5b:27:
         ee:e9:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:21:10 2025 by rpki-client