Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
File:                     QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json)
Hash identifier:          in4GWLGxd6wlrpNdqjh1ZDpNG7JHPJTyIj3uQQ4XhUk=
Subject key identifier:   84:AF:FA:80:FB:F3:45:A5:11:D9:4B:F2:CB:B2:22:32:19:8D:01:10
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Certificate issuer:       /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
Manifest number:          018A
Signing time:             Sat 23 Aug 2025 03:39:05 +0000
Manifest this update:     Sat 23 Aug 2025 03:39:04 +0000
Manifest next update:     Sat 30 Aug 2025 03:39:04 +0000
Files and hashes:         1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: 7VS6qSkx/Qg8ZQkQ/1u6DH34bCxiyez/M4Q2sV/zYak=)
                          2: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: GNgH54VuveRBqhIirbO5+23rkV4blzguEnK1jVi0hnU=)
                          3: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: uhmsph/UZ+El90Yxy7WpECGs3tuN2cOfnCiiAfNg+oE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
                          rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
        Validity
            Not Before: Aug 23 03:39:04 2025 GMT
            Not After : Aug 30 03:39:04 2025 GMT
        Subject: CN=68a937d9-60e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:11:dc:25:a8:20:96:0b:56:6e:a8:8c:27:
                    f0:63:c8:a9:b9:f6:4b:f3:cd:08:04:92:fc:fc:0f:
                    8c:f7:78:ae:e9:97:a2:ca:87:fd:26:39:a6:74:ed:
                    a8:11:6a:cf:7c:8f:f2:9c:2d:3d:eb:cc:67:46:a1:
                    cd:be:af:cd:c5:af:47:7e:0f:09:19:12:31:6f:03:
                    29:26:17:a2:fb:66:c2:41:9a:33:fe:14:82:f6:5e:
                    74:6a:fc:c6:a2:e2:11:fb:cb:99:8a:a7:67:d1:9f:
                    e7:85:98:83:13:c4:64:69:a1:d4:58:bd:9a:d4:97:
                    ba:fa:53:3a:e4:b4:2d:2b:91:4d:97:2c:85:5f:0d:
                    d9:1b:f1:25:ff:8e:30:af:74:87:02:ea:2a:26:b0:
                    b5:cf:aa:5f:e2:9a:d9:84:15:1b:4d:a2:fc:b6:3a:
                    e2:36:14:99:83:ce:24:c1:0c:e2:ba:6e:82:42:f0:
                    49:26:3d:e1:62:ff:0e:9c:63:62:c1:b7:a2:5b:95:
                    03:ac:a6:f1:8e:ab:77:43:e8:70:fd:eb:e8:e4:60:
                    78:5a:dc:6b:45:d1:92:d3:a7:e1:83:61:00:e8:ab:
                    a0:ff:49:df:9a:99:68:ca:d9:af:03:1e:61:9d:d0:
                    d1:2d:9b:4c:64:1f:75:cb:7b:65:71:1c:55:03:1e:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AF:FA:80:FB:F3:45:A5:11:D9:4B:F2:CB:B2:22:32:19:8D:01:10
            X509v3 Authority Key Identifier:
                keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:7a:57:d3:b0:f0:f8:cb:a9:b1:3b:e5:a8:b0:d5:02:bb:
         d8:60:19:64:9b:08:d5:66:c2:92:90:99:83:a8:dd:11:8b:f5:
         f4:e0:4e:26:b6:f7:3e:2d:38:06:43:37:39:a9:53:1e:ea:a0:
         f1:52:b0:ba:e4:22:ec:b2:e2:79:8e:f9:84:bf:a9:09:89:c6:
         da:45:c5:74:a3:33:c3:31:63:51:41:05:e7:36:a9:c1:e5:0c:
         5f:45:76:35:6a:69:2e:b4:1b:b3:bd:d6:d4:9c:90:c9:4b:09:
         76:25:45:f3:37:ae:65:4c:73:94:b6:32:52:be:55:d9:9d:cb:
         90:b4:4e:b1:bb:9a:f0:c6:e3:e6:39:86:5b:c4:fa:75:80:f0:
         16:7d:ee:d3:3d:04:2c:53:b9:68:70:7f:87:94:fa:ce:77:8f:
         23:a5:e6:6f:ca:a6:fb:60:12:0e:0e:10:d7:1d:74:a6:c4:91:
         80:29:85:5c:14:2e:b3:12:36:5a:e5:81:3f:f2:04:13:c3:ab:
         8a:f6:46:e9:9c:ba:b4:be:7b:a2:db:bf:bc:29:2b:56:ad:50:
         15:f6:1c:f1:60:09:57:18:08:f8:ea:a1:33:98:bc:54:68:31:
         50:48:40:46:ed:87:83:ac:8f:de:64:a1:e8:60:c5:f2:21:f9:
         a2:b7:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:44 2025 by rpki-client