Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File:                     qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier:          IFGi1X9cwcTVIUm6tpk8mv4aijIKGDElrGkq9e/29K8=
Subject key identifier:   36:7C:E7:7A:18:4B:E0:B8:B3:9A:ED:79:85:45:BD:B4:40:A5:EC:92
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer:       /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number:          015D
Signing time:             Sat 23 Aug 2025 04:37:45 +0000
Manifest this update:     Sat 23 Aug 2025 04:37:45 +0000
Manifest next update:     Sat 30 Aug 2025 04:37:45 +0000
Files and hashes:         1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: Z8WvHzC+3tO1IHTY8+hQJmtNi1PxJOmebpTMbBDiWrw=)
                          2: C352565AC6E011EF87D90241C4F9AE02.roa (hash: mUqqXY0c6pz96Csa4vpgVVN0TcEzh2ALUeu6fy0AUoM=)
                          3: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: uACmpnSBSy2IF2u/5ZZ5RmpW3FYah3J395Q52mX87Ds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
        Validity
            Not Before: Aug 23 04:37:45 2025 GMT
            Not After : Aug 30 04:37:45 2025 GMT
        Subject: CN=68a94599-5f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:79:01:25:fc:34:83:74:5f:3b:60:da:7c:
                    8c:70:1d:9d:97:01:10:45:7f:cc:61:b6:66:d1:dc:
                    32:8c:db:59:c2:3c:7d:9c:38:dc:11:a5:38:12:7c:
                    f4:c9:29:92:60:fe:9a:50:79:45:e7:7c:41:84:09:
                    a6:d5:db:0d:09:95:47:17:67:c0:e2:55:cf:87:93:
                    82:5d:c5:d1:ef:b5:43:ff:02:1a:a4:02:82:dd:e1:
                    f8:d2:e1:92:42:0a:54:e6:5c:da:59:f9:10:f3:84:
                    4e:6e:d6:2e:f5:e0:8f:ee:b2:cb:bc:d2:b4:ad:69:
                    e5:f5:d8:6f:ff:e1:f5:f4:5b:c7:57:4c:3f:fd:52:
                    6e:a2:15:41:b6:70:5d:e8:59:72:11:6b:37:ce:a1:
                    68:02:8b:4e:db:15:ea:b7:dc:c0:1e:71:b8:fe:cc:
                    3b:b0:3b:ac:38:5f:dc:f4:6c:4f:73:5b:1b:ba:d9:
                    34:65:15:6c:3b:97:21:9b:74:72:3a:d0:f1:57:70:
                    80:da:9c:4d:46:c1:5f:95:75:d1:16:cd:47:66:20:
                    05:2f:01:46:f6:3e:e8:a2:f0:a1:c4:e8:42:55:00:
                    4e:c3:0f:7f:ee:d5:2c:8b:6e:2d:9d:55:21:3f:9d:
                    96:44:02:0e:bd:2f:71:59:20:d8:15:15:d2:f9:94:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7C:E7:7A:18:4B:E0:B8:B3:9A:ED:79:85:45:BD:B4:40:A5:EC:92
            X509v3 Authority Key Identifier:
                keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2e:b4:71:bf:f4:bc:98:40:16:b9:b8:80:e9:70:3b:95:fc:
         19:fe:6d:10:89:86:04:2a:5c:7a:78:0c:9f:6f:7d:6d:d6:83:
         b9:71:fd:8e:de:43:5c:a2:10:ad:1d:05:e5:50:88:25:54:ba:
         90:a0:87:3d:52:2a:be:af:e4:77:ab:42:89:b8:58:02:3c:23:
         f7:67:89:08:22:cb:e5:a1:50:a0:ef:c8:c3:cd:c0:8a:01:6b:
         91:67:d9:0d:9a:8d:39:cd:44:14:4b:a4:ac:8f:9e:ca:8c:b5:
         46:98:16:26:25:2a:40:96:c5:0e:ae:79:5b:a8:56:92:e5:a3:
         61:d2:94:51:ec:fe:a8:15:c9:f3:1b:fb:6b:2b:9f:ad:3e:f7:
         45:6b:cf:20:69:84:6f:90:f2:ba:8e:c4:3b:b7:63:bc:05:02:
         fd:9f:45:5d:63:8a:1d:34:2b:21:2f:78:54:bc:25:bf:2c:21:
         c1:3f:81:3f:c9:ce:c0:10:6d:bb:0c:2c:98:d1:68:d6:2c:4d:
         2c:d3:08:4f:8c:70:ec:f2:e8:9b:ad:67:a4:09:c7:79:51:93:
         2d:c4:96:5e:5e:5d:f4:5f:ce:e9:12:b2:eb:5f:03:63:d7:63:
         bc:8a:ab:fe:63:23:14:08:63:30:2e:13:94:a0:10:e9:92:53:
         61:19:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:52 2025 by rpki-client