Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File:                     QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier:          dUvEj3WY4XqIFrdC/PK/Mcriz8Gtq4AvUQkyalMWJ3o=
Subject key identifier:   C7:F1:49:CA:FA:16:15:7A:74:39:D5:CC:46:F4:AF:C5:5A:89:6E:D4
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer:       /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial:       0844
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number:          0838
Signing time:             Fri 22 Aug 2025 20:53:48 +0000
Manifest this update:     Fri 22 Aug 2025 20:53:48 +0000
Manifest next update:     Fri 29 Aug 2025 20:53:48 +0000
Files and hashes:         1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: SDYAVpMeovn5KPPxjpatVkuzUgSqlouAIP0GP4ixVPw=)
                          2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: bG1CPCZHlQw0haejcYIgqU237lgngpKLBdJOI7duxPA=)
                          3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: rI+OmwliYI4AIuxYGKkkX7tZiKeGui6vIR2hfPTKsLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116 (0x844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
        Validity
            Not Before: Aug 22 20:53:48 2025 GMT
            Not After : Aug 29 20:53:48 2025 GMT
        Subject: CN=68a8d8dc-9dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:76:11:b9:eb:1d:ed:72:0a:e7:6c:84:8f:
                    7d:79:2f:17:05:4f:bf:a0:60:25:1a:58:f3:75:d6:
                    81:0e:f8:04:07:6f:f3:17:a2:ac:f0:ea:51:d2:82:
                    3b:63:16:32:32:41:92:c0:1a:c0:71:ec:38:8b:d6:
                    d3:9d:bd:40:cf:b0:44:fc:df:6c:b6:66:a0:ea:30:
                    b9:c3:68:36:67:41:31:81:24:32:40:b5:25:86:69:
                    cb:69:07:a0:ed:61:83:bc:c5:13:ac:a4:31:02:0a:
                    34:37:ad:a8:17:cf:1f:09:15:d4:8e:00:19:0d:01:
                    f2:17:89:1d:33:49:6d:a9:43:55:12:af:6b:00:e1:
                    ac:1b:83:fe:89:e1:fb:dc:44:34:f8:a3:9b:3c:bb:
                    3c:01:7e:ce:8f:44:66:7a:36:5a:12:16:c4:37:da:
                    cb:12:7e:7f:d8:c8:94:37:a4:ec:50:fa:95:99:b7:
                    1a:28:36:3c:33:94:fe:bd:28:23:6e:87:c3:c7:50:
                    3d:ad:1e:03:7a:5f:83:e7:08:ae:11:84:5a:6e:bf:
                    f5:c7:d7:53:e5:dc:95:70:79:e2:2e:e2:6c:e2:47:
                    60:f5:e8:21:e0:f3:e3:01:11:83:5a:27:24:c9:ee:
                    ef:99:9f:26:1a:f4:3b:dd:15:5a:51:c0:34:8f:1f:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F1:49:CA:FA:16:15:7A:74:39:D5:CC:46:F4:AF:C5:5A:89:6E:D4
            X509v3 Authority Key Identifier:
                keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:5e:ca:55:f2:3b:8d:71:2a:01:c9:c5:70:f0:7b:5f:ab:39:
         f7:20:3e:f6:af:6c:a0:70:a5:4f:6e:f5:c9:d3:67:e8:25:c4:
         f4:df:eb:96:bf:b4:3f:2b:09:15:02:eb:2d:dc:5a:1a:36:65:
         8c:f0:a7:b8:fd:3c:68:25:48:46:3c:32:65:c4:0c:12:1b:a5:
         1c:00:90:65:09:1d:c0:13:ed:1c:58:c5:2f:01:d4:2b:ec:8b:
         ed:39:7d:b5:f6:be:1b:83:fd:e5:06:04:36:b2:eb:d9:f7:c9:
         80:f2:e6:ac:79:49:da:e2:c0:dc:77:b1:f1:d0:7b:87:eb:77:
         02:a9:ed:a4:83:d4:ed:55:71:19:55:6f:50:de:fa:d3:4d:5c:
         19:94:0c:26:2c:91:87:a0:29:9f:f6:fa:f7:75:8d:bf:ba:20:
         71:c7:f1:96:2b:15:e8:2c:b1:70:c7:cb:ff:34:06:a7:fd:a2:
         20:e6:fe:e2:e6:6e:39:f0:0c:f2:1d:fe:13:34:6a:68:4e:44:
         40:22:4b:89:97:df:32:f2:ae:80:e5:03:84:cf:4e:31:60:d0:
         1d:3e:60:02:db:44:0c:49:9e:a3:b9:5c:5e:d9:7a:09:3b:e6:
         4d:85:80:c3:fa:26:a2:ca:8f:37:55:c0:4a:8a:cc:02:fd:44:
         82:2b:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:47 2025 by rpki-client