Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
File:                     qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json)
Hash identifier:          sPswl0pnsiS8lxJpo+8b5PzUWLKqMcD2SzEss/L+5rE=
Subject key identifier:   76:62:3C:10:89:16:98:B9:12:5C:90:7D:16:3F:46:5F:09:3B:A4:7B
Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
Certificate issuer:       /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Certificate serial:       16E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
Manifest number:          16D8
Signing time:             Fri 22 Aug 2025 16:45:42 +0000
Manifest this update:     Fri 22 Aug 2025 16:45:41 +0000
Manifest next update:     Fri 29 Aug 2025 16:45:41 +0000
Files and hashes:         1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: 9/g4FpvK/MWhRVhyuUMkTS2f+JJZX8YsYxuiA08ESMY=)
                          2: BAD2356E153411E892E6D468C4F9AE02.roa (hash: ZwNXUOwbbGwEvsT0YYSZl1NqDpf0fkjGMPzYp65wdFE=)
                          3: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: fI6pWEKhcfnz5T7b0Qu0ji5oi9dMvf4xCNtRiu+OZoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
                          rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5864 (0x16e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
        Validity
            Not Before: Aug 22 16:45:41 2025 GMT
            Not After : Aug 29 16:45:41 2025 GMT
        Subject: CN=68a89eb5-c1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:c7:16:48:0a:00:ef:49:a7:fa:c4:6f:38:
                    7f:33:8d:96:5f:05:3a:f5:ea:95:d0:9b:98:00:27:
                    57:52:26:76:87:7c:be:44:93:77:bb:72:21:35:de:
                    8c:eb:df:ec:05:ba:25:61:63:dd:52:53:2e:45:84:
                    f1:1d:a3:f8:6d:2c:7f:22:ba:68:96:e8:e5:42:aa:
                    4e:92:34:91:26:40:c5:54:4d:55:f1:da:b6:7c:e7:
                    da:98:29:4d:20:1e:4c:0a:a6:f8:0c:2a:8b:e7:2f:
                    af:8d:43:83:a9:dd:f6:7e:58:4a:c1:d1:62:21:5c:
                    e4:b5:ec:74:ed:61:25:8e:8d:c8:a7:f7:51:e6:96:
                    4a:79:fa:4b:6d:fe:8c:43:71:fd:6d:4b:ac:58:94:
                    02:ff:04:d0:b7:95:03:5d:47:cf:26:71:7d:e6:ba:
                    6b:2d:9c:71:f3:fd:b1:96:b1:15:af:f7:43:d7:68:
                    26:e4:e6:fb:a7:a3:d8:a5:2a:e2:41:48:c9:01:bf:
                    0e:cb:ac:a9:4e:44:4e:b5:2f:4f:6d:6a:09:89:5e:
                    e1:5e:e0:2c:6a:b4:2d:52:14:6c:b3:cc:27:c1:c4:
                    aa:f1:4b:38:6c:b9:37:7e:0d:c3:13:b0:cb:96:f4:
                    e3:d9:35:8f:35:52:f5:69:0f:32:66:ba:dd:21:84:
                    5c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:62:3C:10:89:16:98:B9:12:5C:90:7D:16:3F:46:5F:09:3B:A4:7B
            X509v3 Authority Key Identifier:
                keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fd:7c:37:07:c7:74:aa:33:99:e1:b0:e7:92:55:19:bc:9d:
         5b:7d:c6:d2:86:e7:a3:ae:7d:52:a8:ca:15:0b:b5:6c:0e:f2:
         3d:e9:be:76:57:81:3d:93:68:c8:c9:05:10:12:c5:a8:c1:e2:
         60:e6:cc:25:fd:d7:9c:06:72:2b:ca:4d:4e:38:98:c3:48:7e:
         e5:19:b0:76:31:bd:82:30:78:eb:53:2c:e1:40:cb:73:14:65:
         36:1f:d4:9b:cb:23:e3:b1:97:5d:68:5f:d0:00:c8:1b:05:4a:
         6a:82:51:71:ed:79:24:a7:ae:f0:4c:d2:a4:88:fe:7d:bf:21:
         6d:c6:eb:38:06:01:9e:d5:c8:3d:3b:a2:4b:7b:14:d7:99:ec:
         22:44:33:3d:d3:18:3c:ec:9d:f0:f5:00:14:60:4a:8f:4a:62:
         59:17:87:44:28:b3:64:ca:bb:dc:19:1f:2a:8b:08:d9:cd:d3:
         d6:a6:f7:f9:4e:61:d8:2c:e1:22:cb:d0:75:6b:21:17:5a:8d:
         cf:af:b5:d4:39:44:94:96:23:68:81:4a:7a:03:ed:f4:e0:26:
         97:a0:72:22:5d:dd:cc:49:c0:3b:6f:79:fb:af:96:a6:25:9f:
         8c:84:8c:c6:97:1b:be:6b:9e:ae:bd:e5:a8:e5:4f:b0:54:ec:
         7f:5d:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:30 2025 by rpki-client