Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
File:                     qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json)
Hash identifier:          QANrpIHy45TpVS13+rgGPbinM5SbZy2wFU7gA2lu5Rc=
Subject key identifier:   92:76:9B:6B:5E:C6:B8:85:08:36:D4:22:CC:6B:83:0C:FF:1E:0A:47
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Certificate issuer:       /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial:       34E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
Manifest number:          34C1
Signing time:             Sat 28 Jun 2025 14:43:56 +0000
Manifest this update:     Sat 28 Jun 2025 14:43:56 +0000
Manifest next update:     Sat 05 Jul 2025 14:43:56 +0000
Files and hashes:         1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: iaWpOLE390JNrBzC2LHpngOd58Yd/eGCoykv+WuHFHM=)
                          2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY=)
                          3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 6oWZaqd4YEA2LX4UVdAVOpmAruJNhp7dksiMD1n7i0s=)
                          4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: 51Xns0oB8DIUPAAqRrljxkibyJY0Qjy6OKFbsk2hMYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
                          rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 14:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13542 (0x34e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
        Validity
            Not Before: Jun 28 14:43:56 2025 GMT
            Not After : Jul  5 14:43:56 2025 GMT
        Subject: CN=685fffac-0314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:5c:cf:0f:f6:ef:7e:88:a5:cf:81:91:9d:
                    20:b2:e1:53:0e:c0:4b:27:6b:1a:3f:db:16:59:28:
                    ee:25:30:67:3f:84:db:6d:d2:b1:32:d6:21:23:a1:
                    39:a8:49:f4:16:4c:45:5e:ef:20:9a:c4:14:ee:22:
                    19:c1:6b:44:96:63:d4:11:89:e2:84:b7:b0:81:0a:
                    f7:ff:90:86:bc:8d:f6:a1:d1:c1:f0:20:d9:2e:e8:
                    12:50:76:78:05:6e:12:23:13:c2:2d:03:0e:74:75:
                    e1:c2:6c:e8:c5:1d:00:49:24:10:e4:5f:e2:0b:3c:
                    1d:6e:69:d8:61:f1:76:ac:5a:2f:cb:34:50:f2:99:
                    ad:6a:be:6c:6e:4d:12:83:c4:3f:6a:17:4d:fb:51:
                    e8:de:f0:45:79:40:11:9d:66:9d:ca:30:74:e2:63:
                    41:c4:07:04:92:f4:88:62:e9:9a:05:78:ad:6a:b3:
                    00:04:f3:e3:26:7f:84:b8:9e:44:f0:1e:fb:15:f2:
                    5b:6f:66:8f:85:fd:45:c0:ca:b3:b8:65:35:8c:77:
                    8c:bf:60:43:be:8b:65:f3:0d:e3:fc:3e:de:46:e5:
                    76:ec:ab:93:cf:9a:6a:67:77:43:45:62:db:5c:d8:
                    30:50:22:8d:e9:7b:95:6d:d2:9b:f7:c3:84:2b:bb:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:76:9B:6B:5E:C6:B8:85:08:36:D4:22:CC:6B:83:0C:FF:1E:0A:47
            X509v3 Authority Key Identifier:
                keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:43:6c:44:2b:9d:4b:67:7b:a3:18:b3:14:ac:9d:72:2b:dd:
         45:f7:95:71:33:3e:12:8d:c7:95:76:70:2b:c9:05:50:59:2b:
         f3:95:3c:9d:7e:23:e6:b7:2a:8e:09:8a:4a:e7:61:90:fb:02:
         22:fb:fd:66:08:fd:57:0a:8e:a9:44:dc:6d:46:2f:82:c0:1c:
         33:ac:22:8e:30:df:f0:72:37:8f:4e:89:24:a1:25:a2:84:9f:
         c5:01:b3:b9:f6:c0:df:5c:d3:72:78:6e:b0:02:4b:40:36:a1:
         79:46:4b:62:61:6f:f1:00:00:64:91:af:98:f2:e7:ce:96:ae:
         16:fe:01:57:e5:6f:41:b9:d9:a3:50:83:2d:18:98:89:03:f3:
         29:0c:9c:6a:e1:c4:b0:a5:5e:fe:45:18:bd:3a:c0:15:85:70:
         19:75:d4:ad:40:4d:4f:b5:3a:05:f2:0e:62:52:98:be:39:b3:
         29:0c:b7:68:b9:17:ff:f0:13:96:17:68:7b:73:a1:12:85:6b:
         e2:1e:b8:c1:a8:ba:42:d2:8f:28:4c:eb:37:8e:92:3c:a6:88:
         f9:4f:3d:2f:ca:be:03:7a:96:36:a5:71:41:d2:b2:8c:01:d7:
         87:f3:63:46:fa:a1:1a:9d:15:d3:88:62:18:57:e3:3a:9d:ec:
         e7:43:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:13:22 2025 by rpki-client