Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
File:                     mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json)
Hash identifier:          Uv5QR19sE+3W8Wb/vjvKhGmNaVikrOeUdvx/0qKY270=
Subject key identifier:   01:2D:33:E2:6A:4D:1E:F4:3C:9D:81:B3:3C:D1:38:A9:A3:74:61:86
Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
Certificate issuer:       /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
Manifest number:          1B
Signing time:             Sat 23 Aug 2025 08:10:41 +0000
Manifest this update:     Sat 23 Aug 2025 08:10:39 +0000
Manifest next update:     Sat 30 Aug 2025 08:10:39 +0000
Files and hashes:         1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: i8+UistbiEDUF60iz3LoQSyBEx7rAU4c9k0Ywg+QQBw=)
                          2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: lMMp/Z5aJImzHek/MJHR1M6D45Ar+B1jRsvx5k7nHRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
        Validity
            Not Before: Aug 23 08:10:39 2025 GMT
            Not After : Aug 30 08:10:39 2025 GMT
        Subject: CN=68a97780-85c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:72:fb:e4:9e:67:bc:c7:73:d1:46:83:37:
                    02:83:b9:72:d5:11:0e:da:83:7e:fb:4c:df:f7:ae:
                    ce:f8:15:cb:a5:fa:92:c7:9c:72:2f:2b:20:8b:3b:
                    50:e0:a3:f7:10:e2:20:fe:24:80:3b:7c:28:ab:58:
                    0f:31:11:5d:bf:c8:e9:04:28:59:a5:64:f8:fc:ef:
                    12:d4:b3:64:12:0a:20:be:f7:57:1a:ab:f6:36:66:
                    03:c4:df:51:d7:85:3b:00:9d:56:32:9e:ab:7c:50:
                    b3:8a:14:dc:f0:41:15:62:52:71:c6:e6:e6:b7:4b:
                    95:eb:15:2e:27:54:23:a2:b1:e0:2c:56:e0:04:4c:
                    65:95:5c:a6:fb:d8:9d:87:3c:f3:66:83:09:ed:4b:
                    b1:ba:8d:75:83:d0:56:59:7a:a4:62:66:42:d2:3e:
                    4c:43:d2:fe:1d:f1:13:76:25:b3:f9:96:81:8e:cd:
                    44:d8:47:5f:3b:23:9d:bc:ad:99:c1:6e:66:62:70:
                    41:a0:74:0b:cb:b9:3d:18:79:f1:a4:ca:77:d5:97:
                    46:2e:88:10:01:94:f9:d7:5e:e4:e9:cf:c8:5b:43:
                    51:4a:89:ba:37:32:be:62:20:a5:08:d0:dd:8c:73:
                    99:e4:c4:c7:9a:9e:bb:20:37:48:ea:20:05:bf:61:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2D:33:E2:6A:4D:1E:F4:3C:9D:81:B3:3C:D1:38:A9:A3:74:61:86
            X509v3 Authority Key Identifier:
                keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:c3:6b:3c:67:c9:f0:48:37:0f:22:93:02:1b:8a:9e:53:c3:
         d5:9b:88:83:e2:3c:70:49:97:4f:25:1c:fa:22:22:8a:36:72:
         4c:5e:ae:24:93:bc:ca:a2:92:16:3e:7f:a9:6d:02:63:14:d0:
         c9:ad:10:38:35:d9:0e:4d:d3:af:32:53:8d:74:42:bd:b7:c0:
         ac:cf:8b:d8:45:88:da:4b:97:d1:8d:a7:13:cf:ff:96:c1:49:
         5a:c0:a9:53:b8:c5:3b:a5:5e:a7:de:16:e0:e6:a9:c4:4f:f0:
         12:5b:a4:8a:01:9f:37:8b:1e:98:fe:17:06:db:52:e4:d3:94:
         7d:1d:51:9f:1d:12:5d:c4:14:9a:7a:fa:f8:6c:2f:75:70:a4:
         4e:0e:cf:94:97:3f:57:9a:26:db:05:3f:02:94:c0:2c:ec:93:
         22:80:f9:bf:b7:6b:cc:23:54:52:85:47:0c:73:19:e7:42:d5:
         ee:3c:f2:44:d8:f6:fb:52:60:6c:c5:be:64:1c:37:f8:d9:0f:
         02:32:ca:32:ab:1c:dd:93:1e:e2:f3:f4:29:cd:5f:59:fc:bc:
         56:16:d6:88:a9:93:bf:2e:97:6a:60:82:3a:81:f1:83:e1:0e:
         13:62:36:b5:cf:e4:28:90:27:1b:68:49:3f:c9:89:9b:b1:a6:
         a8:35:4a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:16 2025 by rpki-client