Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
File:                     coqCQJLldBJUu5LVl3IzYaBL8pI.mft (raw, json)
Hash identifier:          r9NazXTPrftCAoVtew1KcgLe0Hi6iDFPmX+aQd1HKJQ=
Subject key identifier:   10:99:77:90:28:82:5A:C8:D8:1D:1C:EA:A9:02:3A:57:6C:83:A1:CA
Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
Certificate issuer:       /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Certificate serial:       0D33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
Manifest number:          0D24
Signing time:             Fri 22 Aug 2025 18:09:51 +0000
Manifest this update:     Fri 22 Aug 2025 18:09:51 +0000
Manifest next update:     Fri 29 Aug 2025 18:09:51 +0000
Files and hashes:         1: coqCQJLldBJUu5LVl3IzYaBL8pI.crl (hash: 3xdWbVSzRutMYM+KE5BrrCszK0ylsxpphwndd5sJoaU=)
                          2: 08CA5724E2B111E9A73CAB51C4F9AE02.roa (hash: MGzEWIZ/EdtTbp6/FRF/2CJMkfaDmSh75fKXCwfETHM=)
                          3: 9D85178EE2AF11E9919C1D4EC4F9AE02.roa (hash: Io6gCyR0FtQ3xcV6SmfOiqcTWURvoXsQUWodciVqXV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
                          rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3379 (0xd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292
        Validity
            Not Before: Aug 22 18:09:51 2025 GMT
            Not After : Aug 29 18:09:51 2025 GMT
        Subject: CN=68a8b26f-36da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:9d:6f:38:a2:3e:eb:61:3c:f0:32:f4:1e:
                    25:73:ed:65:19:3e:81:66:5f:bd:37:ce:95:68:41:
                    5a:e0:dc:32:b3:16:f5:a4:d8:b5:5a:8f:e7:cd:9c:
                    e6:ea:d7:e4:bb:be:75:99:f8:84:49:d5:a2:fa:bd:
                    e1:f5:8c:78:4a:90:f3:b6:89:a8:49:8e:5e:5b:ac:
                    c1:f6:79:fe:33:ba:e3:42:fa:1b:78:f3:c8:21:98:
                    bb:de:68:d2:1a:cb:30:78:62:d4:83:8f:40:2a:5b:
                    e6:3e:16:97:89:36:09:ff:64:a7:0e:be:3a:62:5d:
                    84:97:f4:db:26:80:a5:00:37:ae:19:6c:ae:88:a7:
                    9d:41:c7:a8:c2:b0:01:80:a3:7b:bc:13:10:fb:c2:
                    9b:9c:90:67:2d:af:1c:66:29:22:99:db:36:76:6f:
                    32:46:04:c4:7a:c7:a8:8b:c7:19:84:3a:cf:19:80:
                    76:bd:81:a5:2f:cf:dd:2c:95:54:62:37:72:e9:4e:
                    c5:37:46:bf:d9:69:94:fa:68:a8:f7:3a:e4:db:7f:
                    d5:b8:a3:f5:b7:40:bd:ab:45:25:b1:a3:76:43:d8:
                    55:d7:48:db:30:b9:00:ca:64:13:b6:ef:13:57:44:
                    da:f7:97:95:03:be:02:8c:94:30:16:a6:57:0c:8e:
                    50:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:99:77:90:28:82:5A:C8:D8:1D:1C:EA:A9:02:3A:57:6C:83:A1:CA
            X509v3 Authority Key Identifier:
                keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:91:72:04:23:1f:7a:f5:39:5f:1e:c9:c9:e6:0a:e3:64:6b:
         4a:6c:46:07:5d:93:a6:01:df:35:75:a0:fa:c1:1b:36:29:16:
         92:77:76:47:fa:62:97:0f:e7:cb:e5:e2:26:db:35:51:49:1a:
         0a:fe:b6:95:82:14:52:97:71:8a:9c:fd:0d:bc:80:42:c0:49:
         40:64:f7:08:8d:c7:26:f7:37:dd:70:93:4b:b8:67:8e:7f:53:
         01:9a:61:c7:4a:87:57:ea:bc:e0:29:a4:2b:26:46:b0:43:98:
         95:d6:4b:80:94:25:1d:0c:e8:30:de:68:a5:e5:32:5b:43:2b:
         1e:7e:ba:41:eb:9a:fa:0f:46:b6:d1:29:3f:f4:a9:e9:56:b8:
         79:a0:e3:d6:75:69:22:52:84:ad:d6:d6:99:5d:4c:cb:b8:1f:
         bf:ec:ec:3d:ff:52:67:c9:ae:eb:af:9c:ae:be:e7:e6:8b:f8:
         e8:12:7f:d9:d7:77:15:61:84:64:ad:b9:03:4d:7d:4f:8a:de:
         7f:71:97:1a:9c:f9:ce:d9:15:09:2b:e1:56:52:87:00:1c:44:
         eb:cd:17:04:8b:38:3f:c6:4f:70:30:9c:96:a1:30:42:2c:4d:
         52:b0:9c:d9:cf:60:05:be:89:60:27:88:3d:a3:86:6a:77:c3:
         bf:93:a9:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFCNjExMTAvBgNVBAUTKDcyOEE4MjQwOTJFNTc0MTI1NEJCOTJENTk3NzIzMzYx
QTA0QkYyOTIwHhcNMjUwODIyMTgwOTUxWhcNMjUwODI5MTgwOTUxWjAYMRYwFAYD
VQQDEw02OGE4YjI2Zi0zNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKidbziiPuthPPAy9B4lc+1lGT6BZl+9N86VaEFa4Nwysxb1pNi1Wo/nzZzm
6tfku751mfiESdWi+r3h9Yx4SpDztomoSY5eW6zB9nn+M7rjQvobePPIIZi73mjS
GssweGLUg49AKlvmPhaXiTYJ/2SnDr46Yl2El/TbJoClADeuGWyuiKedQceowrAB
gKN7vBMQ+8KbnJBnLa8cZikimds2dm8yRgTEeseoi8cZhDrPGYB2vYGlL8/dLJVU
Yjdy6U7FN0a/2WmU+mio9zrk23/VuKP1t0C9q0UlsaN2Q9hV10jbMLkAymQTtu8T
V0Ta95eVA74CjJQwFqZXDI5QzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCZd5Ao
glrI2B0c6qkCOldsg6HKMB8GA1UdIwQYMBaAFHKKgkCS5XQSVLuS1ZdyM2GgS/KS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUI2MS8zRjAwRDc1Q0Uy
QUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRCSlV1NUxWbDNJellhQkw4
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NvcUNRSkxsZEJKVXU1TFZsM0l6WWFCTDhwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUI2MS8zRjAwRDc1Q0UyQUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRC
SlV1NUxWbDNJellhQkw4cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlkXIEIx969TlfHsnJ5grjZGtKbEYHXZOmAd81daD6wRs2KRaSd3ZH
+mKXD+fL5eIm2zVRSRoK/raVghRSl3GKnP0NvIBCwElAZPcIjccm9zfdcJNLuGeO
f1MBmmHHSodX6rzgKaQrJkawQ5iV1kuAlCUdDOgw3mil5TJbQysefrpB65r6D0a2
0Sk/9KnpVrh5oOPWdWkiUoSt1taZXUzLuB+/7Ow9/1Jnya7rr5yuvufmi/joEn/Z
13cVYYRkrbkDTX1Pit5/cZcanPnO2RUJK+FWUocAHETrzRcEizg/xk9wMJyWoTBC
LE1SsJzZz2AFvolgJ4g9o4Zqd8O/k6kg
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:52 2025 by rpki-client