Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File:                     q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier:          kjeNIKHC7wLevtxgmb0/zwNvaMj4Ff4BP842dERx6dQ=
Subject key identifier:   C3:96:E3:C7:D4:72:FC:C3:81:33:C4:2E:3C:51:EE:35:1B:62:9A:7A
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       090B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number:          08FC
Signing time:             Fri 22 Aug 2025 20:29:15 +0000
Manifest this update:     Fri 22 Aug 2025 20:29:14 +0000
Manifest next update:     Fri 29 Aug 2025 20:29:14 +0000
Files and hashes:         1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: rfcq7AvEglDnyo6wX24IOcdFuyPhDSfpz5JN4CE86Rw=)
                          2: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: YwnEBUIIwCJtRBxz+rjLHt3w237awmJC1uWnaTU6Q3M=)
                          3: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: WYE1oD8S3ftmPZ9P42MC6m1geSKXvRB8dw3HalDWvGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2315 (0x90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Aug 22 20:29:14 2025 GMT
            Not After : Aug 29 20:29:14 2025 GMT
        Subject: CN=68a8d31b-6fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:42:a3:25:9a:52:45:58:ac:62:f7:a3:2f:
                    b0:b3:a0:21:4e:ae:e3:04:60:e3:f3:32:a8:49:8f:
                    1d:bb:5f:d1:aa:f7:cf:ff:e1:24:07:5d:47:0a:91:
                    b8:86:22:3e:7e:e4:de:00:e1:ea:3e:89:24:e6:0c:
                    d3:34:5c:f2:3d:0b:74:2d:e2:a1:cb:04:49:87:26:
                    a3:9e:69:66:42:e0:51:9b:a6:b1:5e:83:d5:99:bf:
                    fe:02:81:d2:fe:ec:a2:3f:a9:f4:a1:83:7e:0c:ba:
                    ac:b2:e5:ff:8a:2e:fe:16:1e:03:20:4a:e2:cd:83:
                    3e:6f:33:37:f8:7e:7a:29:71:33:6d:36:2c:0a:27:
                    e5:3a:28:2f:e5:d2:cd:05:9d:5c:fe:d8:14:a6:96:
                    5a:09:2a:33:1a:a8:1b:26:60:e4:72:dd:fc:d1:b3:
                    2e:0b:3c:7d:c7:b2:6f:e3:d0:a0:7f:f2:da:02:bf:
                    19:a9:76:c5:e7:92:7d:97:e4:91:c9:2d:14:11:81:
                    4a:b9:d8:76:66:23:f9:d5:ca:51:c9:63:59:c5:61:
                    07:5d:23:b4:67:77:3a:75:49:a3:e1:b3:67:a9:0b:
                    c4:08:7d:74:66:e9:82:21:bf:7e:15:5c:dd:2e:eb:
                    9d:4c:81:ac:28:8c:15:3e:d2:57:a9:83:18:54:9c:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:E3:C7:D4:72:FC:C3:81:33:C4:2E:3C:51:EE:35:1B:62:9A:7A
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d2:77:e3:82:13:68:c5:cc:c5:43:d6:60:a0:fe:19:f2:83:
         7a:66:fd:33:b1:3e:ba:f7:b0:33:84:bd:ef:e8:15:25:bb:16:
         2b:97:c4:80:c0:19:ad:82:e5:05:53:ce:45:58:21:dc:c2:ab:
         f2:70:50:95:b1:88:d9:94:fe:a9:b9:db:a0:db:bc:d4:67:38:
         df:17:50:d5:8b:64:fc:0b:03:a5:a3:5a:19:e9:e7:ea:ba:7d:
         8e:68:f5:b6:b4:43:98:f7:cd:ff:46:4f:1d:57:b1:fb:0c:a5:
         8e:d3:59:6f:8b:d6:a5:52:42:23:b6:94:ae:e4:e2:d2:39:b5:
         69:b2:f6:1f:8a:2c:c7:76:aa:8b:b7:ba:a8:f9:65:2e:36:c3:
         4d:ee:2e:63:73:c9:39:34:d3:45:4c:59:61:99:ea:2a:13:a1:
         fc:d2:6b:14:af:30:f0:17:6a:eb:fe:74:58:d7:19:f6:e4:c6:
         03:bb:8b:f1:ce:0f:41:ae:b1:f3:ae:71:a8:31:b3:52:75:87:
         22:74:41:4b:07:37:f9:ec:fa:a5:c8:ff:ca:a3:c0:48:0f:34:
         ea:d3:85:64:4d:e0:4e:17:35:bf:2c:f6:cc:0b:13:eb:d2:39:
         44:ec:dc:eb:e9:aa:85:45:c8:7d:16:e9:f7:9d:88:fa:01:60:
         f7:bb:ce:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:47:11 2025 by rpki-client