Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
File:                     qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json)
Hash identifier:          4VdtUq42Dh/Ae6CUFzz7oRscsazCwJvldxIvOZ7FFsk=
Subject key identifier:   13:96:03:73:AB:94:2E:AA:9E:52:80:42:C1:26:0A:96:50:4A:D1:64
Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
Certificate issuer:       /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Certificate serial:       0B29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
Manifest number:          0B29
Signing time:             Fri 22 Aug 2025 19:23:31 +0000
Manifest this update:     Fri 22 Aug 2025 19:23:31 +0000
Manifest next update:     Fri 29 Aug 2025 19:23:31 +0000
Files and hashes:         1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: cT/84CfBbE4utCFN0Dkj21xjAk7tzPb08bZeAwlxe/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2857 (0xb29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
        Validity
            Not Before: Aug 22 19:23:31 2025 GMT
            Not After : Aug 29 19:23:31 2025 GMT
        Subject: CN=68a8c3b3-c816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:b3:5a:fc:ca:33:53:c3:ed:2f:e5:f9:1d:
                    f8:06:39:b4:c5:81:c8:2f:53:9e:a3:d0:f1:c2:57:
                    51:47:7b:52:87:9a:d9:63:e6:18:f8:37:eb:6d:e7:
                    4c:90:1c:80:60:ee:22:34:88:70:b5:ee:3f:9c:f5:
                    0e:21:c7:14:16:e9:c1:5a:dd:00:cc:fe:68:a9:1e:
                    2c:36:93:56:de:69:d8:b7:29:7b:6b:38:d3:f2:33:
                    b0:02:43:56:1b:4a:18:8e:14:f0:3d:2f:78:67:a5:
                    42:cc:b2:f7:76:72:a1:03:e2:00:a8:6a:1e:7b:71:
                    07:f0:0c:c4:be:77:fd:bf:77:d7:b1:72:f8:0e:d9:
                    ee:30:8a:14:ef:e6:6d:cf:d9:19:c3:09:11:d6:5d:
                    a9:8e:b4:03:47:08:3a:18:22:f4:cf:e4:95:88:f8:
                    1a:9d:70:3a:3b:1c:02:b9:96:c6:6e:da:12:dc:5d:
                    96:39:64:af:b2:f6:14:7a:39:86:25:89:f0:04:81:
                    03:6d:f9:82:3e:5a:8c:36:fe:75:7a:ee:22:34:76:
                    bf:1b:50:71:5c:86:fd:66:44:c5:63:db:7b:ec:9c:
                    ea:97:ba:ed:b8:cf:1d:70:a0:0e:96:5f:6c:3e:10:
                    9b:47:6d:06:3e:30:0b:79:ea:ff:73:dc:2e:b3:45:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:96:03:73:AB:94:2E:AA:9E:52:80:42:C1:26:0A:96:50:4A:D1:64
            X509v3 Authority Key Identifier:
                keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:55:23:b4:f0:8e:4b:98:a7:f5:d1:d1:1a:df:1d:d3:35:c2:
         e9:6a:f8:0c:e9:f7:61:12:12:96:75:17:9c:a6:9a:d7:71:d2:
         ec:5c:14:67:e8:91:ff:b1:d1:94:3a:20:98:87:73:e4:bb:db:
         fe:ef:46:db:4c:80:81:e2:69:a4:a5:9a:49:62:bf:ae:d2:a9:
         33:5e:1a:68:9e:42:f4:3b:d2:d6:eb:9a:0b:37:99:a6:5b:a8:
         1e:50:28:d2:a9:da:8d:8b:4e:32:94:8f:e9:da:be:37:7a:11:
         46:6c:e8:83:cc:47:4c:77:62:64:16:61:98:2f:8e:85:99:56:
         4d:c0:c6:ff:5b:51:f8:05:55:d7:a5:0e:22:54:43:6a:76:3c:
         bf:06:f8:2e:0d:d4:46:3b:a5:ee:91:5f:92:f5:41:1e:ac:00:
         9c:b3:17:d4:b3:71:00:5e:de:a7:5b:f0:db:e0:33:9a:48:6d:
         bc:5a:0b:18:d2:0c:5a:02:6f:09:25:ba:1b:3f:e6:07:a3:74:
         15:85:5e:57:57:bd:bf:1a:0a:6a:37:1f:7f:66:30:24:e9:ff:
         82:e3:3c:f1:ad:4f:6e:7b:36:45:0e:84:d5:37:80:e4:63:21:
         1f:4b:6d:30:02:b3:0b:0e:8b:e6:68:a2:af:bb:89:a9:a8:6a:
         4a:57:01:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkYxOEYxMTAvBgNVBAUTKEE5QTZBNjgxQUIwMUJBNTE1RjIxOUEyQ0FERUEwOTQ1
QjRBRDU5OUQwHhcNMjUwODIyMTkyMzMxWhcNMjUwODI5MTkyMzMxWjAYMRYwFAYD
VQQDEw02OGE4YzNiMy1jODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4E2zWvzKM1PD7S/l+R34Bjm0xYHIL1Oeo9DxwldRR3tSh5rZY+YY+DfrbedM
kByAYO4iNIhwte4/nPUOIccUFunBWt0AzP5oqR4sNpNW3mnYtyl7azjT8jOwAkNW
G0oYjhTwPS94Z6VCzLL3dnKhA+IAqGoee3EH8AzEvnf9v3fXsXL4DtnuMIoU7+Zt
z9kZwwkR1l2pjrQDRwg6GCL0z+SViPganXA6OxwCuZbGbtoS3F2WOWSvsvYUejmG
JYnwBIEDbfmCPlqMNv51eu4iNHa/G1BxXIb9ZkTFY9t77Jzql7rtuM8dcKAOll9s
PhCbR20GPjALeer/c9wus0WVlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOWA3Or
lC6qnlKAQsEmCpZQStFkMB8GA1UdIwQYMBaAFKmmpoGrAbpRXyGaLK3qCUW0rVmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE4Ri8xNjgzOTI0ODQz
RTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVsRmZJWm9zcmVvSlJiU3RX
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FhYW1nYXNCdWxGZklab3NyZW9KUmJTdFdaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjE4Ri8xNjgzOTI0ODQzRTgxMUVBOEFCNjVFMzVDNEY5QUUwMi9xYWFtZ2FzQnVs
RmZJWm9zcmVvSlJiU3RXWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2VSO08I5LmKf10dEa3x3TNcLpavgM6fdhEhKWdRecpprXcdLsXBRn
6JH/sdGUOiCYh3Pku9v+70bbTICB4mmkpZpJYr+u0qkzXhponkL0O9LW65oLN5mm
W6geUCjSqdqNi04ylI/p2r43ehFGbOiDzEdMd2JkFmGYL46FmVZNwMb/W1H4BVXX
pQ4iVENqdjy/BvguDdRGO6XukV+S9UEerACcsxfUs3EAXt6nW/Db4DOaSG28WgsY
0gxaAm8JJbobP+YHo3QVhV5XV72/GgpqNx9/ZjAk6f+C4zzxrU9uezZFDoTVN4Dk
YyEfS20wArMLDovmaKKvu4mpqGpKVwFT
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:15:23 2025 by rpki-client