Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File:                     AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier:          5eCp5GBEVQaHGzvFTOje6e7GW8qTS6JOeX74k/uD/qU=
Subject key identifier:   98:11:0A:8E:A4:9E:58:4C:01:3A:EF:3B:5F:50:41:36:76:45:86:47
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer:       /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial:       0817
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number:          0810
Signing time:             Tue 22 Jul 2025 21:06:29 +0000
Manifest this update:     Tue 22 Jul 2025 21:06:29 +0000
Manifest next update:     Tue 29 Jul 2025 21:06:29 +0000
Files and hashes:         1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: 3ekcT0KdCOYiTi19+ujPW6Ak0OxG/14Mt8SSW9ZZABI=)
                          2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: uoOD9ug4cYWw7XbQbk8d35Oe55TFSJv/qRJ/jB7pYDY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
                          rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 21:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
        Validity
            Not Before: Jul 22 21:06:29 2025 GMT
            Not After : Jul 29 21:06:29 2025 GMT
        Subject: CN=687ffd55-0640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:f3:2c:53:e5:da:d8:4b:bb:b5:d1:9b:fc:
                    79:7b:ad:f1:bb:70:9b:88:4e:0d:ef:85:37:ad:21:
                    13:9c:40:52:05:0e:b1:ed:c5:d0:30:1b:61:07:02:
                    a5:28:96:9a:4b:c6:85:39:73:d2:54:b3:7d:5a:e9:
                    13:05:d3:63:80:db:7b:b2:b1:e4:67:5e:ff:77:78:
                    fd:a3:51:6f:f3:af:8f:fe:7c:26:66:e6:3a:20:77:
                    24:e1:31:13:41:f6:78:b8:96:b6:05:a3:64:a4:06:
                    b1:0f:2c:83:37:b6:44:4a:5d:73:4f:b3:10:4e:7c:
                    c4:ed:90:dc:9e:77:42:a0:bb:d7:0c:c1:7c:ea:39:
                    ca:c6:2b:a2:72:41:b6:c7:73:cd:2f:d6:32:73:0e:
                    f1:63:7a:00:ec:bd:01:40:fe:83:36:f0:43:50:23:
                    8c:7b:34:91:ba:ff:ce:14:1c:9e:50:d7:87:f7:9c:
                    8e:a2:70:94:b7:e8:e2:d0:2c:91:97:1a:36:0d:53:
                    b0:52:6d:0f:c4:6f:83:9b:89:20:b6:c3:e6:6e:64:
                    31:a8:80:bf:6c:b3:8d:e2:e3:16:95:3f:63:26:da:
                    41:33:a6:12:f5:76:fd:6c:33:e4:a8:bc:59:26:72:
                    b0:1c:95:27:c2:ff:2a:e4:5c:14:e5:86:7e:4e:13:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:11:0A:8E:A4:9E:58:4C:01:3A:EF:3B:5F:50:41:36:76:45:86:47
            X509v3 Authority Key Identifier:
                keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3e:87:87:cb:ff:0c:52:9f:17:43:3e:b3:07:cb:05:6c:2b:
         da:c6:fc:e5:ea:bd:78:1a:0e:c2:d5:10:99:8e:81:d4:30:ac:
         4a:1d:d5:29:8e:f6:51:32:1a:08:c8:0e:ed:e2:85:97:80:4c:
         d5:e5:0d:8b:19:ae:b0:1c:49:3f:10:1f:50:6b:d2:8e:39:a1:
         1d:4a:d6:21:9d:15:9a:5d:d8:c8:e6:ce:c8:0c:a0:d2:7b:ce:
         4e:46:34:91:2c:0d:b1:00:39:ba:4c:57:30:39:4b:80:ba:da:
         ab:35:fd:68:34:39:84:b1:c8:14:24:22:26:c7:ff:03:a0:3e:
         3f:6f:1f:41:5a:6b:dc:05:48:14:bb:f3:60:a3:d8:60:5b:ea:
         6a:23:7f:02:1e:79:7f:e2:bf:a5:86:af:7a:3c:90:b3:03:2c:
         b4:99:5f:1c:cc:2d:e1:50:02:b0:a5:7b:45:2d:0f:66:bc:38:
         ef:c9:69:a8:66:9d:58:53:36:e8:65:6a:37:99:f7:16:8a:46:
         35:ff:60:d6:92:f7:57:00:86:60:b5:64:fb:07:27:d9:63:e4:
         97:6e:fb:df:8e:05:f2:49:5a:48:8d:03:eb:b0:a1:34:b1:af:
         ec:98:f8:df:fe:41:69:84:3b:ab:60:b2:82:e2:73:cf:68:21:
         50:02:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:14:49 2025 by rpki-client