Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
File:                     QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json)
Hash identifier:          o3aWqn2JfH1DnYYZesTgXkm0t201fk282GowSd2pP74=
Subject key identifier:   33:B7:7F:F1:D9:CE:71:4C:0A:1C:5D:92:15:E0:C4:32:78:EA:13:42
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Certificate issuer:       /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial:       073A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
Manifest number:          0724
Signing time:             Sun 20 Jul 2025 21:59:57 +0000
Manifest this update:     Sun 20 Jul 2025 21:59:56 +0000
Manifest next update:     Sun 27 Jul 2025 21:59:56 +0000
Files and hashes:         1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: X//pf65b4pISvE300hdI7nEPgr5SuP7jUB9YwW/7kw4=)
                          2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: iIfOWh1uqVhAcXqeHkNjA4YHqNreyuB3xizBAQVozys=)
                          3: 683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (hash: jpOm+AzzM4Yjd+hxm5Xa0uKGQEaJYO441Q/17W+FFzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
                          rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 21:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
        Validity
            Not Before: Jul 20 21:59:56 2025 GMT
            Not After : Jul 27 21:59:56 2025 GMT
        Subject: CN=687d66dc-1911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:4b:f5:59:b3:57:69:19:66:f5:45:b1:3b:
                    32:4b:48:de:3e:b8:8e:52:62:a8:c6:6b:1a:fd:87:
                    63:29:52:57:43:80:b9:27:76:a2:4e:8a:95:1c:df:
                    16:71:15:b5:8e:2b:47:22:58:15:6d:ee:39:ca:16:
                    de:dc:d5:d8:dc:51:e5:7a:9f:59:f8:24:6c:67:df:
                    2f:5e:b1:ac:e5:cd:69:37:d2:5d:44:fa:8b:f0:02:
                    c0:55:ff:47:bd:74:bb:ad:6d:35:1a:df:93:2f:ae:
                    60:31:fe:53:fa:75:93:f4:9b:2a:cd:fb:e6:bc:9e:
                    28:84:d3:6e:d0:39:10:a9:a3:03:d3:93:81:bb:dc:
                    65:70:35:25:89:a2:ee:22:b6:33:10:8b:81:e1:0b:
                    0b:be:70:8d:17:97:80:5c:9b:b9:8c:01:d3:43:50:
                    97:5e:90:40:07:46:61:d6:2a:78:23:f3:9a:4a:5c:
                    cb:55:61:5f:81:cc:93:55:b7:14:7e:76:d4:80:92:
                    e0:c2:5d:d2:24:5e:34:6f:89:1e:f2:52:49:56:45:
                    81:0c:6c:1c:b9:4d:fa:b7:6b:d2:59:8d:67:c9:69:
                    bc:e6:c4:47:68:99:bc:bd:15:62:73:8e:66:9c:66:
                    f0:3d:6e:c2:c1:c6:57:83:d3:2c:4a:bd:99:fa:b0:
                    12:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:7F:F1:D9:CE:71:4C:0A:1C:5D:92:15:E0:C4:32:78:EA:13:42
            X509v3 Authority Key Identifier:
                keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:20:14:8c:00:b1:91:7c:7b:57:e9:48:c4:6e:3b:0f:97:
         b0:44:94:84:a5:94:ff:68:ae:91:57:77:22:e7:10:f7:2d:f1:
         71:1f:9f:13:d2:90:b6:40:f9:c1:bb:2b:d7:db:c6:70:42:79:
         9c:a7:06:79:ec:14:29:6a:dd:52:04:65:6c:c2:d0:18:2b:75:
         b6:ec:1c:37:06:81:db:d5:80:bb:ed:0a:bc:3c:3b:1f:8b:ef:
         25:78:52:59:88:5b:78:e3:5c:99:4d:4f:bd:a4:c4:83:be:6d:
         c2:3b:30:b8:c6:17:f0:84:17:03:f1:d9:87:93:04:7f:52:3a:
         3e:0c:a5:60:9b:85:ee:a0:97:38:34:7f:c6:fb:8d:68:4e:09:
         dc:be:ab:be:84:09:ff:5f:54:5d:6d:2e:7f:3d:a1:f4:5a:3f:
         3c:2a:35:ee:ad:b1:e5:00:ac:8f:94:bf:1a:ab:4c:0d:0c:29:
         49:d2:98:c2:3e:5e:bb:7d:da:d2:11:97:71:99:0c:81:bd:25:
         81:50:f1:ac:be:d4:5b:a3:f1:24:de:02:28:35:38:ce:5a:b5:
         ee:00:18:76:c6:d5:1a:6c:ae:c9:f3:5e:00:0d:27:c9:e7:aa:
         67:98:8a:c5:f4:a7:fe:2b:f2:95:8b:08:40:e0:09:4d:75:ea:
         bb:87:40:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG
RTcwRDg5RDcwHhcNMjUwNzIwMjE1OTU2WhcNMjUwNzI3MjE1OTU2WjAYMRYwFAYD
VQQDEw02ODdkNjZkYy0xOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtu1L9VmzV2kZZvVFsTsyS0jePriOUmKoxmsa/YdjKVJXQ4C5J3aiToqVHN8W
cRW1jitHIlgVbe45yhbe3NXY3FHlep9Z+CRsZ98vXrGs5c1pN9JdRPqL8ALAVf9H
vXS7rW01Gt+TL65gMf5T+nWT9JsqzfvmvJ4ohNNu0DkQqaMD05OBu9xlcDUliaLu
IrYzEIuB4QsLvnCNF5eAXJu5jAHTQ1CXXpBAB0Zh1ip4I/OaSlzLVWFfgcyTVbcU
fnbUgJLgwl3SJF40b4ke8lJJVkWBDGwcuU36t2vSWY1nyWm85sRHaJm8vRVic45m
nGbwPW7CwcZXg9MsSr2Z+rAS8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDO3f/HZ
znFMChxdkhXgxDJ46hNCMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1
OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X
Y3EtZzZGaDMxT1AtY05pZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCKpiAUjACxkXx7V+lIxG47D5ewRJSEpZT/aK6RV3ci5xD3LfFxH58T
0pC2QPnBuyvX28ZwQnmcpwZ57BQpat1SBGVswtAYK3W27Bw3BoHb1YC77Qq8PDsf
i+8leFJZiFt441yZTU+9pMSDvm3COzC4xhfwhBcD8dmHkwR/Ujo+DKVgm4XuoJc4
NH/G+41oTgncvqu+hAn/X1RdbS5/PaH0Wj88KjXurbHlAKyPlL8aq0wNDClJ0pjC
Pl67fdrSEZdxmQyBvSWBUPGsvtRbo/Ek3gIoNTjOWrXuABh2xtUabK7J814ADSfJ
56pnmIrF9Kf+K/KViwhA4AlNdeq7h0DI
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:52:25 2025 by rpki-client