Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
File:                     qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft (raw, json)
Hash identifier:          QdspyYLTeEfn/yshLa3mzCALE8fWnn2cHF4XVefs5dw=
Subject key identifier:   D6:22:BF:86:57:75:A3:C3:36:F8:40:22:D6:D9:E5:AF:33:5E:29:68
Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4
Certificate issuer:       /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
Certificate serial:       08A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
Manifest number:          08A1
Signing time:             Tue 22 Jul 2025 20:47:06 +0000
Manifest this update:     Tue 22 Jul 2025 20:47:06 +0000
Manifest next update:     Tue 29 Jul 2025 20:47:06 +0000
Files and hashes:         1: qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl (hash: MjaeLY5IcyZxwuMMvqAI67xLiN/x93SPrHey3DsyZOY=)
                          2: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (hash: Ikd/LHIFGkrNvlawlhSa/JEAr9UmpAWA/8H+UH2uQws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 20:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216 (0x8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A13F, serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
        Validity
            Not Before: Jul 22 20:47:06 2025 GMT
            Not After : Jul 29 20:47:06 2025 GMT
        Subject: CN=687ff8ca-fd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:09:81:d3:82:68:e2:d1:4b:0f:c4:db:2a:
                    88:02:2c:96:70:23:27:d0:0c:e6:14:a7:d5:35:82:
                    c0:6b:df:8c:16:a7:98:86:12:63:d0:45:e2:f9:dd:
                    f0:9d:cd:9e:79:37:29:79:cc:20:2e:f1:24:20:e2:
                    be:e1:24:70:22:20:5c:06:fe:5b:fd:f6:29:71:48:
                    7c:96:c1:3b:77:85:51:57:d4:6a:92:2d:1e:b5:25:
                    61:64:4f:9c:73:a9:30:95:07:15:5a:c6:65:9c:8a:
                    7c:d8:32:f2:d2:4d:28:e1:2e:b4:82:af:7a:79:bb:
                    d9:cc:6f:13:d5:94:69:84:37:0a:d0:57:f4:26:4b:
                    26:5c:58:8d:6e:f8:fc:2c:0d:02:20:7b:5a:fc:9c:
                    86:de:e2:33:91:1c:f0:94:6c:41:67:2b:9f:3b:58:
                    b3:00:3b:03:e1:2f:b8:51:18:c8:37:46:66:f4:52:
                    4d:3b:3f:28:23:17:37:8f:59:7a:e2:c3:9a:48:14:
                    57:2e:71:7e:87:2f:ed:45:e9:59:fd:bc:12:02:cb:
                    41:f6:a0:87:06:a6:a3:fb:ec:36:f6:5c:be:32:f0:
                    7c:f8:d0:fa:f6:21:96:88:70:64:08:59:a4:b2:ee:
                    b0:8a:4f:a7:c9:33:7e:5e:80:8b:64:05:eb:87:78:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:22:BF:86:57:75:A3:C3:36:F8:40:22:D6:D9:E5:AF:33:5E:29:68
            X509v3 Authority Key Identifier:
                keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8b:91:cb:ab:e9:d0:82:55:16:d7:ce:e4:ca:c7:11:70:88:
         cf:b8:2a:d8:03:51:c5:82:2f:e7:e6:19:9c:fe:3c:0f:c7:d7:
         16:62:d3:7c:a7:9b:0c:19:be:7b:e0:c3:8a:42:55:4e:2f:81:
         0e:3b:fd:f5:c9:ce:ed:0d:3c:f3:8e:b1:60:4b:13:aa:68:8c:
         41:46:de:2b:b2:33:3a:69:91:bd:28:9a:dd:c1:51:1c:c5:43:
         aa:60:1e:24:8d:1d:ad:4c:39:a0:42:1b:e2:a9:34:59:f8:a7:
         45:05:0d:69:eb:11:f1:33:c3:f9:5e:6b:4c:3c:8d:18:6c:ba:
         98:1c:68:9d:53:ec:37:ae:fe:c0:fd:43:1f:f9:a1:5d:47:69:
         f0:8e:55:69:ee:22:22:8c:5c:5f:62:76:08:2e:ff:8d:a4:d4:
         b7:8d:06:f0:44:8b:90:c9:e9:9a:b3:c0:30:03:aa:70:a6:bb:
         8d:5d:f8:70:1d:0a:92:54:52:29:81:f6:08:d1:2a:88:72:be:
         ae:e1:3d:c6:d2:65:5e:a2:e1:fb:79:2d:14:c4:10:ec:67:da:
         27:63:8b:39:39:55:23:1e:47:2a:3a:d5:44:eb:58:23:02:27:
         c2:de:31:ed:70:1b:0c:b9:73:69:53:7a:99:1b:57:f1:ad:41:
         19:b7:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:31:31 2025 by rpki-client