Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
File:                     1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json)
Hash identifier:          zFga6iXDWFAlPZ+umyGhpZ3TCN8BGKvE29ojQ8mL7c0=
Subject key identifier:   9B:1C:BF:57:06:21:15:3B:0F:02:E1:A4:F6:1B:B9:12:4F:6C:50:C8
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Certificate issuer:       /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial:       087D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
Manifest number:          0877
Signing time:             Fri 18 Jul 2025 20:52:55 +0000
Manifest this update:     Fri 18 Jul 2025 20:52:55 +0000
Manifest next update:     Fri 25 Jul 2025 20:52:55 +0000
Files and hashes:         1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: vNkkLQNz+DCDF4K8PeJW4/qxyaXmGrFZWbL5qXJqctY=)
                          2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: tIeSqHeCHUuOJ39Gd9YUOSN/PIr6jNAJWJM2EB0gZPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
                          rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
        Validity
            Not Before: Jul 18 20:52:55 2025 GMT
            Not After : Jul 25 20:52:55 2025 GMT
        Subject: CN=687ab427-5cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:68:33:55:04:a0:83:08:77:68:f8:73:24:
                    3b:64:bd:6f:7c:fc:e7:19:2e:28:be:44:16:3d:17:
                    5f:99:ce:6c:93:e6:17:23:0c:e4:88:1d:45:54:15:
                    2a:28:f6:72:4b:ea:f3:5c:14:2d:6f:cb:76:e2:b5:
                    95:82:2b:b0:56:80:a8:a4:08:92:62:b3:bd:54:14:
                    e0:f2:01:a7:af:81:40:91:11:d4:45:a3:b2:b4:5e:
                    45:a0:b0:5d:f7:99:08:9e:f2:ac:96:f6:f5:ef:d1:
                    06:eb:d8:99:f9:17:90:6e:cc:8f:86:71:12:80:e5:
                    35:cb:ec:fd:13:a7:26:26:b7:00:b4:93:bf:32:ce:
                    0a:6d:20:46:fe:ea:0d:22:18:e1:51:9c:54:72:88:
                    7c:cd:61:96:b0:96:73:d8:da:0a:6b:66:de:3d:1e:
                    84:46:d8:fe:18:14:47:07:7f:14:42:c9:b7:ee:ad:
                    09:49:70:65:8c:b4:8b:b5:3d:db:fa:60:fd:5f:89:
                    01:63:67:79:93:0f:9c:2b:d9:bd:94:ad:32:1a:52:
                    d0:fa:d3:dd:af:5e:c6:d0:07:fd:a5:62:c0:25:5c:
                    3d:ab:59:e9:70:b9:ef:33:25:0f:e3:dc:e7:9d:54:
                    95:10:46:f5:bc:f3:7a:ca:d0:07:3e:e1:88:4e:44:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:BF:57:06:21:15:3B:0F:02:E1:A4:F6:1B:B9:12:4F:6C:50:C8
            X509v3 Authority Key Identifier:
                keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4f:3b:1f:a9:f2:ba:cb:d6:11:08:6b:05:3f:f1:3f:81:b0:
         06:fa:93:8b:47:c6:02:fd:4d:95:e8:ec:d8:e7:ee:e5:24:85:
         66:bb:7c:2a:2e:c5:ac:f2:2b:21:1e:61:0c:be:56:0a:bd:a2:
         ba:32:6e:1f:17:67:80:76:7a:4e:56:bb:ae:60:43:d9:19:e8:
         29:e4:82:3d:8c:a3:37:60:3d:ac:4d:b6:02:fc:f2:f8:10:e2:
         cf:c5:46:b3:64:9b:f2:b4:85:3e:ad:73:77:ee:fc:6b:46:cb:
         a8:90:83:b0:c1:f2:d6:99:35:22:0b:ba:ad:8b:fc:93:1e:cb:
         80:ae:c8:f4:2c:bf:0f:bf:6f:c5:9d:f4:b7:fe:2e:e7:2e:95:
         7a:14:3f:c1:db:7e:6e:83:a7:f1:72:6e:63:e8:c8:1b:9d:17:
         97:72:01:6a:61:3d:c9:53:89:0a:d5:11:b7:88:9d:c9:bd:54:
         7c:dd:58:84:02:1a:aa:3d:12:b7:62:a0:e1:03:67:c9:d1:9a:
         5b:47:09:a4:82:83:56:ec:47:1b:ba:51:c3:c8:69:9d:3a:46:
         9a:38:ac:18:d3:2f:55:8a:8c:e3:ba:fe:ff:d6:99:7f:f7:ea:
         65:f1:6b:23:f5:0d:04:22:b0:0d:0f:6b:a0:8d:7b:89:de:8b:
         5a:a6:4d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:55:14 2025 by rpki-client