Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
File:                     QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json)
Hash identifier:          2jgLJh+o+Aiy81opA3zL4TWlppxnvkNv5Vt6FG4Zj+c=
Subject key identifier:   B7:01:30:A6:A6:14:46:91:33:8E:04:15:E0:9B:11:D1:92:DA:B1:9A
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Certificate issuer:       /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial:       0872
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
Manifest number:          0861
Signing time:             Fri 18 Jul 2025 20:56:22 +0000
Manifest this update:     Fri 18 Jul 2025 20:56:22 +0000
Manifest next update:     Fri 25 Jul 2025 20:56:22 +0000
Files and hashes:         1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: qJ9395xkjKlNSfOEFyhGFBupFiA95Ze8EFa9KdhfSII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
                          rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
        Validity
            Not Before: Jul 18 20:56:22 2025 GMT
            Not After : Jul 25 20:56:22 2025 GMT
        Subject: CN=687ab4f6-437a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:2e:7d:70:a0:ec:b1:dd:57:dd:d4:5a:14:
                    dc:cc:9a:a1:90:6b:6f:04:2a:a4:27:ff:ff:f1:0a:
                    59:e2:8f:f3:60:25:c1:0e:62:e8:f6:67:27:1b:dd:
                    7e:8c:f7:18:1c:16:8a:b9:71:0a:b3:e6:35:ff:7f:
                    e8:ec:16:10:a2:7c:87:fc:a1:02:9b:d1:55:70:d2:
                    61:92:06:f4:28:a1:d0:6f:46:78:7a:28:54:cc:cb:
                    52:03:24:03:d5:1c:4f:e4:4a:6a:a5:f2:7d:6c:d2:
                    b4:5f:20:02:f9:f6:47:9f:e1:e8:47:a1:33:62:4e:
                    e4:1c:3c:c9:bb:50:39:d8:fd:50:ae:82:05:9e:16:
                    f3:29:06:b8:51:15:7e:a0:15:cf:09:3f:60:0e:57:
                    0e:95:04:bf:19:90:15:87:ee:6e:9e:ed:53:35:bf:
                    6f:a7:4a:56:b4:70:47:44:3e:dc:43:d8:cd:25:fb:
                    62:9d:e0:5c:b8:5b:27:38:6c:0c:94:b2:7b:74:26:
                    5a:09:7e:d4:97:13:a4:0c:57:33:0e:e3:67:26:de:
                    9f:14:b0:98:9b:54:95:ee:17:57:6f:2a:ef:92:fe:
                    d7:84:89:6d:44:39:55:3e:75:2b:cc:9a:2d:38:1e:
                    d8:19:ab:cc:7b:84:a2:10:ac:43:64:ad:98:4d:98:
                    1e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:01:30:A6:A6:14:46:91:33:8E:04:15:E0:9B:11:D1:92:DA:B1:9A
            X509v3 Authority Key Identifier:
                keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:4e:64:ef:7d:40:ac:da:9a:35:ee:c0:1a:50:b7:47:8e:41:
         e7:51:c2:a7:57:99:36:c0:95:bb:80:50:3c:7a:8c:3b:ef:02:
         95:49:02:12:d4:51:d2:a9:9b:2e:a4:fb:d1:20:76:d0:d0:e3:
         05:36:86:5a:10:5d:cc:3a:06:58:93:90:65:4b:f4:4e:50:47:
         dd:60:f8:61:8a:3b:af:ee:10:43:68:e1:17:40:ae:58:6b:0c:
         ca:96:fa:53:9d:fd:12:b5:5f:21:c5:75:07:09:11:55:b4:96:
         fa:e1:f6:d1:22:22:13:eb:af:28:35:ed:94:17:93:b1:ee:77:
         e5:48:c8:9b:b7:85:33:54:29:68:08:63:24:56:6f:65:61:ea:
         3d:fc:76:ad:d9:d7:02:a8:a1:1d:66:f9:cd:b3:c2:18:35:1a:
         0e:9b:2b:e1:f8:c2:de:f4:db:7c:c6:18:8c:1f:6c:24:2c:93:
         ec:2c:2d:80:2f:3b:de:24:11:54:5c:8f:30:36:d3:12:6e:78:
         95:56:f0:8b:fb:a8:f7:87:79:d3:26:ca:46:67:1e:65:11:b4:
         01:a7:08:a5:eb:17:fd:75:d5:11:75:f3:2a:79:aa:30:5c:15:
         49:14:9e:af:a2:f6:90:df:3b:32:69:be:8a:17:cb:4d:ae:9e:
         d0:d5:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:58:00 2025 by rpki-client