Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
File:                     qtqjxEEWYN9cNEipHISuV1eibhM.mft (raw, json)
Hash identifier:          Xxz0vcjzYrl9AyTBBeMYKDM9NWQIl7K8vgGahbAHmMk=
Subject key identifier:   D4:23:17:31:97:88:2A:D2:5C:EE:16:58:D3:49:1E:F9:D7:3B:43:75
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       06D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
Manifest number:          06BE
Signing time:             Fri 18 Jul 2025 22:24:48 +0000
Manifest this update:     Fri 18 Jul 2025 22:24:48 +0000
Manifest next update:     Fri 25 Jul 2025 22:24:48 +0000
Files and hashes:         1: qtqjxEEWYN9cNEipHISuV1eibhM.crl (hash: f7GJ9EuNOOFy2NHG7NKPb+Qa12/J7vcNtg5H8dyG2Mo=)
                          2: E349FB7A6B8B11EBA041C843C4F9AE02.roa (hash: pH5N/Qx1YY5gq3cEOXWljF1Kkz3BHRfE8oyjPHPjT5Q=)
                          3: E4C0040A8C8C11EBB81BA228C4F9AE02.roa (hash: zHLsyhTV60ZHxvQdwbDX5bbqYkoP6kC08f+Bv/mppKY=)
                          4: 9D181A24D78211EC944E227FC4F9AE02.roa (hash: yUMXKBsm+dh5a8mwbXbljjnmOf1V4J6P/dOjZa9dbcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
                          rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D, serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: Jul 18 22:24:48 2025 GMT
            Not After : Jul 25 22:24:48 2025 GMT
        Subject: CN=687ac9b0-bb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:a6:b8:59:05:45:b6:e9:07:9d:99:d0:47:
                    00:40:61:72:5d:5f:92:85:65:b0:62:e7:95:f7:ea:
                    e1:93:3b:a4:2e:22:4f:10:ef:5c:45:f3:7d:6e:07:
                    b1:43:47:97:79:78:22:b7:7e:2b:08:ae:6d:d3:43:
                    c4:a4:53:30:39:aa:34:91:13:22:84:a2:45:ea:36:
                    48:4c:1f:8d:4c:d5:ba:95:ad:68:e9:7d:18:f0:5b:
                    7e:f8:e0:5a:c4:b6:5c:a3:af:02:e1:6e:35:fa:f9:
                    c6:9d:e7:58:50:79:7c:18:5a:1b:fe:48:f7:fc:0d:
                    56:51:eb:86:ab:7f:1a:8f:e5:b7:05:01:2f:06:c5:
                    3c:f5:c3:57:3f:74:be:bf:9f:ed:70:ba:d4:61:9e:
                    62:3a:ff:ad:3c:2f:3d:58:06:70:c4:64:01:1d:86:
                    5c:66:d1:8e:50:65:de:a7:83:fb:5b:1c:78:a3:c7:
                    8c:80:63:d9:4b:5f:75:a9:0d:1e:c4:6e:fc:1a:35:
                    7d:c3:49:1c:51:2b:19:7b:1a:67:e1:2d:e1:fd:e8:
                    9b:a2:6a:36:10:81:1d:e9:3e:f2:73:5d:a9:85:76:
                    36:20:cc:7a:46:fb:d0:99:48:13:bb:04:7d:b5:59:
                    dd:76:ef:63:82:e6:82:2e:2e:e4:94:58:6a:48:aa:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:23:17:31:97:88:2A:D2:5C:EE:16:58:D3:49:1E:F9:D7:3B:43:75
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:3e:03:20:20:05:77:93:66:28:61:2b:32:61:79:8b:9b:
         c8:93:f3:5d:30:bb:89:aa:0c:e1:4f:2e:ed:c6:ec:3a:4b:d3:
         45:65:11:2b:00:79:b7:22:07:8d:20:45:de:64:6d:54:9a:d5:
         a6:51:7d:0a:69:e4:22:a0:fb:c9:e7:85:bd:56:49:35:46:ba:
         50:52:02:56:36:3f:14:08:29:c4:6d:8f:17:88:be:01:5f:07:
         9f:25:56:6a:66:f2:d3:f2:1a:91:f9:ad:14:e5:bd:cc:a1:38:
         b1:7c:e0:43:95:11:a8:58:95:78:ad:31:9f:26:5b:3a:0f:dd:
         91:9f:29:9d:a1:24:62:cf:02:c0:6a:d6:c1:f9:c3:3a:1b:d9:
         10:c9:83:d4:3f:1c:5e:b5:10:f5:ae:f5:42:54:9d:53:ab:b7:
         78:6f:b0:47:c0:39:f7:6b:cc:77:82:cf:11:78:97:37:65:01:
         42:ae:33:b3:e8:9f:ec:1f:b4:af:64:87:db:9b:22:08:88:42:
         5e:ae:32:3e:13:0b:35:54:d3:cf:e6:9d:5c:b3:4f:3b:48:8b:
         c7:f6:e2:16:c1:92:93:21:71:03:bf:20:c5:58:4d:ac:42:b6:
         29:61:64:c4:e8:19:40:45:ca:ea:a5:c6:41:c5:c8:ff:b6:ac:
         3b:12:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:23:17 2025 by rpki-client