Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
File:                     qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json)
Hash identifier:          JSoGhgawU0DufKT68EjZEFC+ML2m1cuENiF3AYYfZyQ=
Subject key identifier:   C2:56:0D:FD:16:FC:9B:76:79:5D:EE:99:06:9D:D9:21:80:C1:4F:3E
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
Manifest number:          012C
Signing time:             Sat 19 Jul 2025 04:54:23 +0000
Manifest this update:     Sat 19 Jul 2025 04:54:23 +0000
Manifest next update:     Sat 26 Jul 2025 04:54:23 +0000
Files and hashes:         1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: nOkhoRLGc4lPakEFfK1fGOr5tPs6RfiZPGHhzRt7mu8=)
                          2: E13D8940342E11EF84328672C4F9AE02.roa (hash: ktd5mpPgnA7DVPoDoDI59fbIVSssBE9h3J/Qc3SNd4I=)
                          3: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (hash: 53exXb+y74MMiXd9WVR4Lvbmf3aqTfFbV9OKgS6dCTc=)
                          4: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: 57MB5MLOBu0rlKWbYAUFlVy0tWIAfHRyTSUm9GeesCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 04:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Jul 19 04:54:23 2025 GMT
            Not After : Jul 26 04:54:23 2025 GMT
        Subject: CN=687b24ff-c218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:64:20:31:9a:a6:c0:51:6d:d2:c4:ae:9d:
                    59:50:ff:9c:f6:ce:f1:21:bb:62:d8:d8:14:8f:79:
                    32:5f:71:bf:15:06:16:ba:21:20:5a:d4:99:91:ae:
                    fc:e6:f7:d2:05:74:1e:38:1e:6f:37:fa:7e:0e:70:
                    ca:9d:fd:9a:49:86:13:50:7e:73:99:32:83:3f:84:
                    fb:b8:66:ab:47:58:c1:cb:9f:6c:83:19:dd:8e:ab:
                    4d:ee:06:bb:d7:54:e9:32:4b:95:ad:bb:54:37:25:
                    7d:93:37:4b:2e:13:00:bf:fc:e9:e5:16:06:57:a8:
                    bd:f1:8c:32:81:fc:2b:38:5b:1a:d1:0c:e9:e1:f2:
                    6e:ea:61:fd:8e:b6:0c:90:dc:34:c1:0c:31:8a:51:
                    dd:c9:5e:29:c4:47:e4:41:f4:7d:94:e7:ab:d7:5e:
                    58:4e:33:4d:ea:41:fe:d6:f5:76:b1:2d:68:84:de:
                    81:a0:d0:17:9e:6d:b3:a1:27:d8:42:fd:84:30:85:
                    da:c1:57:17:cd:a3:99:1b:0b:42:d1:30:89:76:e6:
                    a2:a1:c6:50:39:23:0d:20:53:83:72:93:a4:a1:eb:
                    db:34:2e:22:4e:7c:34:28:b8:80:17:11:80:02:6e:
                    7e:a8:e2:1a:21:e5:e3:89:de:d4:71:ba:67:6e:2b:
                    7e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:56:0D:FD:16:FC:9B:76:79:5D:EE:99:06:9D:D9:21:80:C1:4F:3E
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f2:b8:7f:3d:37:fc:36:9a:99:4c:8c:8f:9b:1c:b9:1b:b8:
         b4:9c:73:6a:87:93:0c:79:54:c1:7c:8a:93:a0:89:6e:8c:22:
         f9:8f:17:38:58:08:2d:b4:01:08:a3:f1:2b:67:83:8a:78:ff:
         d0:c3:3c:96:2d:f8:a9:43:a1:66:b8:a8:65:63:4a:a9:6e:76:
         32:e5:b0:da:b8:a6:89:5d:8d:89:cc:44:f9:ea:96:6e:32:05:
         44:83:cd:7c:7c:b4:de:31:a5:ad:f1:29:47:d3:10:58:99:18:
         cf:b2:2b:e8:7e:49:a5:41:33:48:f0:a8:a1:41:47:0d:2e:29:
         bb:7b:e8:0f:0f:15:f1:a8:b1:a9:97:ee:a9:f2:89:5b:91:37:
         37:ea:8b:90:89:ae:9d:5b:f3:a5:b3:06:42:6e:6c:60:38:1f:
         b6:e6:05:93:f8:87:51:2d:2a:ee:7f:3a:44:35:9d:9c:a9:ce:
         84:31:ef:d2:87:0e:3a:91:20:0f:bf:d5:18:85:24:de:c8:91:
         6a:56:5e:30:5b:b5:4b:ca:9d:83:74:1e:11:01:e9:cc:67:d8:
         57:e9:5a:a7:e1:9d:03:23:90:74:6f:80:89:3e:3f:45:c0:e6:
         06:87:26:26:44:0f:5c:15:12:50:c1:cd:a8:fb:f8:d2:eb:c6:
         23:a8:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:42:50 2025 by rpki-client