Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
File:                     qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json)
Hash identifier:          rZIv3MX9rnuUnDiLyk5iJ1xuA06LJyaVqHrLVnu2Jzo=
Subject key identifier:   CB:8C:4F:36:48:AD:F0:D8:E7:81:25:E8:F4:B9:13:2B:A6:04:FA:26
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Certificate issuer:       /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial:       34F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
Manifest number:          34CB
Signing time:             Fri 18 Jul 2025 14:47:42 +0000
Manifest this update:     Fri 18 Jul 2025 14:47:42 +0000
Manifest next update:     Fri 25 Jul 2025 14:47:42 +0000
Files and hashes:         1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: UciYP9iYlUI11CAbgdMccAgIvIPH5qFxYlsiJnZlG6k=)
                          2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: apmElx5HYADo3Em3FsRyatuvuOLQ9ijUTXsLu3KjKZY=)
                          3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 6oWZaqd4YEA2LX4UVdAVOpmAruJNhp7dksiMD1n7i0s=)
                          4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: 51Xns0oB8DIUPAAqRrljxkibyJY0Qjy6OKFbsk2hMYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
                          rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 14:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13552 (0x34f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
        Validity
            Not Before: Jul 18 14:47:42 2025 GMT
            Not After : Jul 25 14:47:42 2025 GMT
        Subject: CN=687a5e8e-e915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:84:51:80:c8:11:1f:8d:34:08:01:83:24:
                    54:3e:4a:65:48:28:e7:08:6d:22:43:e9:b3:b8:e7:
                    48:98:47:37:f8:cd:d7:2f:90:b7:b4:01:75:ad:3b:
                    f8:3f:5d:c8:73:7c:55:94:0a:65:9e:32:13:37:e9:
                    77:e6:5e:19:43:95:83:af:f5:3c:c0:7b:e5:8e:63:
                    ed:3d:a1:10:66:9a:83:05:25:7c:cc:a6:44:3f:26:
                    ff:5f:48:fc:e3:34:20:8e:fe:d8:f0:bd:ed:a0:5e:
                    0c:62:88:7f:c2:95:af:05:44:7c:fb:6d:c2:8b:49:
                    87:85:e4:09:22:92:10:8c:72:28:2d:86:f2:f5:96:
                    5f:94:e5:50:f7:3c:fe:a6:a7:a9:63:99:e4:d3:f2:
                    90:cd:17:c3:62:4e:f6:8c:41:51:05:8d:38:02:73:
                    fa:aa:82:79:7e:0e:65:ad:bb:97:c5:2a:53:21:d5:
                    b4:21:17:56:59:df:3c:1b:9e:d4:85:dc:5f:5f:4e:
                    56:f6:e3:25:e8:32:b3:2b:16:4a:2c:29:8e:cf:79:
                    13:0c:1d:78:cf:15:1e:ec:ce:ec:a7:6f:58:68:5b:
                    cf:22:3d:2a:41:f1:4b:00:3d:19:cd:b4:d8:17:2a:
                    cc:cf:03:6d:40:86:01:6e:2e:c9:45:5d:19:88:48:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8C:4F:36:48:AD:F0:D8:E7:81:25:E8:F4:B9:13:2B:A6:04:FA:26
            X509v3 Authority Key Identifier:
                keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a7:b9:59:a9:f0:dd:3f:45:a9:a4:9a:11:44:3d:a2:c8:76:
         f2:cb:13:ab:4c:82:ff:29:47:81:b6:19:ca:af:f1:cd:58:8a:
         3a:87:28:73:97:c7:f1:b2:c8:ce:e1:f8:51:bc:15:67:24:47:
         58:9a:ad:b3:d5:8b:36:51:54:36:5a:a0:a4:49:db:39:2c:64:
         8b:51:ac:ae:72:8c:6c:9f:8b:9e:86:00:cb:a3:bc:c2:c9:20:
         b9:87:4b:39:29:f5:d6:d5:27:c1:5d:58:c4:0e:33:87:7d:3e:
         16:a8:0c:a6:ee:55:82:30:81:fb:62:b0:ba:29:99:e9:ec:9b:
         21:0a:a6:2e:9d:9f:25:71:1a:24:59:99:3a:80:9f:ec:4e:13:
         b7:7e:c6:68:71:de:e7:24:63:e7:76:cc:1e:34:ae:1a:d8:68:
         b6:d5:48:9b:1f:29:2d:87:4b:ea:4f:74:27:9b:36:3d:ee:38:
         46:2d:05:14:69:c1:3f:7d:44:3d:19:02:5b:2c:c5:8c:56:b7:
         6b:80:e2:bc:cd:7d:6f:e7:11:16:71:f3:e6:72:4b:7b:f0:ba:
         73:18:2c:f4:69:8f:8a:cd:3d:1a:92:8d:f5:9d:dc:14:90:75:
         3d:d1:6a:b3:fa:5c:0c:98:5f:f2:66:5d:5d:18:3f:22:38:6f:
         b6:4c:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:45:35 2025 by rpki-client