Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File:                     qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier:          qDmjBKkdIzruphuFhnRcFYAjzMUxopE3DGUYEf0LLno=
Subject key identifier:   F8:B6:79:9E:42:64:54:3C:4C:8F:CB:B8:98:B2:9A:D9:DB:CC:06:D4
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer:       /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial:       1B3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number:          1B31
Signing time:             Fri 18 Jul 2025 16:24:14 +0000
Manifest this update:     Fri 18 Jul 2025 16:24:13 +0000
Manifest next update:     Fri 25 Jul 2025 16:24:13 +0000
Files and hashes:         1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: neXFze6BqxkZvGW6L6rBG7adTY15DM43LcQomldtmhk=)
                          2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: MQLW+ckG9k/91Edmhff4+dci4t4G4rJfBHrG+oHBPHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 16:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6972 (0x1b3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
        Validity
            Not Before: Jul 18 16:24:13 2025 GMT
            Not After : Jul 25 16:24:13 2025 GMT
        Subject: CN=687a752e-b2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:5e:fa:c7:29:9e:d2:54:fa:10:0d:49:34:
                    ab:27:1e:e8:b5:85:30:6f:f3:ef:34:d3:39:f7:95:
                    de:29:17:07:c1:6d:68:a6:f4:61:c5:0e:f7:87:77:
                    1b:dd:4b:3d:0b:21:5a:ee:9c:1d:09:0e:b0:48:30:
                    cb:46:5d:fa:98:e6:05:6b:78:bf:95:fc:33:3f:ab:
                    6d:32:a5:15:02:b1:9b:ec:6a:21:10:2f:58:ec:4e:
                    e1:29:b6:9c:62:de:44:8d:da:1e:63:0e:4d:b2:d1:
                    38:37:92:b9:6d:8b:16:3b:17:d3:ae:ff:f5:ad:7a:
                    9f:28:2d:aa:d5:ce:69:4d:ce:9e:b4:9e:a1:3a:11:
                    57:dd:59:27:3f:03:b9:b6:38:98:f4:fe:c9:ca:3e:
                    e9:36:70:61:80:ed:b6:f8:a9:d6:23:11:3e:49:07:
                    4f:b3:1f:62:12:98:bb:31:e4:32:d7:20:d1:d0:f2:
                    07:a5:b3:6c:5f:46:0e:c6:18:d3:5d:22:80:1d:7a:
                    42:81:ef:ff:b1:ef:05:27:c0:5e:86:9d:04:0b:2f:
                    6f:ea:ef:e2:e6:e9:b3:7a:98:17:a0:e9:05:dc:68:
                    da:f0:a7:69:e4:23:a6:c0:fe:57:0e:f6:36:5d:c3:
                    50:08:ec:43:b2:0b:eb:0c:80:6b:09:8f:ec:73:fd:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:79:9E:42:64:54:3C:4C:8F:CB:B8:98:B2:9A:D9:DB:CC:06:D4
            X509v3 Authority Key Identifier:
                keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:bd:55:2f:2f:65:33:0c:24:eb:a9:08:0d:a4:c5:4b:0f:79:
         5f:37:ec:fc:6b:48:f6:16:a0:a6:20:02:9c:31:3d:f7:5e:d0:
         e2:91:e2:1e:84:45:cf:d1:b6:17:fd:e4:cc:43:fd:34:b1:e1:
         f0:8d:5f:99:9b:9b:f0:0f:3a:57:bb:08:00:d0:f8:c1:8e:f6:
         43:41:75:b6:b5:df:e8:a7:d8:99:64:4b:4c:24:6a:64:eb:3e:
         0d:e6:ce:68:da:13:89:cc:86:92:98:ab:e9:1d:3f:83:c7:6c:
         3d:22:ad:6a:42:ef:93:d6:0c:3f:f8:ee:ff:11:1f:e3:81:bf:
         8b:37:cb:a4:79:84:bd:71:3d:9d:5d:bc:83:d5:80:b8:47:d0:
         23:4d:49:0d:04:78:7e:77:55:27:40:e6:64:8a:ca:07:77:c8:
         74:6e:d8:2e:1e:33:ce:11:52:e4:f7:bb:9e:29:79:52:a3:22:
         23:bb:44:54:58:2a:cb:9b:ac:0d:64:ff:31:50:cb:42:10:1e:
         44:b9:16:18:bd:f1:4c:8e:84:f0:01:74:3a:94:80:8a:05:ef:
         f3:f0:f7:06:1a:6b:6c:f7:e5:70:4d:ba:38:fc:95:92:c0:85:
         45:91:e4:66:2a:64:5d:02:57:4e:ce:4a:d9:20:af:53:39:ce:
         d7:44:47:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:30:15 2025 by rpki-client