Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File:                     qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier:          76EnxPlSTH7J59Hp8gC4n/zA6BMIluKRANSli2vhvjc=
Subject key identifier:   1F:ED:E9:0C:5C:01:0F:6F:11:37:07:C9:70:B5:2B:86:86:0A:94:63
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer:       /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial:       05F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number:          05EC
Signing time:             Tue 22 Jul 2025 23:20:44 +0000
Manifest this update:     Tue 22 Jul 2025 23:20:44 +0000
Manifest next update:     Tue 29 Jul 2025 23:20:44 +0000
Files and hashes:         1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: 52KPUzhtwJ6TLSOeyMOUcbsR0NgoET/hsUb1HgX9+t0=)
                          2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=)
                          3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=)
                          4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: G47KdDVGbUCyf898ZT3HzgYoD9VrL0ChsA84sDifaK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
                          rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 23:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
        Validity
            Not Before: Jul 22 23:20:44 2025 GMT
            Not After : Jul 29 23:20:44 2025 GMT
        Subject: CN=68801ccc-0133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:d8:bf:5f:a3:7d:26:9e:3a:37:3b:81:ba:
                    76:4c:b3:45:ea:ea:d1:28:59:94:3a:6c:92:db:ac:
                    91:52:1b:38:46:0d:a4:00:94:6e:c2:df:b2:c2:aa:
                    98:2d:31:e2:23:0e:5c:5e:a4:f5:c2:46:79:e4:d6:
                    5b:0a:b7:90:03:b1:ab:5b:b0:c2:c8:e6:de:87:e1:
                    2f:70:a7:22:f2:e9:1d:34:d3:53:c4:5f:4d:93:7a:
                    8a:b5:7d:04:7e:fb:c0:62:d0:2d:a2:17:51:86:af:
                    c3:2c:f9:fb:40:31:6e:8f:1b:e9:14:72:3d:b8:11:
                    13:59:97:b1:e9:94:76:46:99:4a:3c:fe:08:84:0f:
                    bc:6a:2d:3c:0e:7c:d0:f7:81:83:c2:e4:3a:9c:32:
                    6e:a6:96:86:5e:80:b3:b9:cb:cb:f4:6b:65:22:81:
                    cc:90:c7:e7:21:24:ed:d3:a4:dd:d4:c3:23:0d:53:
                    af:cf:d2:34:29:ff:1c:a5:29:81:6e:19:0e:c3:90:
                    4a:66:f9:b7:cb:41:09:2d:19:94:10:7e:54:a4:cc:
                    7d:d4:1e:b9:5d:61:d6:84:19:f6:83:81:23:a7:26:
                    38:1f:73:92:4c:09:3a:12:ab:0b:41:40:2c:6e:d3:
                    44:ee:e0:7a:80:75:b8:36:2b:f5:55:ac:00:ed:d1:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:ED:E9:0C:5C:01:0F:6F:11:37:07:C9:70:B5:2B:86:86:0A:94:63
            X509v3 Authority Key Identifier:
                keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:a0:7d:55:bc:8b:81:3d:50:47:8e:57:68:b2:e9:64:4f:
         a7:e7:7a:ea:86:6c:43:b9:3c:40:b2:88:39:eb:b4:68:c9:d4:
         1c:81:cf:05:a2:e8:fa:81:bb:b6:7f:3c:a9:a2:78:8d:21:72:
         66:55:12:39:d9:2a:c1:99:7e:57:07:00:35:c1:8d:f4:57:46:
         f1:f0:af:05:47:35:d5:bc:7c:6a:63:16:e6:fe:2c:5f:38:93:
         5a:83:07:91:05:aa:72:d8:3d:f4:18:2f:52:57:f3:82:b4:d0:
         2c:a2:54:56:e0:ed:ec:f1:de:57:e7:3e:17:5f:da:75:f4:58:
         57:e5:48:f9:e9:96:6a:af:c7:9b:b8:f6:c8:5f:d8:61:42:db:
         d4:4e:f2:5a:f6:95:ca:b0:c0:f8:09:62:e9:26:22:11:21:36:
         10:1f:e3:9e:b3:61:be:1f:61:99:83:a5:dd:71:8f:4b:64:ee:
         62:6d:7d:29:7e:01:1e:c3:4b:b4:f7:cb:62:bf:cb:12:bb:19:
         60:42:fe:7a:fc:f8:96:14:ab:fd:99:d6:98:7f:f9:e2:d6:46:
         04:12:9c:8d:fc:fe:8a:12:5b:89:f0:e9:02:33:f0:81:2c:6c:
         17:e4:fa:6e:31:16:98:a2:d5:38:66:dd:b9:31:69:7c:c0:5d:
         fe:71:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:02:10 2025 by rpki-client