Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File:                     qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier:          3z6vRCSD//mrusLzi3H+bAETCRfIrNnhE8MwvcZquFk=
Subject key identifier:   8F:42:BB:E1:A4:A3:23:81:ED:BD:C0:A6:71:3C:63:E0:EE:A4:6B:B8
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer:       /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial:       05F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number:          05ED
Signing time:             Thu 24 Jul 2025 23:17:39 +0000
Manifest this update:     Thu 24 Jul 2025 23:17:39 +0000
Manifest next update:     Thu 31 Jul 2025 23:17:39 +0000
Files and hashes:         1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: Iy9Xcqd6Pqyc79s3Oj89AChGQLx3MWSPnxgoSveSSWM=)
                          2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: zsrAxxFfRp403bl7GSNrqmEpDz70fh0k4+NlvivXGV8=)
                          3: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: +PXzRKDa1pBP+673hTlbAtrA0Uh8pso6MOGI9Du2wJM=)
                          4: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: G47KdDVGbUCyf898ZT3HzgYoD9VrL0ChsA84sDifaK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
                          rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 23:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
        Validity
            Not Before: Jul 24 23:17:39 2025 GMT
            Not After : Jul 31 23:17:39 2025 GMT
        Subject: CN=6882bf13-14d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:7b:fb:4f:09:a1:dd:83:b8:6d:e0:92:a5:
                    8e:d1:4a:08:da:ed:d1:75:34:01:37:7a:a4:f8:d9:
                    e3:f2:aa:7b:83:f8:22:4f:48:31:3f:85:93:5a:92:
                    f3:61:5a:61:6a:39:85:15:76:aa:c0:32:32:fa:b6:
                    e7:19:06:ee:09:58:9e:38:a8:22:e0:a3:53:fe:00:
                    27:2c:2a:9f:e1:b1:f6:b8:37:48:91:5a:82:0b:0e:
                    0e:02:97:34:4e:86:1b:74:47:7b:a9:a5:93:6e:0f:
                    72:6c:5e:6a:b4:17:d7:89:d3:55:9b:54:3f:0f:b1:
                    10:30:c2:ac:4c:9a:48:6b:6f:a4:b4:ed:67:e7:f0:
                    aa:0a:d3:5f:1b:b7:10:b9:2e:2f:4c:5a:47:6e:65:
                    b7:c5:19:1e:b3:86:d9:50:b6:88:ec:51:0a:80:24:
                    78:46:e2:ad:ab:41:cf:5e:7d:ad:f6:cd:38:14:f3:
                    f3:2f:db:41:92:09:48:6f:73:57:83:7f:0f:bd:75:
                    2d:c5:32:1e:90:b3:49:05:8d:4f:2a:6c:75:c3:15:
                    fa:0b:a8:95:d6:3c:ed:76:ff:8f:27:e0:b3:77:4c:
                    60:46:27:b8:fc:1b:23:19:aa:38:59:c4:37:b1:13:
                    d9:a2:c3:59:53:b6:39:8a:18:f0:40:eb:bf:a8:61:
                    4e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:42:BB:E1:A4:A3:23:81:ED:BD:C0:A6:71:3C:63:E0:EE:A4:6B:B8
            X509v3 Authority Key Identifier:
                keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:dd:6a:4b:79:3f:38:76:3d:de:51:2e:11:fb:9b:74:ed:a8:
         c3:a4:eb:c3:2f:eb:60:eb:e1:6e:02:31:a0:33:15:ea:54:b0:
         7b:35:27:a3:8a:e5:e2:54:44:a9:d2:31:f1:a4:e0:00:36:23:
         c8:75:4b:4a:aa:47:94:18:3c:79:fb:0f:09:ff:e5:dd:3b:d6:
         f5:0f:f3:2d:0e:11:84:c2:62:30:c3:c0:1c:fe:3c:91:2f:71:
         09:35:88:1e:71:a2:c1:f1:97:83:07:e3:16:3d:f6:15:78:ba:
         02:f4:9e:bb:0e:2d:0e:29:91:f3:21:e5:17:81:b7:c1:6f:0f:
         a8:f2:8b:87:d9:ec:5f:08:40:ee:51:2f:ff:c2:16:88:a8:ab:
         41:e8:1e:c4:4f:31:3a:1c:f5:cb:c9:69:2e:1d:b8:48:f3:ed:
         e2:63:8e:31:cc:f4:d6:c6:f3:30:ef:78:e4:34:25:19:91:5f:
         b7:eb:a7:da:bf:6d:a1:49:79:9d:7f:77:f6:f0:10:0b:cb:d5:
         fa:ac:4b:e2:75:3f:28:0b:82:53:e5:ae:fc:14:65:20:71:01:
         6f:de:87:12:34:ba:3f:e3:26:49:b1:45:09:a2:e7:db:ea:80:
         57:c0:a6:c6:73:62:8d:d5:31:d6:d2:2f:94:19:ad:0a:12:3c:
         9e:44:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:00:15 2025 by rpki-client