Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
File:                     Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json)
Hash identifier:          Gw/LTN2K83wZJAdLdFBI6kBXj/7As5LZ48lgchA8orY=
Subject key identifier:   CE:97:0C:F5:C0:16:FD:7B:6D:51:96:AC:4D:61:08:06:BD:DF:FC:0B
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Certificate issuer:       /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
Manifest number:          81
Signing time:             Fri 05 Sep 2025 07:08:03 +0000
Manifest this update:     Fri 05 Sep 2025 07:08:02 +0000
Manifest next update:     Fri 12 Sep 2025 07:08:02 +0000
Files and hashes:         1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: lE1BtlPYOUqhYSM/L0p+bqmkc0k3K+MIzUi4xtujGdE=)
                          2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 07:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
        Validity
            Not Before: Sep  5 07:08:02 2025 GMT
            Not After : Sep 12 07:08:02 2025 GMT
        Subject: CN=68ba8c53-5939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:46:b8:eb:41:c2:45:c2:88:c4:5e:d2:b5:
                    7e:b1:14:4d:4a:3d:d1:f7:2a:21:bb:23:47:84:e8:
                    c4:b9:b9:ce:9f:43:af:db:5b:e6:53:46:ef:35:b5:
                    36:ee:0a:5a:d5:2a:85:7b:44:65:c0:c6:46:a9:94:
                    d1:39:cd:c4:9b:d8:4d:8e:19:d3:48:2f:4b:0a:39:
                    ae:a3:40:db:dd:9a:be:e6:5f:f3:fe:95:64:0f:35:
                    a6:de:4d:7e:bb:c7:ff:c3:0f:e9:72:f8:f2:5d:b8:
                    e5:5e:3b:08:32:15:9a:06:51:f0:b5:01:32:97:9b:
                    14:3b:29:20:5f:5e:91:27:c4:4c:17:74:cf:06:4b:
                    09:2d:5d:fe:51:e9:be:56:69:af:33:74:10:d8:31:
                    7b:5a:fe:4d:83:09:9d:fa:59:5c:68:f8:22:43:e8:
                    2a:6b:81:11:6a:90:a9:8d:d1:2b:fa:51:6a:39:4d:
                    75:8b:d9:af:34:51:1e:ae:88:87:90:a4:35:42:b0:
                    eb:44:81:35:f0:fe:1b:95:ad:55:e9:3f:56:db:f5:
                    ee:0b:1b:aa:02:69:f2:6d:77:0c:ea:c3:07:eb:6b:
                    6d:67:0a:cf:11:f1:24:74:1e:f7:a5:85:bc:3e:93:
                    2a:9c:db:a7:65:09:75:73:79:d2:a5:aa:d3:c5:81:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:97:0C:F5:C0:16:FD:7B:6D:51:96:AC:4D:61:08:06:BD:DF:FC:0B
            X509v3 Authority Key Identifier:
                keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:55:2a:39:74:3a:28:76:e5:cd:bd:d7:9e:da:dd:bb:04:5b:
         98:84:2c:f0:cd:b6:15:f0:ce:3d:db:51:49:aa:29:c7:36:2f:
         73:a9:e6:2a:ac:6f:33:a2:8d:36:ea:4f:35:bf:07:5d:99:e2:
         18:33:c6:0e:2e:f2:35:b9:e9:59:ba:c0:5d:e7:e8:1d:52:5d:
         92:dd:04:c1:15:e2:1c:5d:ed:fc:c7:3b:93:e0:f9:e6:7d:b8:
         06:b1:49:0e:ea:91:92:c9:88:62:dd:cd:2b:54:d2:65:06:9a:
         f8:fe:6a:88:fe:4a:1c:f9:7c:18:0e:64:31:7b:89:58:89:f3:
         f2:a6:1b:f8:24:8e:81:bd:72:40:a8:52:8e:a0:55:dd:b7:01:
         5a:38:07:c4:38:5f:36:ca:7d:9c:bf:7b:16:98:16:b5:fd:1e:
         ab:b4:1d:3a:3c:fe:f6:c9:64:e0:38:93:55:ed:08:b7:76:c7:
         7b:e3:38:7d:e5:02:30:33:fb:1a:42:9f:86:64:45:e4:bc:7d:
         31:29:24:4d:c9:c6:3e:7f:06:4b:c8:09:d3:72:6c:82:fc:57:
         a5:63:08:a6:3e:5e:41:05:ea:f7:a4:db:e6:36:d0:a0:14:8a:
         80:d5:4a:d2:89:d2:f8:fe:6b:11:3b:b2:bc:41:88:e3:ce:d5:
         aa:f8:05:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:10:08 2025 by rpki-client