Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
File:                     Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json)
Hash identifier:          oVsvz81FIrfDUndl6yg9y5hn8w2GLBgnfMpTNN3smBE=
Subject key identifier:   38:D4:B4:8D:12:87:01:54:F6:7C:24:E2:78:4C:20:9E:64:CF:77:2A
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Certificate issuer:       /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
Manifest number:          68
Signing time:             Sat 19 Jul 2025 07:11:56 +0000
Manifest this update:     Sat 19 Jul 2025 07:11:56 +0000
Manifest next update:     Sat 26 Jul 2025 07:11:56 +0000
Files and hashes:         1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: Xx6+Zsm9ORyyya9X2N9bVa9SxAeKTagmLYWE3DupYYk=)
                          2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
        Validity
            Not Before: Jul 19 07:11:56 2025 GMT
            Not After : Jul 26 07:11:56 2025 GMT
        Subject: CN=687b453c-ca36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:e2:f3:ba:71:80:84:7d:2d:db:09:17:ba:
                    60:f5:7d:5a:65:a3:0c:28:52:4e:da:45:22:83:90:
                    91:0a:5f:31:94:f0:3a:04:5b:46:f7:3c:64:15:1b:
                    64:fd:af:a9:08:a6:cf:35:e0:da:24:63:cd:ce:bd:
                    9a:1f:d0:d6:c8:9c:d1:0f:a6:b7:cb:68:8b:86:af:
                    22:e2:2d:e8:fb:1b:de:07:7b:c6:79:a4:49:29:f0:
                    5c:9d:34:b0:da:74:c7:87:35:e8:a7:97:0d:a6:58:
                    d6:c3:7b:57:4a:4a:2e:67:87:28:2b:1c:07:69:5b:
                    0d:0b:a1:ca:f7:7d:71:5d:46:8a:30:41:09:26:1a:
                    1c:68:44:68:4d:e9:bd:64:b0:73:e7:af:93:cf:6c:
                    ff:99:e1:7e:61:0f:f1:15:79:36:2f:7e:38:a8:b5:
                    e4:af:c4:cf:59:03:70:c6:2f:fe:f2:39:dc:e0:88:
                    56:8e:18:9f:ef:97:cd:26:75:2f:7e:df:7d:9b:5c:
                    f9:8d:b9:62:f6:af:c6:da:e1:a4:c2:31:e9:27:ad:
                    32:f1:27:5f:e2:bd:d2:03:50:2a:14:f7:cd:3c:a0:
                    0a:9c:30:bc:b7:3a:dd:86:d3:d9:6f:a2:e2:cb:25:
                    d2:3c:a4:08:00:d8:fb:5f:f4:a9:37:d3:a1:75:04:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D4:B4:8D:12:87:01:54:F6:7C:24:E2:78:4C:20:9E:64:CF:77:2A
            X509v3 Authority Key Identifier:
                keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:cc:38:49:33:a6:76:77:55:81:bc:e6:35:e6:66:58:71:
         16:ae:be:0d:9e:f4:80:24:99:38:e0:b2:f2:75:40:62:44:44:
         c0:b7:cf:64:d7:44:e8:f9:a4:c0:71:fc:eb:93:3f:d0:d7:d2:
         00:a8:27:63:c8:45:54:5f:02:29:ac:fe:74:5d:c8:e6:73:d6:
         79:d2:a8:9f:e5:dc:0d:33:d7:13:62:e2:b4:3c:63:c1:7b:ef:
         24:2a:68:94:71:0e:93:f3:c7:2d:ed:46:11:9c:f5:77:84:17:
         99:28:06:ab:98:de:90:c2:eb:8e:1d:fa:42:a8:91:49:2c:df:
         4f:cb:70:15:5d:b5:2e:8b:dd:e2:6f:82:b1:e8:a4:b9:9c:bf:
         29:9e:e7:e6:29:bb:d6:30:74:25:71:4f:05:c4:be:b4:45:50:
         b0:ac:e7:01:14:be:95:e5:da:01:40:a7:5a:f6:31:49:08:33:
         6f:fa:c2:04:6e:94:c1:ad:b3:21:8d:1b:1c:b3:88:83:a3:5b:
         ca:80:4b:f2:5e:de:8a:94:38:b1:13:53:7c:7a:6e:bb:11:eb:
         ae:29:0e:45:f4:70:19:0f:7f:de:5d:78:67:e3:a9:b9:5a:8d:
         db:5c:10:65:0e:44:71:aa:1e:fe:3f:1f:4e:7c:46:67:61:67:
         f6:f2:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:32:14 2025 by rpki-client