Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
File:                     qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft (raw, json)
Hash identifier:          pN4VOrz/Cz3x4+3ocQumVcidzrtqg+jHlWulaUtrq5c=
Subject key identifier:   D9:58:DA:9D:3D:A6:E9:68:FB:1B:16:B4:38:22:47:4C:0F:E0:FC:74
Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14
Certificate issuer:       /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
Certificate serial:       3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
Manifest number:          3E
Signing time:             Sat 23 Aug 2025 07:43:59 +0000
Manifest this update:     Sat 23 Aug 2025 07:43:59 +0000
Manifest next update:     Sat 30 Aug 2025 07:43:59 +0000
Files and hashes:         1: qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl (hash: KUlp0WD/bHfPAtQ6Pyan4ZUGQoaQUyimSGBBKbfKB9c=)
                          2: B3AF09C0209D11F0B81D0B48C4F9AE02.roa (hash: hWtosufayWdgaVHIvvIcT7QIe+pwqrjTdl4WzVjv7Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl
                          rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
        Validity
            Not Before: Aug 23 07:43:59 2025 GMT
            Not After : Aug 30 07:43:59 2025 GMT
        Subject: CN=68a9713f-8dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:a1:29:f7:5e:1b:60:7e:88:85:44:79:47:
                    49:b3:0b:17:da:5e:f3:70:a2:fb:5b:1f:05:6b:8d:
                    5e:fa:91:02:c4:7b:dd:b3:8d:65:e5:7a:6f:eb:d9:
                    8e:a1:88:96:8f:fd:87:62:59:9d:9e:e2:91:42:12:
                    5f:94:65:39:c4:ac:86:66:ce:b0:b8:25:b2:12:e1:
                    ae:31:ed:06:35:b2:95:9c:bd:55:b3:02:c3:04:4f:
                    3c:67:60:a5:40:3e:6a:b0:1b:ca:d7:ec:b2:d3:a3:
                    20:1a:b2:cb:fb:48:44:78:0d:40:b7:5f:7f:51:32:
                    62:4b:fa:e0:8c:52:07:20:45:65:02:9f:56:81:d4:
                    a3:9f:84:67:12:fa:72:13:f9:b4:a8:34:a8:1c:7a:
                    48:ec:af:35:5d:73:a5:1b:c5:e4:36:26:2e:4d:27:
                    46:63:85:52:28:c7:ab:63:69:b3:d1:8d:ef:b9:ed:
                    a2:c6:95:4f:1b:7f:5a:1b:ea:95:30:21:e9:d2:d4:
                    62:d2:65:72:1c:3e:8d:11:56:87:90:1a:56:be:3d:
                    09:c2:63:53:47:83:80:d9:25:41:56:90:be:a4:4f:
                    11:2f:58:f7:3d:0d:59:ae:81:9a:26:ba:58:e6:80:
                    8e:78:26:2a:e3:3a:74:0e:e3:32:d1:ae:bf:37:eb:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:58:DA:9D:3D:A6:E9:68:FB:1B:16:B4:38:22:47:4C:0F:E0:FC:74
            X509v3 Authority Key Identifier:
                keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:5f:81:2a:82:ab:d1:9f:66:36:4d:50:ff:42:6c:95:c7:
         7d:2a:73:dd:b5:69:1e:f2:ea:69:45:b0:16:2e:45:a7:48:eb:
         cd:a8:6e:7b:47:d6:89:f7:8d:dc:c1:ce:0c:15:b0:c0:e5:f7:
         11:ab:71:5c:86:2e:2e:f5:7a:77:b1:3b:6d:e4:fd:e5:73:40:
         80:28:c7:f0:c3:f2:5b:16:8a:96:f1:d5:4a:eb:a8:78:a8:59:
         59:50:45:b3:c9:9a:68:b8:ac:b4:66:1b:c7:24:40:ab:96:4d:
         b1:a6:b4:a1:ab:d1:85:35:fc:d7:a6:4a:28:bd:94:8c:34:18:
         b3:aa:be:c1:2d:71:15:ff:c9:29:8b:67:7e:88:2e:90:73:f6:
         bc:e8:b3:e4:7c:27:af:0b:0a:c7:65:49:5e:79:ab:cc:e8:a7:
         11:af:ce:c2:d7:ff:19:1d:47:34:66:a3:28:eb:78:c8:1d:da:
         64:e8:ce:4f:c0:37:86:f0:0d:e2:d5:cb:38:5d:da:47:4a:a1:
         cc:7f:7e:d1:7c:34:09:a6:83:42:41:fe:f0:4c:83:de:03:85:
         56:42:88:26:ad:58:bb:05:b3:62:e9:b2:a3:10:41:00:b4:83:
         53:f5:4b:c4:43:2b:26:dd:9e:ee:39:78:b1:bb:97:c2:04:c9:
         1f:90:69:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:48:15 2025 by rpki-client