Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
File:                     qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft (raw, json)
Hash identifier:          E66L8Qx+IGbr02ury2IUn/VXJLBJeGb+riX3XDfpWRs=
Subject key identifier:   E4:49:ED:78:22:A5:F1:73:92:32:26:C6:36:5A:C6:91:21:73:B5:DA
Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4
Certificate issuer:       /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
Certificate serial:       08C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
Manifest number:          08B9
Signing time:             Sat 06 Sep 2025 20:41:46 +0000
Manifest this update:     Sat 06 Sep 2025 20:41:46 +0000
Manifest next update:     Sat 13 Sep 2025 20:41:46 +0000
Files and hashes:         1: qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl (hash: bw9P8Wg71OOTPlRL4D3772/yIZt/UkfkSPkgegCIK9s=)
                          2: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (hash: Ikd/LHIFGkrNvlawlhSa/JEAr9UmpAWA/8H+UH2uQws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 20:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A13F, serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
        Validity
            Not Before: Sep  6 20:41:46 2025 GMT
            Not After : Sep 13 20:41:46 2025 GMT
        Subject: CN=68bc9c8a-a4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:3f:ef:57:30:76:e2:2d:60:f3:98:11:84:
                    f0:3c:57:bc:4b:2f:e3:45:87:61:09:c7:63:1e:0f:
                    a8:0a:ad:90:b1:00:98:3b:42:8b:d6:86:76:84:b2:
                    a6:7c:12:5b:a8:38:19:49:8c:7a:03:e6:b1:11:da:
                    d9:d4:7a:65:e4:dc:05:d2:41:27:16:94:57:06:d3:
                    3d:42:e1:1e:e5:f3:c8:18:b3:87:b1:83:4b:d1:99:
                    44:a3:78:46:e3:28:6d:a9:2f:e1:2f:68:95:3d:86:
                    63:6f:53:66:83:41:c0:8f:71:40:6b:9f:10:d5:c3:
                    2c:bb:81:dd:a7:3c:7d:71:c3:bc:61:78:19:c1:4c:
                    ff:46:11:f2:18:21:4b:d4:2b:8f:c6:e8:ee:f7:0e:
                    ab:e7:e2:96:3a:c8:bc:3e:e9:22:57:48:60:66:80:
                    96:4b:86:ad:5c:47:af:a6:3b:cc:ca:29:55:16:96:
                    95:01:04:d5:46:7a:39:f4:b0:cb:c5:2f:03:00:bf:
                    a1:8b:4d:7d:d8:a4:a6:ac:36:1f:c6:9f:02:51:76:
                    c7:4c:ad:0f:5e:aa:0b:bc:f2:e3:31:fc:b9:35:49:
                    a1:e6:2e:53:d9:aa:f2:da:51:f2:84:3e:0b:49:16:
                    22:22:71:77:48:44:21:de:7c:86:e5:15:58:73:f2:
                    b9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:49:ED:78:22:A5:F1:73:92:32:26:C6:36:5A:C6:91:21:73:B5:DA
            X509v3 Authority Key Identifier:
                keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:bd:df:42:55:31:e9:ec:cf:00:3c:b1:46:45:96:06:58:5c:
         c7:5e:ed:16:94:b0:28:70:1a:f1:81:ca:de:d5:66:c9:97:ce:
         b6:d0:0f:da:4d:fd:a5:a3:d8:64:65:d9:38:47:69:a6:f9:08:
         3d:1c:01:39:dc:1d:1c:db:bf:65:7e:75:f1:5f:6d:cc:dd:4d:
         2f:3e:93:3f:3f:f2:6b:7d:74:c5:f7:39:4c:c4:85:f0:0b:3b:
         9c:d5:e3:24:fd:c6:c9:c2:cb:cb:37:a7:22:3f:3f:2d:a1:62:
         2c:8c:8a:b3:90:1b:a4:30:f8:eb:14:35:06:f9:c7:df:a9:11:
         fb:0d:8a:65:55:d5:a6:15:a0:0b:58:d2:f7:08:01:ff:cf:6d:
         8c:f0:5f:87:20:e4:6f:73:a5:e5:03:4f:b8:17:52:2c:54:12:
         c1:c6:62:15:65:c7:69:40:aa:b9:1f:19:1b:4b:c7:51:8f:f2:
         1a:33:bf:74:59:93:15:57:fd:1d:44:18:a3:f3:e4:d1:a5:18:
         79:76:0f:09:54:28:32:62:c1:eb:25:33:6a:58:9c:a7:b4:87:
         9b:df:6b:33:c3:a2:fc:b5:05:46:09:16:3d:42:ba:2b:77:3d:
         31:b7:00:83:c6:85:46:5d:94:fa:73:f3:9b:81:fc:a6:b3:9e:
         89:4c:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:38:50 2025 by rpki-client