Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File:                     QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier:          zlAcaTVU/b2OXdbxZswWQbgDw3aclCHT56+ciSQAA3k=
Subject key identifier:   97:67:A2:FB:61:1E:40:78:ED:99:88:E5:A7:EC:99:3C:4E:13:BB:2E
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer:       /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number:          015E
Signing time:             Tue 09 Sep 2025 04:16:15 +0000
Manifest this update:     Tue 09 Sep 2025 04:16:15 +0000
Manifest next update:     Tue 16 Sep 2025 04:16:15 +0000
Files and hashes:         1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: SYR/17MgVky+DN5nAVvCVcV+5rKJP0xYIvh6pO6lpkc=)
                          2: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (hash: FYt2RufvdZwSZ5zQDPicr3Fxe0XZIP7npmhW3SH2a8Y=)
                          3: 5A5E75E2E30611EFAD52D552C4F9AE02.roa (hash: nu5dbwOLlZ13YTkUDnySdOEtRFAsDLmzMv0XGB5W4wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 04:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Validity
            Not Before: Sep  9 04:16:15 2025 GMT
            Not After : Sep 16 04:16:15 2025 GMT
        Subject: CN=68bfaa0f-30f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:7d:08:6b:9d:f9:08:98:de:36:eb:1c:e0:
                    5b:9d:a7:bd:a8:68:a5:70:6d:bf:32:7c:c9:4c:54:
                    45:00:b3:53:dd:13:3b:ba:a4:ac:22:fb:23:bd:1d:
                    5f:d1:a9:ce:2f:5e:d5:6d:fe:9d:4e:28:b5:b4:7f:
                    6f:bf:2e:05:d2:b3:93:db:e2:65:0d:b5:fd:f9:df:
                    3f:22:a0:f1:81:a2:fe:ee:ef:ef:27:41:0f:ee:4a:
                    58:92:de:56:f7:6d:87:78:cd:38:67:47:e8:6c:3f:
                    86:0c:5f:78:d0:e1:3d:7f:8c:b2:f8:fe:1d:25:71:
                    bc:66:b9:03:51:92:58:84:a1:e5:95:52:6b:9f:00:
                    9a:64:7e:21:3f:ec:47:f3:5d:38:9a:d1:f6:40:f6:
                    8b:74:8a:bb:5c:4b:7e:e9:e4:cc:44:a7:64:65:5d:
                    5c:b8:f9:90:85:0f:d0:4f:35:84:97:9b:cf:5f:55:
                    0d:6e:b8:91:41:ba:82:c5:8e:05:49:36:3e:54:19:
                    c8:e4:c3:76:1a:ee:03:8d:6f:2f:b7:fc:e1:dd:88:
                    67:02:d9:50:b8:03:b1:da:5b:06:55:5d:50:ee:cd:
                    a7:43:5e:e5:7e:33:9c:7a:36:a6:bf:f0:ee:7b:d3:
                    e2:cb:4a:8e:d5:21:49:d8:1c:5b:45:27:4f:85:a5:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:67:A2:FB:61:1E:40:78:ED:99:88:E5:A7:EC:99:3C:4E:13:BB:2E
            X509v3 Authority Key Identifier:
                keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4e:8d:0d:17:be:87:ee:b0:ed:4c:3b:a8:b8:d8:a1:e7:9f:
         34:5f:a8:6e:b3:40:7f:94:3f:36:01:4e:d4:e7:b6:94:91:d8:
         31:da:cd:52:b8:12:7e:0d:fa:fb:95:90:d6:d8:6a:22:74:1d:
         f2:64:e2:1d:df:41:cb:e3:87:98:26:df:98:55:fc:df:f7:85:
         e9:e8:fc:21:6a:57:35:ce:8b:2f:28:c2:05:59:70:e0:9b:1a:
         7b:d7:4f:e4:a9:0a:49:8e:6a:19:af:95:a1:63:aa:a4:d0:5b:
         c6:60:30:4f:bf:95:2d:63:40:84:ae:16:00:cd:c6:c0:46:66:
         21:f6:e2:d1:ca:c6:3f:d5:7e:59:73:e4:97:65:5e:db:22:48:
         67:08:73:c7:d6:09:66:d1:1b:bd:25:c4:b1:5d:36:b3:39:4e:
         d1:a6:49:41:bd:4b:7b:8a:a5:95:c0:33:38:37:3e:1a:84:1d:
         ff:08:33:be:cc:89:9a:9f:65:49:26:ff:02:f6:4c:54:f8:54:
         ad:28:27:7a:a4:51:2a:5d:38:68:5c:92:4e:c4:b6:15:f4:13:
         3d:92:72:70:39:60:df:e6:5d:92:fe:8f:25:d9:00:4b:bf:b3:
         b2:b7:7a:37:10:da:7f:8d:76:a8:ab:75:e9:5b:41:23:88:9d:
         fc:1f:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:28:51 2025 by rpki-client