Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
File:                     QqvQ9dysTQxkACUczEnW_9l1Q78.mft (raw, json)
Hash identifier:          YO2OUOjVvhr2f8C2El6GYJrfYF1rDnMc07gZ7roKWmA=
Subject key identifier:   83:6A:94:B3:ED:01:50:6E:C6:93:FD:18:7E:F5:87:94:50:DA:0E:D8
Authority key identifier: 42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF
Certificate issuer:       /CN=A9147609/serialNumber=42ABD0F5DCAC4D0C6400251CCC49D6FFD97543BF
Certificate serial:       155E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
Manifest number:          1E28
Signing time:             Wed 20 Aug 2025 16:52:10 +0000
Manifest this update:     Wed 20 Aug 2025 16:52:10 +0000
Manifest next update:     Wed 27 Aug 2025 16:52:10 +0000
Files and hashes:         1: QqvQ9dysTQxkACUczEnW_9l1Q78.crl (hash: ImO4+3iMVIw1rjBYQHwTMLdpEY1Dj9MDArmES+TLa0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.crl
                          rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 16:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5470 (0x155e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609, serialNumber=42ABD0F5DCAC4D0C6400251CCC49D6FFD97543BF
        Validity
            Not Before: Aug 20 16:52:10 2025 GMT
            Not After : Aug 27 16:52:10 2025 GMT
        Subject: CN=68a5fd3a-bed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:b4:2a:e1:2f:17:d9:b4:19:e3:2b:00:fe:
                    1b:0f:63:46:db:54:b3:ac:67:0e:57:cf:e2:f6:02:
                    da:64:5e:78:a6:fa:e4:b9:ad:d2:38:d5:5e:9e:56:
                    07:b5:73:e3:71:fe:9f:e8:8d:72:54:62:42:8d:80:
                    e4:81:3c:d8:51:6b:ed:48:19:9b:4a:b4:fd:ff:9e:
                    4a:17:0b:35:44:90:88:d1:23:35:7d:b3:90:fe:c8:
                    23:4a:68:1d:17:3a:68:9f:e5:43:d7:c5:17:d4:07:
                    5f:92:6c:e0:1d:ac:49:a8:fc:c1:43:42:50:78:a0:
                    f8:e8:b2:91:0d:86:58:29:40:97:c7:a4:3d:72:a3:
                    e9:0d:4c:4f:da:32:ce:e4:70:74:ee:95:f9:26:20:
                    78:eb:a0:fe:e1:b8:32:5d:6e:0d:5b:94:ff:fa:f4:
                    92:c8:f7:57:46:2d:21:bc:75:5f:0b:85:84:99:e8:
                    54:ad:bb:20:3f:02:96:81:4c:51:08:e2:b2:ec:0b:
                    9f:b2:27:c9:d3:10:23:31:15:a5:e6:a2:de:57:71:
                    02:af:b9:de:45:79:92:6f:88:8b:4e:0e:60:00:f8:
                    22:1b:57:b7:77:e3:35:09:b2:57:ea:c8:2e:af:48:
                    ea:b3:e4:65:71:0c:94:e5:5e:d9:db:d8:51:cc:ab:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6A:94:B3:ED:01:50:6E:C6:93:FD:18:7E:F5:87:94:50:DA:0E:D8
            X509v3 Authority Key Identifier:
                keyid:42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:67:a7:f9:71:a7:e8:99:95:f2:80:23:78:a1:f9:43:67:b4:
         c5:2d:b2:43:7f:64:9e:df:c9:9e:c7:c0:26:5d:01:70:1d:1f:
         d5:9b:a6:65:aa:9b:8e:ba:eb:c0:92:34:ae:9f:bb:0b:6e:2b:
         13:bc:f4:d4:ee:38:66:7b:98:df:73:bb:13:84:5d:32:d7:a7:
         05:ed:5a:82:72:5f:07:93:82:6b:a4:6a:ed:c1:54:5f:3c:15:
         6c:1a:2e:06:02:a8:39:4c:f6:5f:88:7d:93:4e:43:ce:6a:e3:
         16:d5:32:8b:6d:b4:8f:80:90:01:95:a7:c0:12:ec:d8:44:c4:
         15:c9:e6:98:2d:62:09:70:cc:e9:a7:53:62:16:9d:65:31:d9:
         15:5f:48:09:d4:a8:38:1e:4d:b0:e2:48:b9:0a:ae:e7:b8:76:
         59:22:27:fa:0d:54:e0:9a:38:c9:57:95:b4:4f:7c:49:9a:6c:
         59:51:54:3c:5c:0a:c8:5a:b6:fc:b9:fb:8c:d1:e5:00:3e:7a:
         4a:a4:f3:2f:02:2a:eb:0f:d5:f8:a7:dc:4e:c3:0f:d6:b7:bf:
         01:a8:8a:fc:95:11:a1:08:36:49:f3:db:03:4b:78:bd:a9:45:
         54:00:85:27:0d:03:92:0a:25:ee:75:2e:fd:ac:89:e7:d6:e5:
         48:fc:c8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:36:06 2025 by rpki-client