Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
File:                     RQlomWbTeSdWnPLLtE_-k6yo5oE.mft (raw, json)
Hash identifier:          N7ieNM4KGA4sj7oFz6GAOTglRX7IPasQAU87bze9a1M=
Subject key identifier:   CC:27:08:FD:49:E4:DB:C0:87:2E:5C:C1:5E:7B:0A:0A:89:FC:5E:B5
Authority key identifier: 45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81
Certificate issuer:       /CN=A9147609/serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
Certificate serial:       0814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
Manifest number:          1E2F
Signing time:             Sun 24 Aug 2025 16:45:50 +0000
Manifest this update:     Sun 24 Aug 2025 16:45:49 +0000
Manifest next update:     Sun 31 Aug 2025 16:45:49 +0000
Files and hashes:         1: RQlomWbTeSdWnPLLtE_-k6yo5oE.crl (hash: /oVuqz5CdGsURWWHXa3sdeJmwLTg2dTMqyMqNSoEuWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl
                          rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 16:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609, serialNumber=4509689966D37927569CF2CBB44FFE93ACA8E681
        Validity
            Not Before: Aug 24 16:45:49 2025 GMT
            Not After : Aug 31 16:45:49 2025 GMT
        Subject: CN=68ab41bd-5c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:99:c5:27:a3:37:90:7b:c4:7f:6d:78:31:
                    69:c1:75:44:fc:ba:44:3d:55:a1:8a:80:91:05:c9:
                    96:52:ed:5c:ae:a9:14:eb:4a:3d:73:1a:db:4e:22:
                    3e:77:1d:4c:c7:e6:26:a4:5d:c6:8c:5c:23:ed:8b:
                    38:44:ac:7c:c1:29:7f:e0:a6:a9:e8:b5:9e:a2:ea:
                    af:dc:66:3b:d6:86:9d:90:96:93:21:dd:57:94:db:
                    1c:95:e9:7c:8e:c4:94:eb:ee:99:24:e4:d9:09:aa:
                    87:31:f4:b6:52:59:18:98:83:78:3a:db:8d:c8:87:
                    70:7a:93:07:3e:fc:07:a6:04:16:75:1f:27:69:68:
                    f8:4f:8a:e3:c0:5f:b4:a2:78:8d:90:92:f6:73:17:
                    2d:2f:35:91:eb:04:46:e3:1c:0f:72:42:a6:98:d7:
                    a8:dc:52:c9:33:ef:f1:ca:b4:bb:ff:41:82:d6:35:
                    62:01:b8:82:5d:21:05:99:2b:c3:6c:55:32:a7:d8:
                    f5:81:38:4c:d0:8e:3f:c5:c9:d3:c1:57:45:4c:59:
                    30:78:2d:8e:8b:67:1c:e5:eb:86:c2:e4:22:30:79:
                    d0:c7:20:48:b6:ef:9a:56:4a:2f:96:8d:a3:fe:14:
                    47:e3:30:a5:1a:d9:ab:1d:d5:55:5a:f3:26:b4:76:
                    10:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:27:08:FD:49:E4:DB:C0:87:2E:5C:C1:5E:7B:0A:0A:89:FC:5E:B5
            X509v3 Authority Key Identifier:
                keyid:45:09:68:99:66:D3:79:27:56:9C:F2:CB:B4:4F:FE:93:AC:A8:E6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RQlomWbTeSdWnPLLtE_-k6yo5oE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/RQlomWbTeSdWnPLLtE_-k6yo5oE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a2:16:16:ab:3e:ae:21:df:52:8c:fe:c0:ba:97:11:a0:87:
         49:0c:9e:7c:b4:53:0c:83:43:d5:c6:0b:f5:b5:24:47:93:7a:
         9b:c5:76:cc:9e:db:b9:a0:ee:ec:41:28:5a:d3:f7:39:5f:bb:
         f5:99:80:01:84:56:b2:7d:50:a4:f9:27:8e:6b:cc:e0:8d:1d:
         ef:6c:5a:37:b1:92:82:64:94:12:c3:ba:1f:1b:a8:92:94:67:
         27:6a:17:2a:b1:1e:97:58:15:ec:5e:c1:30:46:1b:52:b8:92:
         e6:aa:18:ea:2e:29:58:b6:6d:bc:a9:e1:52:08:a4:e2:d6:33:
         9f:10:f8:0b:6a:86:fc:e6:33:a3:3c:c7:12:94:e1:49:21:1d:
         b7:38:f3:d9:17:90:4e:40:a1:64:b1:25:54:af:53:f7:ed:00:
         c1:57:95:93:d5:d1:c1:8a:92:0b:21:b7:7d:98:db:19:3b:48:
         b9:3b:c0:03:72:b3:35:06:d3:fc:19:74:c1:e4:fd:ef:af:42:
         4e:69:d7:72:75:b7:2f:b5:1f:e2:2b:12:01:2a:bd:ba:21:e5:
         1f:06:8c:18:41:bd:f4:b2:4c:e0:30:a4:f8:f3:f8:93:70:d5:
         c3:b7:af:68:aa:c3:4a:a5:09:85:5c:12:68:81:2a:40:21:4f:
         61:d4:b1:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc2MDkxMTAvBgNVBAUTKDQ1MDk2ODk5NjZEMzc5Mjc1NjlDRjJDQkI0NEZGRTkz
QUNBOEU2ODEwHhcNMjUwODI0MTY0NTQ5WhcNMjUwODMxMTY0NTQ5WjAYMRYwFAYD
VQQDEw02OGFiNDFiZC01YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoUWZxSejN5B7xH9teDFpwXVE/LpEPVWhioCRBcmWUu1crqkU60o9cxrbTiI+
dx1Mx+YmpF3GjFwj7Ys4RKx8wSl/4Kap6LWeouqv3GY71oadkJaTId1XlNsclel8
jsSU6+6ZJOTZCaqHMfS2UlkYmIN4OtuNyIdwepMHPvwHpgQWdR8naWj4T4rjwF+0
oniNkJL2cxctLzWR6wRG4xwPckKmmNeo3FLJM+/xyrS7/0GC1jViAbiCXSEFmSvD
bFUyp9j1gThM0I4/xcnTwVdFTFkweC2Oi2cc5euGwuQiMHnQxyBItu+aVkovlo2j
/hRH4zClGtmrHdVVWvMmtHYQ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwnCP1J
5NvAhy5cwV57CgqJ/F61MB8GA1UdIwQYMBaAFEUJaJlm03knVpzyy7RP/pOsqOaB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzYwOS82MzJDMzBBRTQ0
MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9SUWxvbVdiVGVTZFduUExMdEVfLWs2eW81
b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JRbG9tV2JUZVNkV25QTEx0RV8tazZ5bzVvRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzYwOS82MzJDMzBBRTQ0MEUxMUU4OTAzRDNBNUJDNEY5QUUwMi9SUWxvbVdiVGVT
ZFduUExMdEVfLWs2eW81b0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtohYWqz6uId9SjP7AupcRoIdJDJ58tFMMg0PVxgv1tSRHk3qbxXbM
ntu5oO7sQSha0/c5X7v1mYABhFayfVCk+SeOa8zgjR3vbFo3sZKCZJQSw7ofG6iS
lGcnahcqsR6XWBXsXsEwRhtSuJLmqhjqLilYtm28qeFSCKTi1jOfEPgLaob85jOj
PMcSlOFJIR23OPPZF5BOQKFksSVUr1P37QDBV5WT1dHBipILIbd9mNsZO0i5O8AD
crM1BtP8GXTB5P3vr0JOaddydbcvtR/iKxIBKr26IeUfBowYQb30skzgMKT48/iT
cNXDt69oqsNKpQmFXBJogSpAIU9h1LFE
-----END CERTIFICATE-----
Generated at Sun Aug 24 21:54:11 2025 by rpki-client