Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File:                     qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier:          Qrlp76/GgGmLFG7uhnc/yvoKHaMwJmEUAgb+HKLYQtI=
Subject key identifier:   CF:CF:DC:9C:8F:DD:4D:EC:53:8F:1B:B6:1B:14:09:CC:8A:B1:51:37
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer:       /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number:          80
Signing time:             Mon 21 Jul 2025 06:49:33 +0000
Manifest this update:     Mon 21 Jul 2025 06:49:32 +0000
Manifest next update:     Mon 28 Jul 2025 06:49:32 +0000
Files and hashes:         1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: 18bjmrHc5Vtv8jf4Fh4injo2EAQqQ37YtLIKlywgoA8=)
                          2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: ow0JlSSKtHwrzhAKotnC4Hb7SPL+BmK/kbudjjYhQGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
        Validity
            Not Before: Jul 21 06:49:32 2025 GMT
            Not After : Jul 28 06:49:32 2025 GMT
        Subject: CN=687de2fc-d3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1f:d1:ae:4a:b9:15:4d:a2:e6:74:f9:e5:9f:
                    89:3c:67:41:d0:5f:1e:94:7b:92:98:7a:5e:30:20:
                    d9:f2:49:6d:5f:fd:8b:57:7b:47:90:21:d5:da:b4:
                    e2:93:7e:11:8e:a7:5e:08:1f:74:8b:c4:e5:06:c9:
                    2e:a9:d8:80:64:f2:2d:6c:09:dc:f8:de:e8:75:04:
                    7a:98:17:26:78:3f:f2:79:b2:e2:c3:31:9e:2b:8a:
                    ac:a6:e0:ef:dc:a6:95:71:d4:fa:36:a9:8c:4d:81:
                    68:1c:e8:0c:17:d3:f9:92:6e:52:10:8f:bd:d3:aa:
                    07:0b:1d:ec:d5:a8:53:af:56:5e:66:1c:58:99:9b:
                    2c:05:e9:e7:34:3a:60:30:14:07:6a:6d:20:81:05:
                    49:93:23:ac:d5:a3:5b:ea:c6:1d:41:9c:9f:f1:72:
                    ef:03:4a:de:2e:4a:c9:01:81:64:28:95:e1:d8:f5:
                    f9:67:31:cf:96:8b:85:c0:69:75:03:2d:ef:7b:fb:
                    7a:d3:b7:01:5a:72:cb:4e:f4:34:fb:f6:9d:7b:f7:
                    a5:be:56:ab:e2:7f:b0:fd:4d:59:9f:14:aa:a1:08:
                    b4:3f:53:e3:d5:d6:dd:81:8a:71:04:30:32:cd:f8:
                    bc:fe:9b:9d:d2:78:cd:c5:7b:11:8d:41:11:f6:08:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CF:DC:9C:8F:DD:4D:EC:53:8F:1B:B6:1B:14:09:CC:8A:B1:51:37
            X509v3 Authority Key Identifier:
                keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a4:3e:66:7f:4c:8e:9d:51:81:7a:0b:28:dd:44:62:c7:13:
         7e:03:7c:21:40:b6:9f:36:8d:4b:7e:a7:d4:4d:ec:9a:10:c0:
         7b:c0:55:42:3d:f5:7a:11:44:2a:37:da:34:a9:56:62:6f:9d:
         39:a9:fd:a4:83:b7:8a:2d:95:38:0c:50:bf:85:40:1c:db:46:
         b0:24:07:63:4c:28:2b:1e:ff:ec:2d:71:0a:76:4b:54:95:cd:
         49:a9:8a:72:43:8b:de:39:5b:26:7a:ff:d5:14:bb:b9:a8:e0:
         4f:ac:05:3a:eb:55:b1:4e:72:51:1c:74:11:a8:c1:ea:b0:0c:
         47:ee:40:27:9d:18:7b:2e:94:f0:e0:78:48:07:3a:0a:81:1d:
         a7:cb:b0:30:1a:4f:85:5e:74:f8:96:64:d3:7b:49:43:d4:34:
         49:96:08:70:dd:4e:f6:93:af:95:93:5e:35:79:9d:40:08:46:
         f6:3b:5c:0e:02:51:08:7e:7e:8a:56:ef:53:9d:3b:ef:25:80:
         f2:94:04:aa:68:b9:7b:ec:32:be:25:ae:68:fa:31:87:b4:d7:
         0c:98:fe:d2:39:4c:a3:61:b4:38:ae:38:1a:46:18:93:47:6a:
         76:ce:2c:21:3f:a8:d3:a5:d3:71:97:0f:73:55:32:54:33:99:
         f5:fe:e1:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQxNjQxMTAvBgNVBAUTKEE4NzM3MjAxRkE0QzY0RkEwMDU2NDAyMkRCMDZGNjBF
N0VFMkNEMEQwHhcNMjUwNzIxMDY0OTMyWhcNMjUwNzI4MDY0OTMyWjAYMRYwFAYD
VQQDEw02ODdkZTJmYy1kM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5R/Rrkq5FU2i5nT55Z+JPGdB0F8elHuSmHpeMCDZ8kltX/2LV3tHkCHV2rTi
k34RjqdeCB90i8TlBskuqdiAZPItbAnc+N7odQR6mBcmeD/yebLiwzGeK4qspuDv
3KaVcdT6NqmMTYFoHOgMF9P5km5SEI+906oHCx3s1ahTr1ZeZhxYmZssBennNDpg
MBQHam0ggQVJkyOs1aNb6sYdQZyf8XLvA0reLkrJAYFkKJXh2PX5ZzHPlouFwGl1
Ay3ve/t607cBWnLLTvQ0+/ade/elvlar4n+w/U1ZnxSqoQi0P1Pj1dbdgYpxBDAy
zfi8/pud0njNxXsRjUER9gga4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/P3JyP
3U3sU48bthsUCcyKsVE3MB8GA1UdIwQYMBaAFKhzcgH6TGT6AFZAItsG9g5+4s0N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BNjhFMjY0RUEx
ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQb0FWa0FpMndiMkRuN2l6
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FITnlBZnBNWlBvQVZrQWkyd2IyRG43aXpRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDE2NC9BNjhFMjY0RUExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQ
b0FWa0FpMndiMkRuN2l6UTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBspD5mf0yOnVGBegso3URixxN+A3whQLafNo1LfqfUTeyaEMB7wFVC
PfV6EUQqN9o0qVZib505qf2kg7eKLZU4DFC/hUAc20awJAdjTCgrHv/sLXEKdktU
lc1JqYpyQ4veOVsmev/VFLu5qOBPrAU661WxTnJRHHQRqMHqsAxH7kAnnRh7LpTw
4HhIBzoKgR2ny7AwGk+FXnT4lmTTe0lD1DRJlghw3U72k6+Vk141eZ1ACEb2O1wO
AlEIfn6KVu9TnTvvJYDylASqaLl77DK+Ja5o+jGHtNcMmP7SOUyjYbQ4rjgaRhiT
R2p2ziwhP6jTpdNxlw9zVTJUM5n1/uH0
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:47:17 2025 by rpki-client