Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
File:                     QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json)
Hash identifier:          Q2jh3AqeUAEDGFYe+x+PkqqHC3ezPK3Z72dfaXsfhQE=
Subject key identifier:   5C:8E:E9:93:F3:4E:D4:C1:80:F3:55:B4:C9:3C:F9:8E:07:45:55:D3
Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB
Certificate issuer:       /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
Manifest number:          01E4
Signing time:             Sat 23 Aug 2025 02:46:51 +0000
Manifest this update:     Sat 23 Aug 2025 02:46:51 +0000
Manifest next update:     Sat 30 Aug 2025 02:46:51 +0000
Files and hashes:         1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: f38BGorguWJn+JXolhsnTLyubBV3moS5tuj7tfNlWbE=)
                          2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: pYWe5nhEh7lryxcWey5nEqoA/9P5QKHAVOb9CwXBhN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl
                          rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
        Validity
            Not Before: Aug 23 02:46:51 2025 GMT
            Not After : Aug 30 02:46:51 2025 GMT
        Subject: CN=68a92b9b-f378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:93:2a:c3:09:7d:ab:23:cb:eb:b9:29:e1:
                    49:0b:ad:8f:de:b6:a5:dd:a6:4e:64:e1:36:b3:d1:
                    c1:87:88:64:99:9b:8b:09:d4:e6:a0:4d:02:64:31:
                    f9:f9:78:4d:88:2f:7c:06:71:6d:07:85:a8:80:c9:
                    23:21:b5:04:1a:96:e8:c1:3c:35:37:65:76:16:84:
                    36:9a:eb:58:68:c7:50:c5:2e:4d:ee:da:7e:ac:f7:
                    51:d4:dc:37:57:8d:d7:62:bb:34:79:eb:fb:4e:ee:
                    9f:35:f0:76:42:3b:2f:5d:8d:f1:b5:7c:49:ed:55:
                    f4:8a:53:e6:38:20:2f:89:45:13:2f:ec:35:56:c8:
                    10:77:26:75:92:91:75:63:6a:85:28:1a:bf:a1:c8:
                    db:4d:86:4b:cd:dc:a1:61:4f:54:71:66:b5:35:ed:
                    e4:5d:32:b1:69:b7:d5:5b:cb:7b:e9:3a:ac:92:a6:
                    bd:01:cd:b7:35:70:6f:f0:98:f6:b5:ed:3f:97:42:
                    62:31:87:77:21:83:3a:99:0a:45:2a:ea:47:3c:ba:
                    a5:47:30:df:ba:b7:90:fb:a8:14:fc:14:28:91:ac:
                    2a:e3:47:82:21:e9:3a:45:3e:d5:0a:9f:d0:58:52:
                    c2:9d:fb:52:1f:41:4b:99:bd:8e:99:4a:4a:fd:9f:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8E:E9:93:F3:4E:D4:C1:80:F3:55:B4:C9:3C:F9:8E:07:45:55:D3
            X509v3 Authority Key Identifier:
                keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:7a:6f:d3:a1:5c:35:96:ee:29:a6:55:50:9a:54:8b:90:
         1a:80:11:17:7a:c6:b7:50:60:f6:51:db:47:ab:23:80:0d:94:
         02:80:b1:e6:7a:0c:65:38:eb:5b:89:bc:3b:07:16:72:b3:23:
         8f:c6:c4:01:9c:f1:3f:38:8c:2f:b3:a4:2b:80:a3:d9:04:11:
         94:ed:2d:e2:18:63:30:89:43:62:d6:27:4b:98:f2:48:51:43:
         46:df:16:d2:a4:ac:70:80:c3:91:08:37:2d:59:77:ad:bc:64:
         87:b6:38:7b:11:8e:e5:3a:51:0e:98:30:3a:4f:b2:31:43:97:
         ea:19:75:be:b6:0a:61:97:12:b6:81:b2:0d:ac:bd:7e:cd:3c:
         ba:94:71:09:ba:39:9a:ad:aa:d2:d1:9a:62:31:ed:ab:c1:9f:
         eb:ae:c2:fc:6c:ee:6a:2b:45:10:fa:1a:2d:3d:f7:52:a3:9e:
         97:cf:f3:5e:c0:28:f5:be:a8:35:a3:b1:e0:c6:b6:d3:8c:9f:
         e9:ee:e3:7b:57:80:02:16:a6:74:71:82:42:07:6b:3e:fa:bc:
         36:05:73:4e:13:a1:61:08:27:b1:3b:eb:09:82:da:b5:4a:ed:
         e2:47:04:fb:e1:18:11:14:a1:3a:fa:45:fe:b7:70:29:5c:20:
         ae:20:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:07:05 2025 by rpki-client