Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
File:                     Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json)
Hash identifier:          qEVfPzfhYMwyozpfCYyFZO6bXlWf5QNHwi/gXVIAgxw=
Subject key identifier:   EB:63:05:2A:DD:0D:93:26:20:B5:DA:41:A7:32:E3:E1:63:F7:2D:24
Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
Certificate issuer:       /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
Manifest number:          8A
Signing time:             Fri 05 Sep 2025 07:04:09 +0000
Manifest this update:     Fri 05 Sep 2025 07:04:09 +0000
Manifest next update:     Fri 12 Sep 2025 07:04:09 +0000
Files and hashes:         1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: RPL/3ddG+0R7W8bs06o0HXpGAeepuc+SnlFsuhBsBHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 07:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
        Validity
            Not Before: Sep  5 07:04:09 2025 GMT
            Not After : Sep 12 07:04:09 2025 GMT
        Subject: CN=68ba8b69-6de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:48:31:94:b1:36:be:5d:2e:54:9c:ff:99:
                    83:d9:03:69:71:3d:07:66:17:9e:1e:6a:79:d4:62:
                    d1:a0:ee:85:d2:63:88:8a:78:4d:2c:c4:13:a5:18:
                    13:04:3e:b0:90:3a:a2:0f:8d:25:96:f1:17:60:f9:
                    8f:c5:ce:41:fc:b1:13:fd:06:b7:4b:38:cd:7e:3f:
                    b2:5c:dc:b4:c3:9e:cc:54:60:74:fc:3b:05:94:99:
                    15:6f:21:5d:08:a6:f6:2d:c6:c7:08:2b:cf:73:c9:
                    17:0d:e1:96:56:22:3d:1f:44:80:60:b5:35:9e:22:
                    91:ba:3e:08:9c:e9:ef:fd:14:45:2c:d1:f7:fe:a4:
                    d1:32:03:48:68:bc:cf:7b:18:86:08:d1:10:39:99:
                    ec:46:b2:dd:8d:46:f7:9f:ab:fa:4c:46:5a:48:a6:
                    91:7f:d7:9d:32:6b:16:b2:5c:43:2b:94:e5:40:7f:
                    29:c3:62:50:3a:b2:38:0e:5a:c5:58:b7:89:b9:3d:
                    7a:aa:74:f6:77:84:bb:3c:fa:b0:74:50:1c:93:75:
                    7e:70:a8:bc:2c:02:28:be:16:47:19:d8:cf:4d:1d:
                    28:46:20:e1:b6:07:0b:36:21:e0:50:e1:ef:71:33:
                    32:ab:ce:9b:0c:1c:2d:35:a9:e1:fa:89:18:19:17:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:63:05:2A:DD:0D:93:26:20:B5:DA:41:A7:32:E3:E1:63:F7:2D:24
            X509v3 Authority Key Identifier:
                keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:17:5b:01:61:7c:67:c4:7c:77:66:b4:3c:cf:be:96:30:d1:
         2e:b8:f8:fa:64:9e:ba:3b:94:ec:00:3a:f9:3c:d8:c7:42:8d:
         65:03:8b:68:ee:a0:24:75:a8:6d:51:be:5a:5a:90:13:85:bb:
         14:07:31:70:0a:b0:cf:cc:56:cf:76:36:e9:ed:70:b8:e5:ff:
         1d:01:08:4b:16:be:e1:b0:15:8e:a1:86:0c:da:fe:a9:46:3b:
         d5:44:0a:51:90:1c:d9:f8:6e:ad:96:23:c3:f2:48:2e:3d:53:
         be:dc:29:85:ec:31:50:b5:c2:17:61:18:89:9e:3e:31:8d:f7:
         77:00:87:0b:7d:bc:ec:04:66:af:b0:46:f4:a7:ef:51:53:82:
         fe:f5:90:a1:fe:2b:86:32:59:d4:51:37:3e:82:43:3f:58:4a:
         4f:5f:ff:19:f2:7c:c4:75:7f:12:6c:fd:7e:7c:9f:7f:26:f2:
         68:eb:e5:1e:3d:46:0a:9b:7d:b7:fd:1c:e6:b9:57:df:11:05:
         e5:21:76:20:ad:00:d8:b8:5b:0b:eb:95:32:a7:5f:9e:35:b9:
         6d:36:73:6e:a5:3c:b3:22:b1:2f:b0:4d:8e:49:c8:d9:47:da:
         c0:f8:35:4e:c3:c1:13:6d:23:e6:93:06:0b:fb:b9:be:5a:2e:
         b1:eb:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:10:12 2025 by rpki-client