Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File:                     Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier:          G5pKmgawVJ+RceSytq8Z9V8w38iYdJpjn7ZbDQecEtc=
Subject key identifier:   FC:0D:57:B6:4A:6B:7E:77:A4:86:84:FF:65:06:44:EF:A8:6B:E1:8A
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       0626
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number:          0610
Signing time:             Mon 08 Sep 2025 22:57:01 +0000
Manifest this update:     Mon 08 Sep 2025 22:57:01 +0000
Manifest next update:     Mon 15 Sep 2025 22:57:01 +0000
Files and hashes:         1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: 2BW1b8JG4YLVttkoqQkp97cELeN8a/g77VcCsJ7y6eA=)
                          2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: sbTShmIKKL0T6wr1tqxxOL+QE1luTX7NDd7NnR8wp7g=)
                          3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: krevIMI6IUNw/+chMIBio+O1qxsYHBvCeuqJ7cXD7Gc=)
                          4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: WXJDLjhJd3w6bj++/nA2IppIGCY5Tdg8yehmeKyxNgI=)
                          5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: c8cUKtHR+v6GeQIBes/j8ws19Cb2Y3YmnrIM72F/Gtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 22:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1574 (0x626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: Sep  8 22:57:01 2025 GMT
            Not After : Sep 15 22:57:01 2025 GMT
        Subject: CN=68bf5f3d-094a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f1:f5:81:b4:ae:13:77:2b:be:eb:6f:13:59:
                    96:50:bd:b7:da:ac:e5:11:03:e5:44:ab:0b:81:3b:
                    b5:28:7c:26:41:04:b3:8c:73:36:12:e7:81:7a:8e:
                    93:7c:f3:db:79:92:a8:e0:66:9e:2b:d6:56:de:d9:
                    61:92:9b:d8:1f:46:c6:0f:8c:55:0f:b4:13:83:3e:
                    dc:ef:58:d4:ba:5a:32:85:8b:f5:cc:05:e2:bd:65:
                    e2:b1:d1:fb:4e:17:24:4b:86:92:40:02:06:e0:3d:
                    69:6c:62:90:35:f9:7d:16:a3:e1:e1:36:c1:e4:3a:
                    39:81:02:0b:f2:40:05:de:e7:4f:61:35:67:7e:4f:
                    f1:ea:74:29:9d:1f:d2:e3:88:d1:aa:62:17:dd:e7:
                    16:78:47:95:81:ed:6f:3d:d3:3f:01:f2:43:c0:ce:
                    e3:2c:98:67:09:ec:3a:b3:75:16:34:25:a0:76:ee:
                    c1:f0:42:2a:86:dd:48:ca:87:c9:84:d8:6a:b6:c5:
                    4e:ca:e1:a5:36:86:c2:24:c0:7f:3c:0d:be:3e:b7:
                    f5:ce:f2:6a:5c:ad:6a:90:23:2d:0f:5f:48:d3:50:
                    65:11:22:aa:74:26:a8:9c:39:76:6a:c5:a4:19:3b:
                    eb:d1:eb:d8:c6:1b:dc:91:7f:f1:0e:25:e2:fc:61:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0D:57:B6:4A:6B:7E:77:A4:86:84:FF:65:06:44:EF:A8:6B:E1:8A
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:7b:16:54:fe:ea:0f:05:72:cd:a3:57:ff:16:1d:2a:ca:ac:
         a7:a2:c8:77:51:f4:3e:46:07:58:3a:ff:16:7b:ce:10:59:19:
         8b:e1:86:50:19:51:1d:49:fb:bb:df:7d:da:ab:72:54:d0:f3:
         6a:e2:70:48:73:32:d4:2b:ac:26:b6:b0:0e:9d:ba:1a:ed:8a:
         1f:25:35:01:e6:f0:3e:aa:1b:9a:c6:fa:ef:81:95:9e:2b:0b:
         c2:f0:46:28:04:8b:17:6e:51:91:56:64:d7:ac:79:7b:43:77:
         76:62:d6:d3:85:1a:dc:a5:17:ac:67:e8:f6:37:b2:ba:e2:15:
         0e:0e:3d:03:6d:77:27:2c:ed:f0:29:a2:d0:97:a4:f0:2c:a3:
         07:eb:03:b8:d5:6e:0d:48:98:c3:a7:e9:a3:18:97:58:40:c3:
         f9:8b:a0:e5:b6:3e:44:fd:7a:4d:21:53:46:f3:bb:a1:6d:17:
         cc:e3:2c:84:34:94:d0:cf:8b:05:dd:41:98:51:2e:85:38:09:
         23:3a:99:68:66:bc:5b:f2:6e:40:f0:1d:62:3a:28:bc:d4:98:
         93:25:73:9c:dc:02:ed:3c:2a:08:9a:b7:8c:4e:dc:77:13:bf:
         bb:04:63:c5:08:ad:e8:8c:ee:e9:66:8d:e2:e2:e5:09:98:48:
         42:36:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:51:20 2025 by rpki-client