Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File:                     QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier:          j28LV0658ZfkahwR9Bl7gnpeAqLBa2qeRRUrv7mGHWA=
Subject key identifier:   50:BC:A5:44:1C:E2:48:91:BF:9E:C2:1B:FE:66:B9:D4:7B:15:D6:18
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer:       /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number:          025C
Signing time:             Fri 05 Sep 2025 02:12:16 +0000
Manifest this update:     Fri 05 Sep 2025 02:12:15 +0000
Manifest next update:     Fri 12 Sep 2025 02:12:15 +0000
Files and hashes:         1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: m08Otbr6rr39iZnchZXdmi/ZYbTacoDlhlcsBEHLeL4=)
                          2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=)
                          3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: nLXw8xHgVCwgAvRtHZxNQ9V3CXfxyMaz7CQisoDfvuU=)
                          4: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: rj4BSUozmBkphVBEoUkEwSqqxoFitssfBqyMGi95Tf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 02:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
        Validity
            Not Before: Sep  5 02:12:15 2025 GMT
            Not After : Sep 12 02:12:15 2025 GMT
        Subject: CN=68ba4700-86ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:35:62:13:ac:f1:6a:87:1f:a0:6a:ec:8c:b6:
                    87:28:56:0f:ea:5d:8a:0a:b0:53:aa:f0:d2:60:e3:
                    59:aa:f9:a8:7a:c5:96:98:ce:d1:25:eb:83:df:65:
                    95:19:2e:8c:cd:79:df:69:98:cd:7b:d9:73:75:46:
                    9d:51:19:b7:ca:2c:b7:ae:ef:af:b2:d1:a7:b5:ba:
                    cd:b1:49:f6:96:c7:40:a4:6a:59:96:f3:3b:e8:47:
                    32:67:db:cc:ed:60:f4:49:e5:d6:c2:5c:4d:ae:4a:
                    1b:dd:41:c1:0a:7e:d4:66:2f:01:c7:9f:c5:97:c7:
                    98:c6:ba:bd:9b:8e:4f:29:17:e8:5d:26:ef:d4:3f:
                    6c:be:4e:0e:01:8a:da:58:8a:72:75:af:19:ef:d9:
                    0c:ee:70:d6:84:1f:1a:fa:bf:ff:00:5f:10:25:77:
                    41:94:a5:3e:66:63:8f:04:53:da:e2:53:05:5a:f0:
                    d1:c5:9c:26:9d:30:7c:e9:ba:8b:1a:0d:f6:9e:f0:
                    94:a8:fb:b0:13:a0:b1:74:9b:a9:25:14:21:7b:1e:
                    12:4b:d5:85:00:18:5b:7e:2e:81:99:1b:ae:5a:de:
                    a6:e5:bf:72:53:3a:f7:79:9b:83:b4:92:f4:ea:20:
                    10:86:31:b5:4d:a4:da:ec:90:a9:4d:1d:a1:9e:ac:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BC:A5:44:1C:E2:48:91:BF:9E:C2:1B:FE:66:B9:D4:7B:15:D6:18
            X509v3 Authority Key Identifier:
                keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cd:bb:a0:a3:81:51:0f:e5:17:41:5c:d0:63:99:13:2e:b5:
         27:32:0c:5c:f9:c0:a0:55:81:c6:ea:a4:f7:fb:ca:1c:86:c8:
         06:d6:de:72:a2:9d:48:22:42:a9:c8:5a:6f:56:51:a7:4f:69:
         5d:dc:aa:b6:d5:59:3c:62:eb:7c:06:25:29:af:74:0b:4f:72:
         aa:bc:ef:16:b5:55:a6:f5:14:b4:23:85:19:76:d3:cb:cb:f0:
         c5:92:e3:c9:33:28:12:9b:d4:1d:ea:74:34:34:db:31:76:e6:
         f7:e2:ba:18:42:44:d5:47:00:46:8b:21:40:78:4d:3a:8a:f4:
         92:c6:28:ba:15:82:81:af:89:b8:f9:a4:c6:29:bb:81:82:ac:
         76:71:98:78:c8:d4:83:47:3b:31:6f:e7:fd:b6:e9:dc:2e:c5:
         33:c5:ab:d4:87:cb:b9:7f:33:30:ad:77:79:7d:4c:2a:22:77:
         c5:ac:c9:d3:58:29:3b:2e:56:11:70:43:d0:15:eb:12:78:7f:
         b0:a3:1c:43:18:1e:80:bc:9a:99:8c:d6:7f:8e:32:f0:07:c8:
         0c:5b:36:6e:b6:08:ad:f9:4e:03:3a:e4:ca:08:37:6c:c0:11:
         fb:f2:db:b5:94:b7:6b:91:85:f4:56:75:b6:cc:53:21:84:bf:
         f2:72:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:04:36 2025 by rpki-client