Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
File:                     qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json)
Hash identifier:          XgANzBwfLMUKOL9S/uS8PTR8Kla65ydOxEzH53MQyYY=
Subject key identifier:   30:30:F8:7B:58:A2:34:7F:CD:44:32:42:FF:5F:AE:6F:41:24:9F:F7
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
Manifest number:          0146
Signing time:             Sun 07 Sep 2025 04:49:09 +0000
Manifest this update:     Sun 07 Sep 2025 04:49:08 +0000
Manifest next update:     Sun 14 Sep 2025 04:49:08 +0000
Files and hashes:         1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: /d178JIsumWXrTVt3AKnl+VFE0zR6YEmiaEvKuWLpE0=)
                          2: E13D8940342E11EF84328672C4F9AE02.roa (hash: ktd5mpPgnA7DVPoDoDI59fbIVSssBE9h3J/Qc3SNd4I=)
                          3: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (hash: 53exXb+y74MMiXd9WVR4Lvbmf3aqTfFbV9OKgS6dCTc=)
                          4: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: 57MB5MLOBu0rlKWbYAUFlVy0tWIAfHRyTSUm9GeesCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 04:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Sep  7 04:49:08 2025 GMT
            Not After : Sep 14 04:49:08 2025 GMT
        Subject: CN=68bd0ec4-6e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:a1:d9:7c:62:66:df:1f:7f:f4:33:be:32:
                    69:d4:77:ef:f4:72:fa:72:70:7d:f7:dc:47:2d:9d:
                    49:ca:57:a4:cc:38:e6:0f:9b:73:a6:9a:ac:61:60:
                    7c:6b:53:e7:1c:51:5a:65:f1:0c:92:27:e5:a7:bc:
                    c6:90:57:3c:bb:52:40:e9:38:76:93:88:61:9a:1b:
                    36:07:cb:c2:10:cc:0d:ed:e6:82:1b:24:7e:1b:e7:
                    51:04:b4:4d:84:c5:ad:76:34:34:ef:83:7e:99:fb:
                    70:a5:fe:26:bd:7f:88:ac:17:14:01:8c:91:79:18:
                    63:26:1b:54:7b:b7:4d:24:35:a1:d0:44:55:ab:71:
                    c8:0f:f4:b6:22:03:aa:a1:48:86:a7:e2:a4:e6:5d:
                    19:71:b6:93:eb:48:c2:b1:90:28:99:d3:b9:ad:fb:
                    31:bc:47:d8:71:e4:08:8d:81:8f:08:cb:8c:d1:5b:
                    f3:4a:e9:24:ed:92:61:9d:4c:ba:e4:b9:19:bc:6f:
                    97:61:75:14:2a:29:6f:08:c0:7b:65:b0:38:5d:20:
                    9e:b5:ad:fe:02:3f:37:a4:4e:91:5a:5d:1f:f5:eb:
                    65:18:c1:5d:a6:e5:b5:e5:b5:1b:da:cf:35:1d:45:
                    48:bc:43:90:be:84:f5:25:01:9b:21:56:d7:66:c1:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:30:F8:7B:58:A2:34:7F:CD:44:32:42:FF:5F:AE:6F:41:24:9F:F7
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d7:28:42:c9:32:15:8a:07:51:c2:05:78:72:95:00:5c:51:
         33:18:81:f7:a6:6d:24:be:87:35:f7:83:84:38:4c:fb:fb:59:
         87:ad:c8:f8:3d:15:c1:cf:9f:0f:4e:d7:8b:94:2f:bf:b5:f2:
         99:02:6d:75:4d:35:d3:70:51:32:bc:64:5e:29:34:8a:3e:81:
         64:1d:91:85:79:3b:b6:55:b4:ec:85:37:d5:5d:08:a5:aa:ab:
         b4:59:42:31:c2:38:51:cc:c7:99:c2:83:23:f0:53:0a:d1:79:
         02:75:d6:9f:a2:f8:0c:13:64:03:37:3f:8c:51:0a:b2:9f:96:
         f4:3a:b1:95:72:11:4e:46:54:7f:41:59:43:a7:dd:06:52:c4:
         b8:6a:9c:25:e7:b4:5f:d4:6a:f2:8b:9e:fc:8a:30:61:4b:d2:
         59:0c:09:ee:db:95:0d:d6:4c:46:67:9f:43:b9:78:24:78:f8:
         28:3e:bd:7d:fd:3d:52:40:f3:a7:6f:94:f2:a9:55:50:8c:50:
         00:00:d1:46:0a:ca:5f:8d:7c:bd:ee:a6:60:8a:ea:ae:08:6e:
         47:ac:21:91:48:14:7b:f3:30:a5:05:b7:4a:f2:c6:ed:1f:2e:
         44:de:19:19:6f:5f:07:49:92:1d:29:f0:65:14:27:41:1a:5b:
         02:25:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:41:29 2025 by rpki-client