Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
File:                     QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json)
Hash identifier:          I66L/OKwAuPtBxqFuRGXbhhKKuNfW00xnjWSFXveavw=
Subject key identifier:   00:B8:28:3A:07:23:72:77:76:5A:6E:FE:42:F3:BF:EA:68:D7:30:F0
Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
Certificate issuer:       /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Certificate serial:       0A82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
Manifest number:          0A7A
Signing time:             Wed 20 Aug 2025 19:41:43 +0000
Manifest this update:     Wed 20 Aug 2025 19:41:43 +0000
Manifest next update:     Wed 27 Aug 2025 19:41:43 +0000
Files and hashes:         1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: g5IbXOioqoijvOHksP+Vf/j+brj8i3der8DRAKHBVNA=)
                          2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: lEjGikQ+ii4jtTGbAoJ/KSsQ3VS5/CajiRstqwCSiwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
                          rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 19:41:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2690 (0xa82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
        Validity
            Not Before: Aug 20 19:41:43 2025 GMT
            Not After : Aug 27 19:41:43 2025 GMT
        Subject: CN=68a624f7-0bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:d6:98:c4:64:f4:d4:b5:35:11:d9:bb:02:
                    37:cf:b0:c9:e0:b8:20:0a:f5:85:41:73:1c:2e:e0:
                    d9:c8:91:c1:d8:34:8b:e5:31:18:e9:f2:95:ce:2f:
                    05:1e:13:fa:85:39:de:30:dc:49:95:5a:c0:81:ca:
                    7c:a0:22:75:40:19:56:ca:82:90:55:c4:fa:20:2f:
                    01:56:9e:21:a8:5b:ba:3e:85:04:e6:5a:d4:e1:a6:
                    99:6b:e1:2b:0a:52:03:36:d5:1d:5e:96:50:e6:c8:
                    10:4c:13:5c:46:91:61:55:2c:1b:a8:ce:eb:28:7b:
                    46:be:8b:73:28:00:ce:04:2e:5e:e3:e2:7c:51:75:
                    fd:61:96:4a:b2:6d:b0:0e:d6:77:5a:84:8a:ad:f9:
                    08:68:f6:83:62:56:c2:04:c7:a7:64:72:05:d6:4a:
                    18:82:4c:bb:b3:e6:de:e0:41:86:8b:4b:0e:f8:d9:
                    e2:18:e2:ac:88:47:a1:b3:56:5d:d8:6e:ef:0e:ab:
                    a7:30:b2:a1:c6:06:9a:03:21:d0:e4:6c:ec:d4:47:
                    a2:99:f1:69:e3:cd:e3:6f:de:0c:17:43:de:ab:d1:
                    c5:a4:0e:4d:4c:15:47:b8:f1:57:bb:fb:89:e1:c6:
                    d1:fe:d3:0c:2d:fa:66:72:05:7f:fb:88:6e:27:d7:
                    bb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B8:28:3A:07:23:72:77:76:5A:6E:FE:42:F3:BF:EA:68:D7:30:F0
            X509v3 Authority Key Identifier:
                keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3d:a5:89:5e:47:84:30:db:f9:9f:d8:14:03:6a:93:e2:ff:
         d1:98:20:07:f3:2b:36:f3:04:65:3f:77:a0:4c:e0:08:c0:4c:
         69:1f:69:23:94:a3:a6:9a:72:a9:68:69:c4:5f:26:64:8c:b0:
         a4:c4:2f:5f:2f:6c:a5:eb:bf:e5:e7:05:4b:db:ec:b8:e8:f2:
         fa:c4:bb:63:0e:b7:45:e3:72:14:2b:63:b4:9c:f9:9e:ef:bb:
         b1:be:e9:73:15:39:6d:d5:3e:e2:80:7d:ee:0e:b4:b4:15:a6:
         4a:da:03:75:3b:c5:78:fd:ae:56:ec:c0:74:44:ea:45:bd:06:
         4b:ea:a7:6f:39:ee:14:2d:66:e4:2e:83:93:33:f7:90:d6:1d:
         53:97:50:0c:17:11:21:be:09:4f:0d:35:b7:77:d3:d9:df:ac:
         4a:f0:b4:22:fa:e0:f0:70:bd:c3:bc:2a:a9:34:1d:81:3b:99:
         e0:80:c7:3d:10:93:c9:64:25:15:04:67:e7:d7:89:0e:11:ec:
         53:ad:80:95:0f:57:30:0a:42:06:d8:5f:8d:32:af:50:7e:d3:
         e1:f6:ab:73:7d:c5:b7:c6:e9:cb:88:2d:a6:19:f2:ff:f7:70:
         55:b0:26:37:86:a1:08:4e:27:d4:e9:bb:b9:d4:ef:a8:14:ab:
         e8:41:2e:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG
ODM4MkRBNzMwHhcNMjUwODIwMTk0MTQzWhcNMjUwODI3MTk0MTQzWjAYMRYwFAYD
VQQDEw02OGE2MjRmNy0wYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXrWmMRk9NS1NRHZuwI3z7DJ4LggCvWFQXMcLuDZyJHB2DSL5TEY6fKVzi8F
HhP6hTneMNxJlVrAgcp8oCJ1QBlWyoKQVcT6IC8BVp4hqFu6PoUE5lrU4aaZa+Er
ClIDNtUdXpZQ5sgQTBNcRpFhVSwbqM7rKHtGvotzKADOBC5e4+J8UXX9YZZKsm2w
DtZ3WoSKrfkIaPaDYlbCBMenZHIF1koYgky7s+be4EGGi0sO+NniGOKsiEehs1Zd
2G7vDqunMLKhxgaaAyHQ5Gzs1EeimfFp483jb94MF0Peq9HFpA5NTBVHuPFXu/uJ
4cbR/tMMLfpmcgV/+4huJ9e7VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAC4KDoH
I3J3dlpu/kLzv+po1zDwMB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2
QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My
bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Q0Q5OC83ODAyMDQ4QTY2QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNI
MDhEMnNTa0ZaUHY0T0Mybk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmPaWJXkeEMNv5n9gUA2qT4v/RmCAH8ys28wRlP3egTOAIwExpH2kj
lKOmmnKpaGnEXyZkjLCkxC9fL2yl67/l5wVL2+y46PL6xLtjDrdF43IUK2O0nPme
77uxvulzFTlt1T7igH3uDrS0FaZK2gN1O8V4/a5W7MB0ROpFvQZL6qdvOe4ULWbk
LoOTM/eQ1h1Tl1AMFxEhvglPDTW3d9PZ36xK8LQi+uDwcL3DvCqpNB2BO5nggMc9
EJPJZCUVBGfn14kOEexTrYCVD1cwCkIG2F+NMq9QftPh9qtzfcW3xunLiC2mGfL/
93BVsCY3hqEITifU6bu51O+oFKvoQS7l
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:27:18 2025 by rpki-client