Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
File:                     qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json)
Hash identifier:          eA/5lgZdzpBqJl3EfjJ6UIt5GSDVKf9gNE3cA6wBNlo=
Subject key identifier:   A3:8F:F6:AE:85:CE:DF:CA:AA:7C:10:26:2C:03:F6:7B:3E:2B:61:07
Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
Certificate issuer:       /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
Manifest number:          01BA
Signing time:             Sun 20 Jul 2025 15:56:46 +0000
Manifest this update:     Sun 20 Jul 2025 15:56:46 +0000
Manifest next update:     Sun 27 Jul 2025 15:56:46 +0000
Files and hashes:         1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: v8WMzlhH0GAA5aWuw7ixVUg+jkzuirg62NKxa8ZPwyA=)
                          2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 15:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
        Validity
            Not Before: Jul 20 15:56:46 2025 GMT
            Not After : Jul 27 15:56:46 2025 GMT
        Subject: CN=687d11be-5309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:c3:d5:3d:80:41:86:5e:c0:66:05:33:6a:
                    0a:ba:d1:2c:47:0d:b2:9e:f6:17:bf:99:a6:ce:1d:
                    85:a9:d2:91:86:59:94:9f:d1:8e:bb:cf:b5:73:2c:
                    c4:7d:3a:cd:60:27:cb:3b:41:7b:e2:c6:1a:5a:00:
                    36:1e:4d:34:04:95:13:6f:9d:13:c5:17:29:f4:15:
                    bc:8c:12:2f:15:a1:71:68:07:00:29:39:18:25:8d:
                    17:28:41:85:98:d7:ee:d7:fc:c1:5c:f8:8c:d6:8f:
                    1b:42:64:22:d8:df:b4:a9:b1:72:fa:eb:52:09:4a:
                    00:14:ee:d2:6a:a1:7c:cd:2a:ca:e4:27:2b:a7:43:
                    ca:e1:b0:af:b4:92:3e:0b:d7:4d:c2:fc:2e:1a:8c:
                    ec:0f:e8:2f:91:52:ad:8c:10:ec:5e:f1:ae:aa:96:
                    f3:f3:67:c8:c8:90:f3:3f:62:4c:76:9d:b7:8d:92:
                    17:cb:61:53:5b:69:9c:4b:82:30:9b:97:84:95:9a:
                    82:b0:ef:79:e5:17:81:28:41:67:e2:9d:e2:ed:63:
                    ac:48:74:3c:ee:26:71:b7:f5:70:66:6f:72:b5:9d:
                    de:6b:e8:6f:30:92:ee:19:12:3e:50:76:a3:b0:e9:
                    96:d9:a3:a7:10:29:9b:4a:8c:1f:84:aa:cb:9c:7a:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8F:F6:AE:85:CE:DF:CA:AA:7C:10:26:2C:03:F6:7B:3E:2B:61:07
            X509v3 Authority Key Identifier:
                keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:63:8d:8c:2e:db:ac:33:e7:c4:0d:a1:7b:8a:99:ee:1a:
         42:50:86:43:90:a6:33:bc:b8:46:b8:e0:9a:83:6c:80:f2:f8:
         d7:2d:b9:b7:e9:63:ca:1e:cd:c3:a5:0d:9c:31:07:56:24:25:
         47:1e:32:8d:ae:50:f6:a4:e0:4e:48:7f:7f:9c:84:60:c4:6e:
         24:a1:7f:ba:f4:a0:a9:54:b0:26:d5:5c:7d:14:c8:27:5c:eb:
         c4:bc:66:57:ec:b4:df:1f:7d:e3:0f:8a:bb:0c:93:c3:c4:ca:
         f8:20:6a:14:be:59:60:f9:84:8b:63:c5:a0:89:f3:87:61:64:
         cd:a0:24:be:2d:64:3d:05:03:dc:af:50:22:f1:3d:14:dd:5f:
         bf:fa:d8:4e:98:62:2e:47:04:c6:f8:94:10:cb:84:71:8b:c0:
         2e:30:07:84:46:c2:15:8c:1b:bc:61:a8:92:3c:b8:97:24:b6:
         2b:e2:05:bf:40:bd:15:cd:c4:7a:88:55:31:bf:5a:f5:77:4b:
         dd:3d:0d:e2:65:38:21:38:36:51:60:9c:57:05:43:bb:f3:4c:
         69:01:47:62:5c:67:df:7f:bd:e0:95:e6:ce:10:d0:6d:9a:0d:
         ce:a0:d6:02:ed:d7:3c:d1:a3:ad:ef:5f:0b:7d:af:e5:ad:40:
         16:82:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:40:54 2025 by rpki-client