Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
File:                     qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json)
Hash identifier:          cten0WhuiSU0CJeTKnJoCzEwjZrcJODCyQO/ljfF6k0=
Subject key identifier:   B6:23:11:D6:F2:FD:E5:7B:BA:89:51:C6:05:95:0D:8F:A1:4D:0D:63
Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
Certificate issuer:       /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Certificate serial:       0B2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
Manifest number:          0B2A
Signing time:             Sun 24 Aug 2025 19:15:22 +0000
Manifest this update:     Sun 24 Aug 2025 19:15:21 +0000
Manifest next update:     Sun 31 Aug 2025 19:15:21 +0000
Files and hashes:         1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: AA18e44oHEQxjDCqeJiLkNZcqs4vzoZhZ6m9WpPcdKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 19:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2858 (0xb2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
        Validity
            Not Before: Aug 24 19:15:21 2025 GMT
            Not After : Aug 31 19:15:21 2025 GMT
        Subject: CN=68ab64c9-4c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:ab:77:f6:c8:d7:b2:ce:c3:43:a7:ab:81:
                    97:60:c3:a3:5f:d5:79:e4:57:a5:59:91:31:d8:d1:
                    ab:05:ca:df:63:68:94:8c:62:b5:1a:e0:23:5f:c8:
                    91:f8:bb:06:a1:46:45:e4:7f:c4:ba:18:9f:90:8d:
                    3c:76:e9:a0:98:5d:a9:54:b9:59:bf:26:0e:84:96:
                    63:7a:e5:1f:2d:4a:a6:bf:93:b0:c5:96:ea:c1:5d:
                    d0:89:d0:b0:ce:83:c7:f2:0a:1f:90:09:b6:4d:c2:
                    23:a4:9d:14:45:92:c9:20:6b:ea:3c:fd:10:96:81:
                    6f:3d:92:34:1d:38:bb:bd:ed:5c:de:67:a5:84:95:
                    71:63:63:ee:52:39:09:2b:df:9a:ae:2c:e8:1c:e9:
                    36:61:39:4f:3e:d8:93:78:43:d9:7c:64:0a:b7:be:
                    6e:fc:1e:4f:c4:d2:9c:16:af:15:5b:d3:70:01:bd:
                    5f:35:b3:7b:ee:eb:cd:db:8d:c8:cc:8d:e3:c1:0f:
                    18:4b:4f:93:67:d3:1a:28:e8:64:df:fd:dd:ab:33:
                    ce:ad:1e:84:0d:84:47:95:09:93:aa:6a:79:ed:61:
                    a3:0e:55:92:d7:f6:70:d2:3c:e8:fc:94:ff:ed:c0:
                    1b:bd:97:72:df:47:40:49:32:21:9f:30:81:e8:30:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:23:11:D6:F2:FD:E5:7B:BA:89:51:C6:05:95:0D:8F:A1:4D:0D:63
            X509v3 Authority Key Identifier:
                keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:0b:0c:56:3c:e7:bd:9b:26:c9:22:ee:e6:42:61:5f:3a:
         ac:40:c9:4a:9d:c7:0e:1c:d2:4e:49:a8:a8:4a:eb:f7:1a:94:
         fe:12:5c:1e:b9:df:48:cd:02:83:57:05:8d:93:cb:dd:bf:6a:
         ff:a3:97:73:56:55:2f:67:44:ba:22:ce:60:44:a9:9e:b4:10:
         89:21:e0:5a:2c:0d:e1:1d:25:97:72:fa:50:05:f9:9a:96:81:
         4b:2c:a7:95:5e:d2:93:4c:f7:1e:6f:79:9f:eb:84:37:b1:61:
         51:0c:36:98:69:64:45:6a:59:d9:19:7b:c2:07:4c:b5:5c:e9:
         e2:19:b6:aa:54:95:67:45:90:03:8a:29:a1:0c:22:c3:14:3b:
         fd:16:b2:c8:cd:db:65:ba:70:09:8f:74:67:ac:45:7d:4a:58:
         d0:ee:45:46:7f:e9:34:81:4d:e4:05:47:47:10:cd:88:fd:c3:
         72:f7:74:19:ac:85:31:4f:62:17:ac:4e:da:ca:df:52:7e:b7:
         0f:bf:c2:0d:57:6d:d2:6d:5c:76:c8:ec:84:b3:f1:cc:26:94:
         bf:fa:5a:2b:f7:3b:a1:fa:5b:25:68:ce:af:24:09:83:dd:0b:
         55:f3:ca:5e:a4:57:3e:16:e1:75:98:7f:3c:8f:59:fa:3e:30:
         b1:e1:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:00:35 2025 by rpki-client