Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
File:                     QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json)
Hash identifier:          1axIHx6Nw9ZmFQNWshr0omRd94vkoGlgthHZbrfza78=
Subject key identifier:   15:7D:28:DC:AE:23:C7:FA:58:8E:39:7D:EC:C3:EA:D6:16:10:3E:39
Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
Certificate issuer:       /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
Manifest number:          01D7
Signing time:             Sun 19 Oct 2025 05:14:29 +0000
Manifest this update:     Sun 19 Oct 2025 05:14:29 +0000
Manifest next update:     Sun 26 Oct 2025 05:14:29 +0000
Files and hashes:         1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: asxxjOtRenWt0SP7UiZN9bagZrMOGLzTlLn7qj/EArs=)
                          2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
                          rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
        Validity
            Not Before: Oct 19 05:14:29 2025 GMT
            Not After : Oct 26 05:14:29 2025 GMT
        Subject: CN=68f473b5-c976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:14:72:aa:ad:78:29:92:d3:9b:88:cd:e8:
                    67:87:ef:89:7b:57:53:b5:5a:a1:22:10:24:10:b2:
                    bc:de:fb:a4:5f:9c:8a:37:37:3b:ea:79:08:84:59:
                    e2:cf:39:44:14:ee:55:2a:55:a5:16:d1:07:78:13:
                    1d:3a:b1:9b:b0:d0:55:f2:0a:0d:16:ba:45:85:d9:
                    eb:ec:37:63:5a:3c:f4:89:f5:8e:59:ce:9d:29:9d:
                    7f:50:ac:74:51:c8:70:e5:6e:5c:94:ea:af:9e:51:
                    32:00:fd:cd:dc:ec:8f:44:83:ca:f4:b7:8a:e5:a4:
                    6a:f6:7a:fa:41:64:95:98:82:68:03:5a:91:22:34:
                    d5:42:6f:07:28:0e:d0:48:95:1d:f5:44:90:6c:f7:
                    49:0d:9b:b8:0e:13:93:5b:35:11:db:e1:c2:5e:b3:
                    fc:99:53:1a:9b:30:4f:66:15:f4:cd:2d:d7:87:29:
                    bd:3c:4d:39:21:79:77:99:8e:85:34:13:c8:c3:77:
                    de:a0:1c:9d:04:13:d1:c2:c8:fe:5b:0d:2b:99:8e:
                    08:2d:0f:84:2d:8b:aa:58:cd:22:1d:d9:3e:12:c9:
                    9e:b4:5a:7f:66:94:30:0d:6b:a0:af:c6:20:98:40:
                    79:41:b2:02:d9:9a:ad:01:36:c0:67:87:bc:e1:46:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7D:28:DC:AE:23:C7:FA:58:8E:39:7D:EC:C3:EA:D6:16:10:3E:39
            X509v3 Authority Key Identifier:
                keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:06:a2:3d:96:f6:d1:61:f0:fb:e5:7c:9a:13:fb:9a:b8:2b:
         7c:e5:43:01:e7:ff:be:10:e6:71:1c:e5:15:03:8c:25:14:13:
         a2:e8:1b:e3:9c:90:6f:cf:23:b0:b0:08:15:9c:08:e7:fd:44:
         d1:93:f6:d7:75:8e:97:3b:6e:3b:f5:a0:aa:33:63:8b:b0:68:
         90:e1:7b:bb:91:51:04:04:1e:2f:5b:22:f2:5d:3f:57:f5:49:
         a0:2f:05:34:92:60:4e:8e:ef:06:ed:3e:7f:35:3b:82:b3:b4:
         83:13:b3:55:42:5a:ff:f3:8e:ad:a8:eb:49:45:6b:70:df:64:
         fa:71:5a:66:df:5c:33:ed:dd:17:d5:6e:34:2c:82:2a:b4:bb:
         4e:ef:cb:d6:c3:c4:d2:8c:28:10:4f:16:22:b5:25:82:42:a0:
         00:dd:36:50:2a:88:92:b0:5f:de:9d:3a:fd:7c:25:60:69:1b:
         d1:e5:0e:56:da:84:56:25:f4:6b:3c:92:da:b9:77:a8:4e:60:
         47:93:e5:c1:2d:f6:ad:0a:f7:8c:07:3f:b5:05:f4:c5:d4:23:
         54:57:bd:cf:f2:0e:77:ad:68:15:41:a2:24:54:bc:f4:74:72:
         96:b7:05:b9:19:d7:af:a4:c2:c8:13:eb:a5:72:49:56:ad:71:
         7d:d4:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:37:26 2025 by rpki-client