Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File:                     q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier:          noPSZEvqeSwcedFQwovJIkE84a8HvD6NNvY/Ph2/seY=
Subject key identifier:   AC:1C:93:D1:E2:5C:8C:6C:F3:46:B3:E2:B1:A8:93:13:AE:5F:D1:DF
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       0783
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number:          076E
Signing time:             Sat 18 Oct 2025 23:01:13 +0000
Manifest this update:     Sat 18 Oct 2025 23:01:13 +0000
Manifest next update:     Sat 25 Oct 2025 23:01:13 +0000
Files and hashes:         1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: doQjeVSq3rC0TMGRIl3olG1IP8oYZa29XIUlhiefPEM=)
                          2: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: TlDhnldYuakAwxJhMCiNbVx6zqDuO+DOexXHVfVHcu4=)
                          3: 56D3C71687AB11F095613811C4F9AE02.roa (hash: aD2CLMizmkDNhBVFcvaNkcRkyod1i+1AjvAvs5tf+7Q=)
                          4: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: R7FrPdkL1ySrHNC5nrqzQKSqKbGci3RcVPsSdrI/vVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1923 (0x783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: Oct 18 23:01:13 2025 GMT
            Not After : Oct 25 23:01:13 2025 GMT
        Subject: CN=68f41c39-b920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:04:97:7f:7d:52:ff:bf:08:42:c8:94:68:
                    a6:d2:7f:65:d0:56:95:8a:78:5a:f3:0c:15:3a:9f:
                    ce:85:2d:f7:0a:72:22:f0:28:3d:61:24:85:d6:0b:
                    eb:f4:c6:3f:a7:02:9d:e3:54:92:c3:7b:10:3c:89:
                    e5:11:83:55:cb:5c:6e:eb:1b:23:84:01:56:a2:f4:
                    35:0d:65:d1:5d:6a:77:d4:48:d6:3a:a2:f1:1f:06:
                    64:af:14:fa:f8:12:91:0b:68:a3:d7:30:86:01:5d:
                    ce:ff:8c:62:e2:e5:d9:34:df:82:33:c8:85:33:27:
                    17:d0:f2:03:3f:dd:3d:8e:f3:fe:68:37:f1:e3:9d:
                    cb:b1:40:f2:88:63:55:6f:39:d7:9c:79:2b:5b:e3:
                    c0:f1:c5:74:bf:d3:22:7d:58:a7:e2:a8:3b:56:b9:
                    2e:0d:37:a8:4f:f8:d6:1b:34:86:3c:ef:00:1b:f1:
                    af:c4:a3:3b:35:b5:e1:77:2a:08:65:5c:07:7f:22:
                    5e:84:50:d1:1f:90:65:a8:2c:e8:25:8f:22:35:13:
                    5a:59:bf:7e:2b:69:fa:2c:27:23:9c:34:d7:58:02:
                    e4:b8:0a:30:92:55:4b:3d:68:62:ea:be:c6:fd:0c:
                    b9:b3:0c:64:bb:11:4a:fe:a6:3a:c8:f1:1a:0d:0d:
                    a3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1C:93:D1:E2:5C:8C:6C:F3:46:B3:E2:B1:A8:93:13:AE:5F:D1:DF
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:81:76:59:19:54:72:88:e2:95:81:52:00:b4:ea:64:36:8e:
         ae:9a:78:57:4f:fc:e7:a6:d8:bb:32:d6:e7:eb:64:d6:50:fe:
         6b:c0:68:48:02:f0:b3:ad:7b:80:b1:9c:1b:19:66:76:57:a3:
         e9:86:e0:e3:97:1a:18:1a:bc:c8:83:6c:4a:64:52:2c:84:d7:
         d6:8f:bd:6e:af:4b:ef:09:0f:a7:ad:3d:a3:b1:5a:1c:aa:45:
         b3:68:96:2d:be:f9:b5:89:24:9a:33:bc:28:d3:08:ef:fb:4f:
         39:95:2f:4c:f7:8f:4d:06:d7:25:7d:84:44:f6:a1:94:e8:ac:
         ab:2c:bb:31:e8:79:aa:98:75:aa:10:31:79:24:f8:1f:01:16:
         39:ec:0f:01:b5:c6:31:e9:90:f3:97:e5:fc:1b:57:03:4e:20:
         20:ff:98:ab:34:b0:3c:73:a7:cc:d8:11:b7:7a:d8:04:2b:a2:
         92:e6:fb:65:0e:f1:72:99:94:00:47:d8:fd:08:25:f6:b0:c0:
         8a:fd:45:b0:fc:34:05:b8:be:f7:ca:60:77:73:6c:9c:d6:90:
         12:98:a8:f0:8f:a8:f7:a1:c3:27:4f:1e:fd:2c:f7:6e:ea:fb:
         ca:dc:50:52:46:ec:56:b0:6c:ab:3f:19:b5:45:c4:13:5c:b5:
         97:b4:a9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:35:08 2025 by rpki-client