Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
File:                     Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json)
Hash identifier:          M3IqHOWk203RdUSb2Md2mtCxb87aXR/vw0XGbWWspgY=
Subject key identifier:   CF:E0:6A:54:35:E4:27:52:09:28:F2:F6:06:56:BB:92:16:70:07:FB
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Certificate issuer:       /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial:       0B18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
Manifest number:          0A68
Signing time:             Sat 18 Oct 2025 20:53:50 +0000
Manifest this update:     Sat 18 Oct 2025 20:53:50 +0000
Manifest next update:     Sat 25 Oct 2025 20:53:50 +0000
Files and hashes:         1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: rLiwNVopEPJYrWW8qoGYg0rd4Q3rXPDruFfxbXymAtk=)
                          2: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: dOCznw/J4c94cUvosSW/kOC2oIL6jbmFAL2+O7rkhag=)
                          3: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: UfxAxapspNfCULgapde2dhkYeQjgb9Bzqtz/tQtQdPw=)
                          4: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: 5nE372F+0IwqYdLJZogWsDWbHc80At5gKYtw/eBlXZE=)
                          5: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: 9X7I+brkK/zM7IstcmQqkt3f3WU83UlUm6djQdlHWFo=)
                          6: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: ejIz9Yuuvy/Lj5GU8AUntC0tFJ+QHqAuBe5ozlZ4Gxw=)
                          7: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: L+W6w2B2/2JqZHEEy+XRZ0tQqm2y+76IdcVbyBsuS1w=)
                          8: 553170245AC511EBA052F663C4F9AE02.roa (hash: 1WjAWoIgFya9zcz3aaAfAZPj3TaOx48UOEMbOt7aBvY=)
                          9: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: HSmuGZlq2yjbC7oby/mLDwMQgWOMUuKo8bggRUwHe8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
                          rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2840 (0xb18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
        Validity
            Not Before: Oct 18 20:53:50 2025 GMT
            Not After : Oct 25 20:53:50 2025 GMT
        Subject: CN=68f3fe5e-904e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:f4:e2:f5:e3:bd:87:fe:55:2e:16:32:4c:
                    b4:75:1c:4e:46:cb:1f:d6:a9:16:44:cf:fd:0d:2e:
                    4b:d1:7c:97:05:38:37:9c:fc:7e:f5:f3:18:99:ac:
                    0a:2f:c3:53:80:73:66:42:d5:1f:49:8e:d1:b0:48:
                    d5:4a:9c:20:4b:9b:4e:46:0e:63:34:c2:d1:cf:b9:
                    fe:f0:e9:09:94:9c:f6:a5:09:6f:af:7a:04:5b:b5:
                    c9:29:d0:ff:8d:02:39:ae:6d:39:6b:e2:7e:c1:34:
                    25:d7:ef:a8:22:1a:a7:22:83:13:56:f1:37:d0:d6:
                    7a:6f:50:74:8c:b8:08:0a:ce:a7:ce:c5:90:0e:ef:
                    bf:4c:70:9e:b1:9c:f7:63:6f:3e:96:0f:ee:26:ca:
                    fa:2a:de:b1:ad:0d:1b:7e:57:92:dd:94:84:71:5d:
                    13:69:c7:fb:8d:9d:c5:a1:b8:aa:14:88:e4:52:f4:
                    c6:61:c7:dc:60:39:41:15:3c:44:1a:e7:70:f8:b1:
                    35:1a:70:0b:fa:58:97:19:4b:15:39:47:86:d3:59:
                    2b:f5:ab:10:2b:81:43:52:6b:08:07:e4:91:b0:1d:
                    09:0e:67:80:bc:56:9c:69:16:39:b6:6f:24:98:a0:
                    02:f2:09:ec:c8:d2:2b:e5:81:e0:c3:fb:dd:27:5f:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E0:6A:54:35:E4:27:52:09:28:F2:F6:06:56:BB:92:16:70:07:FB
            X509v3 Authority Key Identifier:
                keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1a:ec:94:4b:fd:e1:11:85:ae:7a:22:52:bf:d7:86:7c:5b:
         4a:7b:2c:00:c3:ce:21:47:8f:cf:ef:59:a0:c3:2c:c9:3c:95:
         22:36:8f:be:93:1f:70:91:de:39:ab:ec:88:61:45:2a:02:d2:
         50:1c:09:35:bb:4a:0e:0f:74:3a:f1:e0:61:65:7e:22:bd:ba:
         33:0a:f0:90:a9:01:5b:eb:45:f6:1e:d8:a1:70:12:51:d2:9f:
         c9:94:16:9f:46:3a:0e:3d:f2:27:0b:76:bf:1f:28:79:61:b5:
         f4:57:08:1f:b1:4d:05:2a:f3:fb:26:09:9c:f4:7b:df:7b:0e:
         a2:d0:3c:dd:40:ed:18:f1:c8:83:ce:53:97:d7:c3:5c:3f:27:
         00:22:4c:c2:4b:71:47:ce:64:53:de:64:18:1c:23:92:1f:c8:
         1f:e8:a3:28:5f:81:bc:d1:e4:2a:b9:db:f0:b7:bd:aa:77:49:
         74:12:fd:c8:f1:aa:5e:3d:3e:fc:b3:64:eb:04:62:16:42:2e:
         93:02:15:dc:a6:1e:fc:06:21:22:26:7e:96:6d:8f:84:4f:a5:
         69:49:a4:8b:b1:72:e2:46:69:e4:5f:c0:ae:47:e2:11:ed:72:
         5b:2a:b3:88:91:cf:1e:26:f3:c6:a7:a8:6a:0f:d5:49:f3:17:
         55:aa:6b:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE
NTQ0QTYyQTYwHhcNMjUxMDE4MjA1MzUwWhcNMjUxMDI1MjA1MzUwWjAYMRYwFAYD
VQQDEw02OGYzZmU1ZS05MDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqtj04vXjvYf+VS4WMky0dRxORssf1qkWRM/9DS5L0XyXBTg3nPx+9fMYmawK
L8NTgHNmQtUfSY7RsEjVSpwgS5tORg5jNMLRz7n+8OkJlJz2pQlvr3oEW7XJKdD/
jQI5rm05a+J+wTQl1++oIhqnIoMTVvE30NZ6b1B0jLgICs6nzsWQDu+/THCesZz3
Y28+lg/uJsr6Kt6xrQ0bfleS3ZSEcV0Tacf7jZ3FobiqFIjkUvTGYcfcYDlBFTxE
Gudw+LE1GnAL+liXGUsVOUeG01kr9asQK4FDUmsIB+SRsB0JDmeAvFacaRY5tm8k
mKAC8gnsyNIr5YHgw/vdJ18qPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/galQ1
5CdSCSjy9gZWu5IWcAf7MB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1
MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL
ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCGuyUS/3hEYWueiJSv9eGfFtKeywAw84hR4/P71mgwyzJPJUiNo++
kx9wkd45q+yIYUUqAtJQHAk1u0oOD3Q68eBhZX4ivbozCvCQqQFb60X2HtihcBJR
0p/JlBafRjoOPfInC3a/Hyh5YbX0VwgfsU0FKvP7Jgmc9Hvfew6i0DzdQO0Y8ciD
zlOX18NcPycAIkzCS3FHzmRT3mQYHCOSH8gf6KMoX4G80eQqudvwt72qd0l0Ev3I
8apePT78s2TrBGIWQi6TAhXcph78BiEiJn6WbY+ET6VpSaSLsXLiRmnkX8CuR+IR
7XJbKrOIkc8eJvPGp6hqD9VJ8xdVqmu4
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:15:25 2025 by rpki-client