Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File:                     qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier:          QhNl/REXpzOddKEkQrQivG8J+j14XnQchbNWnwvcVS4=
Subject key identifier:   EB:22:5E:28:E0:CF:05:6B:A3:36:C9:C3:AD:F5:7C:0B:DC:A1:5B:5F
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       08EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number:          08D2
Signing time:             Sat 18 Oct 2025 21:32:22 +0000
Manifest this update:     Sat 18 Oct 2025 21:32:21 +0000
Manifest next update:     Sat 25 Oct 2025 21:32:21 +0000
Files and hashes:         1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: 9MX2f2Ue6JavvndX9VshcF2IaHB06qTbMlmN5hUl/BA=)
                          2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: gExqM4aUKrBllmPpMCtcVSZCHfPpzfLPu3nuxUT8Qqs=)
                          3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: dLzX51Se2cwYVIN8Vmr+uVPw3hseY/U8FombHRxTBaQ=)
                          4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: ggS/okJOXO20WJl9u64hoMFD/RxIwy0K1iG0hR/vSB4=)
                          5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: mKgGrrGBQwDLJBId/uOdKFjLBgmwhREF0Lpo0O+T3TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
        Validity
            Not Before: Oct 18 21:32:21 2025 GMT
            Not After : Oct 25 21:32:21 2025 GMT
        Subject: CN=68f40765-9070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:c3:b7:36:da:3f:17:5e:a9:69:08:e4:c9:
                    a1:db:23:f5:06:d2:a1:83:be:9a:4b:f6:63:ec:ec:
                    1d:0d:93:70:0e:f1:61:79:3b:8c:4f:70:77:da:42:
                    be:52:8f:f8:71:ec:df:a9:33:7a:06:64:28:b0:d8:
                    d4:e7:6d:60:eb:29:8c:cb:13:e7:70:07:c3:fb:82:
                    71:e3:a1:33:2a:6a:09:df:da:ac:94:3a:02:fa:84:
                    ad:f8:4e:d8:92:65:36:7f:39:65:5f:d7:23:81:ba:
                    0d:fd:55:f7:d0:b1:71:36:af:0d:0d:10:e5:b8:67:
                    ce:e3:be:c0:4c:57:99:32:82:7b:60:45:ef:d7:11:
                    c7:6d:a0:03:ed:88:c1:55:d0:69:03:fb:33:0d:57:
                    5b:43:58:2e:99:36:19:ab:f7:da:67:58:50:ad:b2:
                    ab:35:94:42:e2:c1:4f:f4:fa:ca:55:01:3b:b7:68:
                    f8:35:93:91:f3:fa:bf:66:15:c8:a6:d1:9d:8e:3d:
                    2c:10:35:3a:d4:82:5b:6f:42:e0:2e:1e:97:a8:21:
                    cc:1c:f4:95:bd:02:14:61:69:91:42:53:84:14:b0:
                    95:1f:75:3f:1a:b4:fe:04:46:d2:a9:33:be:01:c8:
                    38:9b:e0:0c:36:fe:c8:30:27:7e:a4:22:99:63:33:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:22:5E:28:E0:CF:05:6B:A3:36:C9:C3:AD:F5:7C:0B:DC:A1:5B:5F
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:20:3a:eb:b6:53:b8:e9:c6:99:7f:e8:87:ed:9e:f2:11:2e:
         40:b9:5c:56:ea:a7:c5:b5:7c:c4:ea:bd:a9:aa:84:f6:ef:6a:
         d9:d0:e0:4f:6b:0d:c1:bb:a2:08:02:28:e6:0d:41:e8:d0:8e:
         ca:61:98:9b:b1:23:4b:40:f3:0e:17:79:24:4b:95:ab:47:6f:
         3c:bf:d0:71:53:98:56:d1:ff:70:7a:cb:74:30:f1:f4:de:f7:
         b3:90:c2:4f:bc:9e:b2:11:fa:7d:80:bc:2f:b6:90:ba:30:ad:
         c0:ff:33:cf:cb:f2:13:74:93:b5:31:c1:87:a6:bd:7b:2b:5d:
         4d:6c:58:8d:bf:af:24:6d:74:a5:22:d5:0f:99:49:ac:dc:27:
         d6:8b:8d:84:6f:be:01:a7:e1:be:4a:d8:6c:12:fb:71:84:a2:
         9f:ed:ec:8a:19:cc:e5:f0:19:6c:34:66:06:ff:10:24:28:ec:
         d5:26:e4:d5:2d:a0:9e:b3:6a:0a:ae:7c:d1:ab:8d:7b:0b:95:
         ae:79:4b:5b:00:5d:9c:a7:8a:17:1b:2e:e8:e2:ef:94:9b:98:
         59:9c:52:83:ac:fa:6e:21:d3:17:3f:dd:0c:c9:3f:a8:70:cc:
         56:76:74:b0:c0:c8:c0:9c:c3:4f:d8:f6:46:d7:85:02:5b:b0:
         54:11:ea:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:12 2025 by rpki-client