Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File:                     Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier:          hTyUZt6oUV7AiW4ImlFduFVkVRzXASBep7mxBK17Md4=
Subject key identifier:   4E:22:73:82:75:DE:B4:36:FC:E3:67:C9:BC:30:4A:A9:B7:45:26:62
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer:       /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial:       0987
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number:          0969
Signing time:             Sat 18 Oct 2025 21:14:00 +0000
Manifest this update:     Sat 18 Oct 2025 21:13:59 +0000
Manifest next update:     Sat 25 Oct 2025 21:13:59 +0000
Files and hashes:         1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: AsQof8mhhHduhCh0WUQR56wuBAVkm7kXCCg2QuZI3AY=)
                          2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: OA6Ay1bXyUAJq+KfCYl3CuSq1KvT2rPbVpCqhvkc99A=)
                          3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: Cf3w2+/kQFFdBNp0nOAXgGT+JLVmdNCHNGijos8QA7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
                          rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2439 (0x987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
        Validity
            Not Before: Oct 18 21:13:59 2025 GMT
            Not After : Oct 25 21:13:59 2025 GMT
        Subject: CN=68f40318-30fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1b:0f:8d:3c:1c:62:35:3a:f8:f1:14:40:2b:
                    c5:a1:f8:cd:a4:81:ab:5f:da:d8:9c:79:71:c1:84:
                    b7:4e:7d:70:53:f5:f8:b8:4b:a2:6d:55:18:0e:89:
                    81:32:ac:62:88:d0:42:2e:01:e1:2d:13:ba:92:f0:
                    bc:ff:62:fb:60:65:4c:1d:78:e3:75:31:6f:5e:32:
                    99:c6:99:bc:55:a3:59:49:61:42:73:9f:e0:2d:c5:
                    ae:8b:3e:a5:1a:4e:16:1f:bb:39:59:74:9e:83:98:
                    04:2d:a3:d8:af:d1:4b:a0:39:2a:fc:d8:f7:d5:d6:
                    74:a1:0a:2c:41:b7:c9:0a:50:28:16:f6:e5:48:5d:
                    a4:0e:c2:af:97:ce:94:d6:f2:af:f8:ab:7a:d1:e6:
                    48:b0:62:09:5e:f5:03:ce:6e:f0:3c:72:34:68:de:
                    fe:17:37:a7:b8:64:a3:97:c4:da:f1:65:b6:3c:90:
                    bc:27:55:07:7f:3c:62:6a:57:0c:eb:5e:10:d4:6b:
                    80:94:b2:a6:25:f6:c0:1f:d4:64:4d:44:cf:b7:c8:
                    e1:dd:2d:7e:a3:c0:74:d6:39:5b:f8:d6:83:87:df:
                    25:a3:bf:f2:d6:1c:a8:c1:d3:d1:32:c3:3e:0e:44:
                    76:f5:c4:15:1a:d7:8f:a3:53:7a:5a:3f:02:0e:c7:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:22:73:82:75:DE:B4:36:FC:E3:67:C9:BC:30:4A:A9:B7:45:26:62
            X509v3 Authority Key Identifier:
                keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:49:97:91:cb:26:9d:0e:e0:33:ba:c0:9c:83:73:b0:95:
         29:fd:85:39:b5:54:4e:c7:95:f5:3b:24:de:52:61:19:00:7c:
         62:6a:02:53:24:21:12:8d:c9:0d:63:47:e0:e1:42:0b:73:20:
         c4:26:e9:a7:4f:63:da:14:a9:ee:c4:e3:e9:91:47:1e:fe:0d:
         2c:17:5a:e7:f4:df:51:6f:fd:42:84:fb:39:28:12:89:69:bb:
         67:07:e7:c7:9b:54:d1:59:42:6d:73:c6:dd:35:63:20:20:7e:
         75:da:82:25:03:66:67:46:ca:ce:13:32:87:99:cb:ef:82:a9:
         4e:eb:38:90:0e:59:9a:c0:d9:df:61:4b:30:d6:b6:de:e6:7e:
         38:3a:d7:48:07:0e:c4:65:8f:14:50:8f:b2:f7:5a:6a:47:08:
         9c:f2:27:40:54:cb:b6:ad:72:36:3d:79:1c:44:60:d4:e1:e3:
         9a:ba:5b:55:3e:45:71:dc:ef:9a:58:87:ac:44:4c:8c:96:57:
         03:4b:1e:79:a2:2e:5b:18:c9:42:e6:5f:a1:f9:dc:15:e4:2c:
         df:ec:2a:bb:e2:68:85:e5:83:0d:4e:71:b0:4f:26:0c:fd:8b:
         cb:39:16:ef:79:a7:9e:e2:86:9f:e2:5e:6d:a0:f3:8c:ff:5c:
         a2:de:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:26 2025 by rpki-client