Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File:                     QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier:          m0ZRWvS0/s7IqFQRgohoxfRA44jzOy7Bq0z/Eka2tNU=
Subject key identifier:   9C:21:A4:3B:85:37:D3:5B:60:94:A2:EB:F4:6E:54:62:BD:99:85:6A
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer:       /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial:       1E80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number:          32EE
Signing time:             Sat 18 Oct 2025 15:52:58 +0000
Manifest this update:     Sat 18 Oct 2025 15:52:58 +0000
Manifest next update:     Sat 25 Oct 2025 15:52:58 +0000
Files and hashes:         1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: 4nNhJsVAJqKRRzjbcvB46DUhe7rnQ1oYFQVWCTwq8WE=)
                          2: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: rgEBVfEHrHQCIYu+8cT3x0Mx0w03fqFbIgZigqEcJN4=)
                          3: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: r0CHOQu1cJbmjwRlYBEiavWoEM4N4g/XqSKR2NA/Xr4=)
                          4: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: m2nIep6ftkfrIPBLf24Qcs2kiAMJ/4wpttb2LM7mGxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
                          rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7808 (0x1e80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
        Validity
            Not Before: Oct 18 15:52:58 2025 GMT
            Not After : Oct 25 15:52:58 2025 GMT
        Subject: CN=68f3b7da-deca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:ac:0e:89:da:94:7e:94:20:c1:4d:fb:d0:
                    34:d5:16:ba:64:06:23:4e:da:93:f7:03:ea:b4:a5:
                    08:1b:9b:1f:1e:2a:2a:e2:c0:65:68:fe:2e:4b:9c:
                    99:32:ba:27:55:7f:41:24:50:2f:ff:08:c2:64:4b:
                    59:91:af:64:0b:ea:e3:cb:17:f1:18:ec:a7:d1:73:
                    b7:c2:0d:81:1e:cd:bc:05:47:96:37:61:94:2f:6e:
                    45:02:1a:0b:a7:84:e1:b8:f4:59:73:69:a3:21:eb:
                    55:3f:52:aa:82:05:bf:33:84:c8:b3:fc:98:01:95:
                    a1:00:04:ce:56:93:bd:db:29:42:c4:c2:96:74:c6:
                    8b:48:ed:82:fd:2e:fd:9c:6d:ea:06:5b:28:18:46:
                    df:48:af:57:57:3b:33:2d:5a:f2:b5:07:cf:11:19:
                    3c:56:31:0f:06:8c:4f:c3:ee:f1:5f:d1:47:9c:51:
                    75:a5:44:d7:0b:d8:7b:29:ca:1b:4f:5f:b3:44:e0:
                    9a:01:95:c1:ad:5a:3c:31:83:e3:7c:a3:60:9e:04:
                    be:86:b4:34:16:73:4d:81:64:09:dc:3c:c6:71:7d:
                    c5:37:89:9a:7c:ff:75:75:cd:f4:9f:d5:a2:2c:57:
                    a3:7f:44:a4:da:4a:ff:3c:93:f2:d5:7e:13:bb:e4:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:21:A4:3B:85:37:D3:5B:60:94:A2:EB:F4:6E:54:62:BD:99:85:6A
            X509v3 Authority Key Identifier:
                keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:b7:2f:25:e4:d5:c1:ab:ab:16:cc:1c:bd:0f:b6:9e:93:
         3b:71:30:9a:a0:6a:a9:b1:21:21:65:0e:98:28:63:99:fa:c9:
         dd:9e:c8:99:9c:2c:ce:69:b0:d2:d6:bb:03:9e:64:69:13:9d:
         a4:28:b7:6a:f6:d8:27:1e:24:a5:fa:57:bb:d5:a5:c1:c5:ad:
         3c:1b:3f:d8:ac:3d:9d:33:72:82:7c:ad:5a:7a:a1:28:9b:26:
         32:20:8d:91:87:22:00:2f:36:e3:be:59:3c:bd:48:b5:b6:a1:
         b3:3a:7d:00:16:a4:f7:c2:72:3e:b0:30:36:64:53:1d:29:0a:
         a4:89:fc:9f:85:8b:ad:83:5e:f1:c0:ae:f8:17:00:0c:ce:d1:
         b0:c6:36:76:c5:90:1d:46:c0:2f:79:b0:e5:a3:fc:ad:89:95:
         4f:78:4d:b4:55:06:dc:8d:58:dd:40:22:e7:03:0a:79:b1:f9:
         1d:fd:85:fb:7e:8b:d3:b9:43:b3:c5:0c:61:3a:39:a0:46:be:
         df:be:8f:92:67:cf:7b:5f:ba:8b:af:41:6d:c5:e4:19:22:c7:
         27:71:0e:a9:1b:2c:85:c5:79:5c:f2:c2:d0:5d:a3:95:99:4b:
         0e:5e:7f:a9:6f:f0:bb:91:4e:43:dc:82:d6:eb:50:9a:3e:34:
         4e:f2:0b:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFCREQxMTAvBgNVBAUTKDQyODdCMzMzMjE3NkRCNDg2QTJDQkM0MjU0MDJGQTlD
ODZCNkRDNDgwHhcNMjUxMDE4MTU1MjU4WhcNMjUxMDI1MTU1MjU4WjAYMRYwFAYD
VQQDEw02OGYzYjdkYS1kZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03asDonalH6UIMFN+9A01Ra6ZAYjTtqT9wPqtKUIG5sfHioq4sBlaP4uS5yZ
MronVX9BJFAv/wjCZEtZka9kC+rjyxfxGOyn0XO3wg2BHs28BUeWN2GUL25FAhoL
p4ThuPRZc2mjIetVP1KqggW/M4TIs/yYAZWhAATOVpO92ylCxMKWdMaLSO2C/S79
nG3qBlsoGEbfSK9XVzszLVrytQfPERk8VjEPBoxPw+7xX9FHnFF1pUTXC9h7Kcob
T1+zROCaAZXBrVo8MYPjfKNgngS+hrQ0FnNNgWQJ3DzGcX3FN4mafP91dc30n9Wi
LFejf0Sk2kr/PJPy1X4Tu+TRRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwhpDuF
N9NbYJSi6/RuVGK9mYVqMB8GA1UdIwQYMBaAFEKHszMhdttIaiy8QlQC+pyGttxI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJERC8zQUUwMDRCNEQ3
NzgxMUU0QjM3NzhCNzJDNEY5QUUwMi9Rb2V6TXlGMjIwaHFMTHhDVkFMNm5JYTIz
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FvZXpNeUYyMjBocUxMeENWQUw2bklhMjNFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUJERC8zQUUwMDRCNEQ3NzgxMUU0QjM3NzhCNzJDNEY5QUUwMi9Rb2V6TXlGMjIw
aHFMTHhDVkFMNm5JYTIzRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsOLcvJeTVwaurFswcvQ+2npM7cTCaoGqpsSEhZQ6YKGOZ+sndnsiZ
nCzOabDS1rsDnmRpE52kKLdq9tgnHiSl+le71aXBxa08Gz/YrD2dM3KCfK1aeqEo
myYyII2RhyIALzbjvlk8vUi1tqGzOn0AFqT3wnI+sDA2ZFMdKQqkifyfhYutg17x
wK74FwAMztGwxjZ2xZAdRsAvebDlo/ytiZVPeE20VQbcjVjdQCLnAwp5sfkd/YX7
fovTuUOzxQxhOjmgRr7fvo+SZ897X7qLr0FtxeQZIscncQ6pGyyFxXlc8sLQXaOV
mUsOXn+pb/C7kU5D3ILW61CaPjRO8gs3
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:50 2025 by rpki-client