Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
File:                     Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft (raw, json)
Hash identifier:          qbS9qvlk3fisVAQHBWhy03dOjg4Sdm9UI3JZrJWYPGg=
Subject key identifier:   56:F9:2F:53:65:41:B4:40:38:58:9A:43:28:90:AB:04:AB:E9:37:BA
Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD
Certificate issuer:       /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
Manifest number:          015F
Signing time:             Sun 19 Oct 2025 06:44:56 +0000
Manifest this update:     Sun 19 Oct 2025 06:44:55 +0000
Manifest next update:     Sun 26 Oct 2025 06:44:55 +0000
Files and hashes:         1: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl (hash: fOJwT3FqJ2QbzKyep1ExWwFZ0J/KzbPHOCQ07O0AJAs=)
                          2: 9BD4B85894D611EE85EDE844C4F9AE02.roa (hash: qMb5p2DafyW8EWL0hOaIMJWbQyW8PlH7p5vaUcSXFyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl
                          rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91237A2, serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
        Validity
            Not Before: Oct 19 06:44:55 2025 GMT
            Not After : Oct 26 06:44:55 2025 GMT
        Subject: CN=68f488e7-6b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:14:95:4e:57:14:d3:5a:ea:af:00:33:15:
                    a5:79:67:03:16:33:e9:69:98:b7:3b:1b:e9:0c:07:
                    a2:fa:1e:ff:99:d2:de:93:02:5f:b3:ed:5d:af:02:
                    27:49:58:4a:2e:55:db:19:e0:1f:4e:0f:d7:5d:2e:
                    eb:d6:59:4a:98:d0:42:ba:af:94:ec:6c:4c:16:5a:
                    ed:d7:e5:63:58:f5:d5:d0:7b:b3:c2:d3:04:28:29:
                    ff:36:92:d5:f0:6e:44:b7:9d:68:40:fb:a6:b6:c3:
                    d7:9d:af:33:55:2a:74:6f:de:65:90:ff:aa:37:1d:
                    28:5d:fa:6f:08:41:15:85:de:c7:10:6b:b9:2e:f4:
                    16:33:96:69:e9:b6:3d:b2:34:d8:e4:45:16:43:73:
                    a6:7d:cd:7f:7e:c5:b3:09:52:b7:09:84:4d:87:87:
                    33:1a:ef:1c:4e:a6:e5:61:e5:23:c9:1a:04:4a:2c:
                    43:6b:4d:df:0e:ef:78:0c:d3:c7:03:e3:23:53:51:
                    f1:64:fa:28:7e:81:08:85:d4:98:36:54:33:84:4d:
                    fb:aa:d4:89:34:64:14:37:b2:9b:10:a9:02:4b:a7:
                    58:37:5f:98:65:15:86:c3:88:2f:25:f0:aa:92:91:
                    e7:0b:23:a3:36:30:49:42:3a:74:3e:c2:61:9e:64:
                    78:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:2F:53:65:41:B4:40:38:58:9A:43:28:90:AB:04:AB:E9:37:BA
            X509v3 Authority Key Identifier:
                keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:b5:44:c2:bb:b0:a3:d4:37:b1:9e:4e:c9:f1:7a:4c:26:
         63:ae:44:30:ed:87:de:78:ab:22:dc:ba:01:3e:c7:c5:5b:c7:
         1b:79:29:80:87:b2:98:02:c7:67:25:df:92:bb:e3:a0:5a:44:
         10:5f:29:0b:4a:90:0a:5f:4d:dc:ba:67:04:6b:5a:92:b0:99:
         44:3d:11:a0:f3:a7:a1:4f:1c:a3:8b:c4:ef:fb:9f:62:96:9f:
         85:6d:3e:84:e0:ff:71:f1:8a:35:32:77:ee:9f:f1:4c:4e:11:
         9e:94:ec:66:dd:9d:55:f7:f3:b9:11:36:3f:a9:12:45:f7:a8:
         ee:e6:8e:85:14:de:68:5d:1a:52:6b:e8:af:c7:d4:8b:bc:9f:
         d6:14:41:e3:e2:a3:72:b9:04:96:10:d1:30:cc:7f:8a:92:14:
         6a:0e:0e:23:01:b8:10:97:8e:1a:b2:91:bc:48:3c:a4:d5:d0:
         5c:e2:de:5e:ef:30:6b:c5:5f:7e:be:10:49:2a:c9:60:54:ff:
         ff:b8:6d:c3:e2:d0:8b:54:2e:f3:58:27:c1:2e:04:29:15:c6:
         06:fc:b8:ad:8a:01:39:ac:dd:84:df:ec:6f:cc:b9:b4:ff:4b:
         bf:95:11:b6:69:d7:50:53:16:e7:e6:66:2f:86:9d:5a:d2:b9:
         f0:ae:71:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:50:29 2025 by rpki-client