Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File:                     q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier:          9aTI+Vz4mLab4kf5f+K+8kRvNk2uAVE2kwnFJoKirAw=
Subject key identifier:   2B:4D:78:7F:79:3B:66:F6:84:AF:BC:88:2F:87:19:E6:54:0C:44:43
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer:       /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial:       0AEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number:          0A5A
Signing time:             Sat 18 Oct 2025 20:55:21 +0000
Manifest this update:     Sat 18 Oct 2025 20:55:20 +0000
Manifest next update:     Sat 25 Oct 2025 20:55:20 +0000
Files and hashes:         1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: ANvTq1Ez4OvbWZ6Bf7X5mRvD+nYzZxt4Y6uhGP7/CGw=)
                          2: ABF4F248555511F0A341047BC4F9AE02.roa (hash: I1d1RCJ4rw/8orQ3As1NQw/eL62cfyC0BCN7vQ6zw48=)
                          3: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: FB2huuZ/tiCR/IS/ucieD51OLCSYw6eG3ZIKY9r9AjQ=)
                          4: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ytc9ndn0dlR+m8jI9GCXZzm6gP/TjFiRbPEGnx2/DEc=)
                          5: D4BFA4A8887611F0B5B3B769C4F9AE02.roa (hash: yIKxUX4qjvMdHr/FogzqA/JPaJ+Ebalp0QPHSzbf7Ok=)
                          6: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: gXzfPpJraCI1eMZ7u0kJ3M/+wD9m7V2Y4ANIxMghKvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
                          rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
        Validity
            Not Before: Oct 18 20:55:20 2025 GMT
            Not After : Oct 25 20:55:20 2025 GMT
        Subject: CN=68f3feb9-7885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:13:1e:d4:27:90:8d:0d:76:21:01:2f:65:54:
                    df:74:a3:06:81:a5:c5:a9:ea:26:17:bb:4c:d3:a9:
                    ef:d0:19:33:c9:3d:15:f9:19:4f:84:6b:81:e5:ba:
                    04:26:d7:69:4e:fd:c3:3f:22:3a:fd:d3:94:c1:79:
                    e0:43:63:78:42:a1:c7:cb:da:97:13:e9:fc:72:16:
                    fa:62:9f:db:eb:01:39:c6:a3:6e:c2:0f:1e:a1:44:
                    03:70:9a:4e:75:d3:b7:f0:69:7b:4b:50:ef:49:4e:
                    50:55:b3:5f:b0:1c:da:12:f7:bc:e1:a3:a9:79:f2:
                    65:19:6c:3c:65:3c:40:ad:d1:13:79:aa:2f:82:19:
                    8a:5a:98:42:8d:d7:f0:41:ed:d4:c9:8d:b0:6a:52:
                    75:c2:a1:08:01:b8:34:6d:d7:5e:25:08:c1:3d:b3:
                    95:63:5b:34:27:2f:62:11:59:45:78:77:a5:1b:25:
                    6a:bf:43:9c:96:5c:19:31:a7:d4:6f:9c:3c:0a:53:
                    6f:e5:5f:74:f8:b4:f6:df:92:31:30:87:e5:e6:89:
                    b2:ac:64:dd:fd:c1:23:55:f1:d7:93:fe:0d:3a:00:
                    a2:ff:a4:5a:dc:5b:e1:95:61:19:09:f9:b2:a4:fb:
                    91:7d:f6:46:e6:e3:8d:d0:d6:ee:58:5d:8a:f8:fe:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4D:78:7F:79:3B:66:F6:84:AF:BC:88:2F:87:19:E6:54:0C:44:43
            X509v3 Authority Key Identifier:
                keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ca:aa:5b:5b:67:a2:cd:97:e9:10:15:91:30:ac:0c:1e:5d:
         6d:ba:65:62:38:79:14:f9:83:e0:b0:cc:c8:6b:b0:16:c4:64:
         62:a1:e7:49:f6:89:07:a9:96:61:48:c9:b3:bc:1f:b2:91:8e:
         5c:f4:6f:d2:b2:7b:c0:85:22:d9:be:c7:56:32:19:9c:6e:ec:
         5e:ff:28:6e:51:bf:7d:ea:06:b1:56:1b:db:da:e7:28:b2:4f:
         6b:14:36:36:48:7d:6d:17:93:f0:20:11:96:c7:b9:40:34:4b:
         89:d4:c3:71:63:f6:cf:a6:5f:8f:d7:98:b0:79:01:45:8b:35:
         33:45:e5:7f:fe:ad:f4:18:28:cf:e8:d5:70:0c:77:d4:41:a3:
         16:ec:02:9c:ff:aa:79:32:30:83:73:90:a5:0c:87:db:c8:0c:
         af:f2:7f:98:70:94:94:49:a6:e6:6b:c3:91:77:80:0d:69:11:
         27:92:36:f9:67:65:1f:56:d9:f5:0a:9e:40:df:bc:96:a6:33:
         36:23:8d:3c:a5:00:3b:18:5f:e6:57:ee:59:9b:dc:16:a4:b2:
         a0:3e:d1:c4:d3:11:bc:ef:60:3e:3d:f9:b0:df:c0:ba:98:a0:
         fa:68:67:ee:35:bb:d9:98:4d:92:b4:82:ef:98:c2:1e:0a:b4:
         25:75:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:12 2025 by rpki-client