Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
File:                     QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json)
Hash identifier:          C4R8tQm+Sy202Y63AB2Ea/YPhwYpOupbHI7GSMyi6MI=
Subject key identifier:   25:1D:F0:5E:9C:64:03:4A:02:EC:74:EA:90:1B:C1:4B:00:F8:0F:CF
Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
Certificate issuer:       /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
Manifest number:          0143
Signing time:             Sun 19 Oct 2025 07:06:11 +0000
Manifest this update:     Sun 19 Oct 2025 07:06:11 +0000
Manifest next update:     Sun 26 Oct 2025 07:06:11 +0000
Files and hashes:         1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: 7UHShMmhEgTQP7/lgf5p66aSbov8QWQvhCp8HR5e9rE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
                          rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F27, serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
        Validity
            Not Before: Oct 19 07:06:11 2025 GMT
            Not After : Oct 26 07:06:11 2025 GMT
        Subject: CN=68f48de3-cfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:bd:28:e5:d2:6d:ee:87:ed:ef:3c:c1:b2:
                    4b:b0:7f:4d:ae:14:33:4d:f4:6f:6b:bb:41:68:43:
                    75:cd:f1:c4:83:48:d4:3f:31:7a:1d:ca:eb:83:0e:
                    e2:88:30:b5:db:b3:2f:c4:ad:35:d4:b0:55:26:0f:
                    83:48:4e:95:fc:61:f2:f3:e2:34:fa:9e:d8:20:d4:
                    ea:92:b7:ce:44:4d:b6:71:40:61:97:21:1e:e8:c8:
                    5f:46:05:52:59:ee:45:f2:43:f4:15:92:18:ec:7c:
                    30:1d:ad:d5:07:06:51:ef:73:61:5e:96:59:8e:05:
                    9e:a7:b5:3e:63:f9:ef:9e:4c:00:0a:de:48:43:54:
                    c2:99:ed:26:68:bc:54:13:04:83:85:74:69:11:83:
                    de:ac:c8:1d:0c:92:97:60:33:8d:b0:e6:42:08:31:
                    f0:7d:6b:89:93:26:71:cf:e8:51:1c:b5:ee:e2:31:
                    53:29:ef:00:e8:55:fd:45:77:fd:96:c9:2d:7c:f4:
                    9f:d4:52:61:77:07:ca:31:5f:b1:d2:76:91:36:b0:
                    9d:34:0d:e7:f5:6e:fc:f5:d0:80:5f:f0:1a:80:f2:
                    cb:b6:ab:97:03:0b:d3:b2:9e:4f:44:4e:68:0d:1c:
                    6d:aa:dc:23:b5:d7:c6:bd:10:3a:a8:c4:66:1f:76:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:F0:5E:9C:64:03:4A:02:EC:74:EA:90:1B:C1:4B:00:F8:0F:CF
            X509v3 Authority Key Identifier:
                keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:16:3f:0f:97:db:71:7f:24:20:76:bd:3f:67:3b:6d:63:32:
         0c:6b:6c:85:68:ba:c4:ff:06:1b:f6:9f:5e:53:bf:c8:6d:79:
         16:59:95:1f:a4:09:be:5b:79:b0:28:a4:7a:d5:1f:02:86:39:
         d4:55:8e:3a:7e:be:0f:f0:35:91:ea:f7:f2:86:03:f2:64:93:
         d4:a1:81:42:bb:ce:8f:41:da:fb:0b:ed:db:28:a1:5b:02:ce:
         fc:75:e8:9f:cc:49:95:d6:c4:5c:16:9b:56:cf:c4:65:17:41:
         28:ff:5c:b6:8d:16:8e:bd:72:31:29:f5:a3:96:d1:d0:d1:fd:
         c5:62:35:2e:32:ee:9e:a0:c9:38:57:95:61:c8:e9:27:41:cf:
         63:14:f6:d7:c6:36:8d:2f:08:1a:bd:47:75:46:73:48:fe:b0:
         d2:e5:18:fc:be:da:af:51:85:c3:21:1a:ce:5b:37:98:4a:77:
         66:fc:ee:5c:9b:ed:9e:72:03:ae:5a:1c:53:85:8d:83:94:b0:
         53:52:63:32:97:b4:a1:1c:fd:d8:dc:d9:11:13:45:4b:77:59:
         93:7c:0c:bc:28:54:e7:97:fc:99:32:77:c3:eb:e6:90:17:c9:
         22:50:cb:95:82:43:fe:94:3c:13:10:0b:fb:96:6d:12:53:60:
         a0:d2:a6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:29 2025 by rpki-client