Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File:                     QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier:          r0wmjtKqEMvNTpL+ZZSHbKyUwwN5C5sh2WvYhQcfwBo=
Subject key identifier:   73:64:76:8D:14:D2:90:D8:9C:3D:37:B6:75:48:B1:46:5C:E6:EF:44
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer:       /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number:          92
Signing time:             Sun 19 Oct 2025 09:43:15 +0000
Manifest this update:     Sun 19 Oct 2025 09:43:15 +0000
Manifest next update:     Sun 26 Oct 2025 09:43:15 +0000
Files and hashes:         1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: NtQri6t4JmFuHSjMWctlxymj6/PTR3LuHz6O2i6aM48=)
                          2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: DSiGqsj/wHYJqRQngYpUalsfP9r6Z3qaSue0LX+uo6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
                          rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
        Validity
            Not Before: Oct 19 09:43:15 2025 GMT
            Not After : Oct 26 09:43:15 2025 GMT
        Subject: CN=68f4b2b3-c640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:b6:ff:b0:c6:79:7e:c5:10:b7:e9:85:c0:
                    14:44:a6:66:97:1d:fd:ec:7f:cf:93:0f:3c:b0:de:
                    3f:05:97:cb:9d:c2:06:66:ba:91:c2:e8:37:b8:04:
                    a3:58:b7:e9:4d:4f:fd:70:59:10:1c:81:10:c7:08:
                    9e:65:40:bc:da:7b:69:fa:0f:05:5a:d5:e2:e6:13:
                    e9:96:b9:56:93:10:df:3b:a7:c5:3d:c3:ff:fd:ba:
                    78:2d:f3:c2:c3:ee:7b:a3:40:8b:f7:3c:29:40:95:
                    be:06:15:14:0d:da:b0:2f:8b:29:a9:95:23:bf:00:
                    66:e6:c9:d0:ae:13:e4:43:be:bf:be:48:cf:01:ff:
                    ff:6c:5e:7b:36:83:6c:19:d2:a0:dc:3e:cb:26:f3:
                    e5:06:4a:29:86:ec:bc:8d:e2:19:57:ff:07:22:7e:
                    81:b0:25:28:c4:20:0e:0c:1c:ab:c2:6c:c4:7f:73:
                    45:30:df:74:01:36:d9:42:05:3a:ae:f5:a1:ae:b0:
                    10:27:7e:80:9c:b1:20:e8:4a:d0:e8:a0:84:1a:4f:
                    d8:f3:b3:89:57:ac:0d:0b:6c:1b:a6:99:58:04:71:
                    6a:60:f3:25:36:2e:2d:85:a3:54:57:1b:a2:25:bc:
                    88:97:ba:93:92:2f:99:f5:47:ae:0b:96:c4:61:95:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:64:76:8D:14:D2:90:D8:9C:3D:37:B6:75:48:B1:46:5C:E6:EF:44
            X509v3 Authority Key Identifier:
                keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:04:ff:1c:d6:30:d8:3b:71:e9:95:93:98:62:66:e6:fd:
         be:b2:33:01:06:90:a5:52:d7:2d:31:e9:03:04:04:5a:fd:9f:
         f9:12:3d:a9:96:5f:87:b6:18:38:8d:ea:dc:d8:76:8f:2b:43:
         6e:44:98:9d:30:6f:31:0f:10:50:cc:84:2d:d5:53:bf:21:bd:
         49:b4:e6:ca:ad:54:c1:01:58:a6:7a:51:1b:ac:61:f0:bb:d7:
         d5:70:f1:df:bb:6c:52:1e:82:eb:5e:6b:78:26:b9:58:c5:ef:
         92:40:60:b1:f8:aa:13:3b:f8:2c:90:f6:c1:27:1d:4b:70:35:
         6e:09:bb:2f:01:05:5f:fa:5f:a0:8b:25:45:58:48:73:80:80:
         29:ac:be:9a:be:a1:96:87:45:b9:20:a7:e4:53:4b:7c:e5:67:
         fd:4e:b8:aa:6c:93:40:ca:f8:69:75:81:62:54:57:7d:14:88:
         e5:12:c9:83:34:42:29:a1:df:31:fd:e2:3e:92:ed:28:29:41:
         d4:93:8a:b5:52:2c:01:c7:20:59:f2:db:c7:55:fa:1c:d6:e5:
         b3:e2:f0:60:7a:58:05:5c:e1:17:f4:eb:84:f0:fb:c7:ed:1e:
         3f:b5:a5:78:1b:23:a7:c3:58:d7:08:a2:16:1e:32:49:34:83:
         58:c1:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:26:28 2025 by rpki-client