Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          SeuSi5PdUQbuIk5CZA7T+AvlXHIM0kAQTfd+HsUuj30=
Subject key identifier:   29:A4:74:3E:E7:EB:86:C7:E1:B2:20:93:51:49:CA:9F:0B:DF:0E:2C
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2664
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1A83
Signing time:             Sat 18 Oct 2025 18:12:09 +0000
Manifest this update:     Sat 18 Oct 2025 18:12:08 +0000
Manifest next update:     Sat 25 Oct 2025 18:12:08 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: dR7NxTXDNFXFQOP1ps2RCmPb+blStM8LxCd9KE2RJYU=)
                          2: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: jROfgwuidzLC7AWCncg9tK5p5d6kMRx0vRFp0MoP+qM=)
                          3: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: SicvG0o1j0juozOpQdU8S9XPJYPD28r6BEH0ZZTMtCk=)
                          4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: t77TBLDyfQlYv1eUozdedtWkdGosmio8lx2OnfPqKn8=)
                          5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: sU4VNKoTZRC7rOgdrdAJ5l9zMf5qWmX/UOum5j9Op04=)
                          6: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: kOwwKmaSB/pWq+rkgCsR0x3XY0Ne0hYk+1IKNpUUA88=)
                          7: B53FD334575411ECAA094876C4F9AE02.roa (hash: OatUXNH0fiEtO2+f1JbCOSZAp/tTotYDXstcjWZ2J2s=)
                          8: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: XPXw9+MhOn0NRVGrugIJU94WGGzOQijXcxAqrFhTo84=)
                          9: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: QPwmUi6Jbr6XpgG54LpHBRL5GHoE85qF3kMh45EU4DQ=)
                          10: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: yAxgtWHScyaAo/qxWzcthUIvpu0Cn87KgHaSUfVCrIw=)
                          11: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: G2D8FdL9HWaJ530qHLe4NXg0uwb3o4sRDKVT7tvGUhw=)
                          12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: 5SjvOm2kSOv31BBmDpmyPr0NIqcd7j1K10ShJA+7SSg=)
                          13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: MSzaop+NtM6eR5vhQ8IzHf7QK9SqJHOEvf0dM16xPxo=)
                          14: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: 74IUgWh0EIbll6zM2oD6KnRo4IUzeZO6atmhM6ptuY8=)
                          15: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: NeAes0ETd9mQEhgNnwzsPARoogq3sg8oM9diG1oYLcg=)
                          16: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: +jREgbuLYhz8eMMx2O9Ksp1ti5wG9/pudLfwvmM6Cnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9828 (0x2664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Oct 18 18:12:08 2025 GMT
            Not After : Oct 25 18:12:08 2025 GMT
        Subject: CN=68f3d878-f0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:1c:b7:20:c6:72:5e:5b:99:2c:ac:6e:e5:
                    a0:78:7b:be:36:73:22:7c:f6:fa:4f:cd:8e:9a:c6:
                    88:dd:73:95:ee:01:1e:46:2b:f2:bb:71:3c:af:ac:
                    42:05:06:29:9e:76:c5:cd:48:c8:11:5c:a2:25:6a:
                    38:8d:75:1d:c2:35:58:7d:cf:dc:2c:45:c5:0a:cb:
                    3c:d5:e0:3a:cf:cc:f6:ae:15:fd:15:55:ea:3d:50:
                    f2:57:37:0d:e6:bd:5c:d2:37:73:21:00:65:01:82:
                    ab:3d:b1:f8:74:36:8c:5e:5f:33:30:8f:ff:af:47:
                    3b:68:24:51:28:3c:53:20:22:93:76:31:c7:6a:94:
                    62:9c:3b:bd:f8:f0:6f:e1:52:cc:eb:54:7a:7f:02:
                    c9:13:12:67:b8:3c:69:87:cb:47:d2:47:c3:ec:34:
                    39:a1:ce:de:43:21:2a:ca:5d:51:b2:ad:9f:fa:61:
                    35:64:65:aa:77:66:ee:70:b8:f9:44:58:b5:80:1f:
                    2f:68:2e:4b:c4:01:03:8c:29:cd:4e:67:e7:5b:1f:
                    70:c5:ec:72:f7:5e:a4:16:20:aa:eb:d7:4b:17:c2:
                    b5:bc:16:ff:10:b4:b9:a0:d3:7e:8b:8a:32:c8:ae:
                    a0:8a:56:4b:02:52:cc:db:ec:2c:2a:03:6e:37:c7:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A4:74:3E:E7:EB:86:C7:E1:B2:20:93:51:49:CA:9F:0B:DF:0E:2C
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:55:ca:53:64:29:5a:c3:f1:31:24:a2:4d:d3:9c:2b:f4:ff:
         2d:f2:69:4d:51:19:67:c9:0d:96:2e:11:32:04:df:23:56:71:
         49:06:f4:ea:21:62:80:81:25:53:19:a1:bb:85:2e:6a:77:0b:
         4f:ad:9c:f8:5f:96:68:77:bf:da:3a:de:b6:e8:e3:60:3f:89:
         c3:40:8f:82:7a:c5:40:3f:b2:21:4f:dd:5d:c6:ad:b9:cd:aa:
         22:04:39:8b:e6:5d:4c:a5:fa:f1:08:04:ff:4f:be:5d:65:52:
         e9:f7:b3:6b:af:1e:49:10:89:a5:6b:16:19:be:91:58:ef:31:
         54:81:c6:07:5a:62:13:7c:3d:97:14:25:50:5d:58:ea:d2:f8:
         53:af:b8:ed:5f:0f:a4:0d:6c:27:91:43:82:10:60:8a:5e:15:
         7d:eb:e4:1b:55:10:ee:e6:61:ff:65:e8:29:c9:fd:56:79:bc:
         fe:1b:04:17:02:8d:11:b7:14:3c:43:c2:34:2d:cf:f5:f9:31:
         18:9d:0f:dd:89:42:72:eb:b0:5b:ee:4b:3d:ed:81:53:cc:8d:
         8a:86:7b:05:ae:1a:6d:2a:8b:e4:a0:56:8f:cf:f4:99:fc:36:
         67:52:f8:1a:35:d0:5c:6e:5a:f0:d8:f1:f5:e8:27:0b:b5:c7:
         23:73:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:57 2025 by rpki-client