Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
File:                     Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json)
Hash identifier:          8cKQR9CEAfsmPOBSUV/VQ8vja5dmXHFZcTbmKD+si/c=
Subject key identifier:   22:C4:1A:58:E0:72:01:20:A1:CB:1B:F6:C4:33:92:4D:95:39:17:E5
Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Certificate issuer:       /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Certificate serial:       04CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
Manifest number:          04C4
Signing time:             Sun 19 Oct 2025 01:42:40 +0000
Manifest this update:     Sun 19 Oct 2025 01:42:39 +0000
Manifest next update:     Sun 26 Oct 2025 01:42:39 +0000
Files and hashes:         1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: pMee0u344y5CVROdwZJ3IL1xrVA/sDtg1cuZ07L9faY=)
                          2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
                          rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230 (0x4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
        Validity
            Not Before: Oct 19 01:42:39 2025 GMT
            Not After : Oct 26 01:42:39 2025 GMT
        Subject: CN=68f4420f-3c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:0e:bc:09:cc:27:83:22:2c:c6:20:f5:4d:
                    82:3a:c7:f7:d9:db:81:f4:a5:7d:3d:c9:73:dc:30:
                    41:8e:98:23:9e:91:31:0d:2a:51:74:6b:2e:2f:e0:
                    cd:85:74:cb:bf:20:e0:c1:36:6f:d9:01:90:f8:4c:
                    a6:23:31:cb:ec:46:2f:16:92:2f:47:3e:c2:ed:d6:
                    e3:87:17:c7:61:94:e4:01:70:3f:f0:d4:40:87:bd:
                    3f:38:a2:98:1a:9c:4c:f0:00:3e:9c:6b:19:bb:bf:
                    0f:f7:72:85:60:ec:4c:71:a6:a8:a8:b6:ee:58:ef:
                    91:f9:df:bf:b4:7b:b0:92:9f:22:7e:ed:49:c8:77:
                    a1:fb:00:7a:98:8b:b0:af:38:97:1d:82:50:77:66:
                    f7:73:cc:3c:75:ad:44:0c:4b:de:d9:79:c7:c5:fd:
                    5f:3c:05:4e:b5:d2:b7:1f:e5:bc:f7:59:d3:6b:97:
                    a7:a6:64:c5:94:61:55:64:00:94:09:6a:2e:6a:58:
                    c7:f5:5a:58:b5:c8:83:07:28:49:d9:49:cd:97:8f:
                    02:2a:8d:d2:3d:dd:6f:f0:3b:0b:59:f0:55:32:c0:
                    aa:29:15:e5:07:ad:86:08:81:1e:25:e9:3f:8d:cb:
                    9c:e1:63:a9:f6:b3:a0:1e:28:86:e3:a2:a6:c2:ed:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C4:1A:58:E0:72:01:20:A1:CB:1B:F6:C4:33:92:4D:95:39:17:E5
            X509v3 Authority Key Identifier:
                keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:49:e8:28:e3:3f:16:71:10:bf:ea:42:29:f3:73:0f:b6:1b:
         f1:d8:00:9a:e4:61:a1:7b:92:ef:a9:64:d4:30:82:93:e7:fa:
         60:ec:1f:67:20:82:df:73:e7:dc:b4:d4:85:77:1b:f3:62:90:
         b2:15:b7:91:31:59:33:00:ea:87:1f:e2:62:de:e0:38:5e:8e:
         49:cd:72:b7:28:04:76:d3:c1:11:70:e1:b5:1a:85:6f:28:81:
         ea:e0:8d:4d:11:a0:b1:40:57:e2:c2:78:7d:88:fe:ea:95:ff:
         f6:7d:62:eb:ec:ba:ff:30:f2:c5:e0:ea:bc:03:fc:e5:ce:86:
         ac:9a:20:00:86:a7:47:fc:8e:2e:72:dd:30:be:cd:cc:2a:49:
         56:8d:17:db:26:96:a5:af:11:5d:02:ce:fc:36:8f:bd:54:ce:
         01:58:ad:ba:ed:09:6c:be:30:57:77:d0:d0:8f:c9:6a:ae:25:
         54:79:2e:60:07:e7:5e:70:d5:e9:48:46:d4:eb:ce:b4:16:cf:
         97:95:ff:92:fd:b2:a5:de:3b:5a:2c:63:e1:aa:80:56:85:74:
         50:0a:4f:32:d5:76:fd:af:6a:80:ad:52:c6:67:d0:07:ce:43:
         1d:ca:84:55:74:f6:59:c3:e8:b8:3e:24:56:d8:2f:d6:48:1b:
         38:e3:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:15 2025 by rpki-client