Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File:                     QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier:          AdOoqL1iU9Rgku5CdImaeaKNgoFynRZDLfjwSKrE+uc=
Subject key identifier:   C2:C8:C6:1F:96:D7:1A:E0:AA:5D:DE:52:DE:B6:50:69:FE:C2:C2:44
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer:       /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number:          0175
Signing time:             Sun 19 Oct 2025 06:39:56 +0000
Manifest this update:     Sun 19 Oct 2025 06:39:55 +0000
Manifest next update:     Sun 26 Oct 2025 06:39:55 +0000
Files and hashes:         1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: E5mAKeuYHC6dEWePQvBrMgSPsf3Pm3R2zI84Xkc/ttc=)
                          2: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (hash: /7gtZFsLsyHJNir9Gd/XvdqnjJVrpsqBtRIA/+ab938=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Validity
            Not Before: Oct 19 06:39:55 2025 GMT
            Not After : Oct 26 06:39:55 2025 GMT
        Subject: CN=68f487bb-b067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:45:1a:2c:ba:99:64:b0:af:af:19:cb:e3:
                    bb:f3:4a:0f:1b:dd:e7:95:6a:47:ec:d7:11:e5:b1:
                    fd:09:d9:03:7e:23:74:c4:b3:46:de:5d:a6:33:59:
                    1c:25:cf:e2:91:98:b8:f0:9c:9f:97:18:53:b1:4c:
                    72:66:be:46:b1:ee:c9:df:27:53:4d:6a:86:b5:d7:
                    cc:df:58:d0:2e:c2:6b:6a:5b:91:6d:11:12:58:c1:
                    99:6d:04:cd:a3:4c:38:ac:ce:f9:a6:26:9e:8d:b6:
                    63:7a:81:13:21:95:85:7f:c0:38:01:8e:ca:52:8a:
                    47:95:0b:8a:9e:8e:2f:be:ee:c8:42:a3:c5:79:79:
                    4d:68:6b:31:73:58:02:b8:e3:6e:3a:38:ef:9e:8f:
                    5b:72:79:2b:77:62:92:a1:d0:09:10:06:e9:2e:d9:
                    e2:1f:cc:41:d0:ca:66:d4:28:7a:ca:76:1b:9f:bb:
                    92:f3:46:ca:19:e5:43:af:54:7d:57:f8:cf:3f:ae:
                    fd:3c:e6:fc:62:20:fe:26:6d:45:a2:9c:4c:69:33:
                    70:b7:b5:e2:a7:de:b2:e1:e1:39:8b:84:17:5a:03:
                    a6:04:3a:64:7e:02:23:41:fa:3a:a4:d7:45:63:51:
                    ee:b5:03:fc:83:2d:1a:4f:cd:be:ca:41:98:5e:9d:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C8:C6:1F:96:D7:1A:E0:AA:5D:DE:52:DE:B6:50:69:FE:C2:C2:44
            X509v3 Authority Key Identifier:
                keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:77:1c:37:64:40:d3:87:f0:bb:88:29:e8:00:03:ae:9d:39:
         22:10:67:72:12:4f:7f:71:b6:82:8d:9c:55:c6:db:a3:42:d8:
         b6:1f:b1:cb:a7:1f:dc:45:17:ae:c0:f4:b6:a3:23:c6:6e:a3:
         45:35:24:65:b0:74:e2:15:4d:4e:72:75:a9:bc:1e:bf:fe:0c:
         cd:61:e1:5a:77:64:7a:ab:49:22:95:7e:2d:9e:bf:4b:c2:f1:
         54:01:1c:b9:c0:5b:94:5d:dd:ef:31:dc:02:b4:e9:e9:ab:b5:
         3d:45:78:89:55:28:3b:bd:31:63:0b:07:e4:ff:95:e6:51:43:
         83:65:10:59:7d:45:78:da:4f:5b:c0:29:3f:06:a0:e6:e6:00:
         6b:14:04:3f:2e:f0:e2:11:f1:6a:2c:40:f1:3d:76:31:c9:39:
         74:84:e6:46:4b:df:44:9d:07:cf:fb:8e:ad:2d:b1:d8:4d:06:
         70:48:2c:c3:62:29:83:be:d4:d2:6e:47:d8:c9:db:03:f7:6a:
         2b:f9:dd:41:34:29:8b:88:1c:fc:09:9a:fa:3e:fe:73:4e:0f:
         f9:b2:43:e2:b5:89:82:46:3e:01:47:52:f3:82:da:92:11:72:
         f6:9f:24:48:8b:15:17:f8:f2:fe:07:d3:aa:6c:77:e8:22:7e:
         ac:eb:43:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:19 2025 by rpki-client