Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
File:                     qDsByW55TejPjxyfqGQhKW2occQ.mft (raw, json)
Hash identifier:          SiuyZarUvwpOfdOpRRzTFgVP52ePbDtaqmtxHy8pyZ8=
Subject key identifier:   3D:67:01:54:78:A6:85:6F:72:59:4F:6E:F5:FE:DB:D6:E9:FA:57:F7
Authority key identifier: A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4
Certificate issuer:       /CN=A915B978/serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
Certificate serial:       1CAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
Manifest number:          1C8A
Signing time:             Sat 18 Oct 2025 16:30:25 +0000
Manifest this update:     Sat 18 Oct 2025 16:30:24 +0000
Manifest next update:     Sat 25 Oct 2025 16:30:24 +0000
Files and hashes:         1: qDsByW55TejPjxyfqGQhKW2occQ.crl (hash: rMKuCcHDLhQsc3C6IqVf/mCtKMnnKQR8FlMfGCVA5N8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7342 (0x1cae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B978, serialNumber=A83B01C96E794DE8CF8F1C9FA86421296DA871C4
        Validity
            Not Before: Oct 18 16:30:24 2025 GMT
            Not After : Oct 25 16:30:24 2025 GMT
        Subject: CN=68f3c0a0-e45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:e1:e1:de:90:e1:ba:7f:95:28:ab:f2:bf:
                    83:59:fd:45:cf:44:2f:83:f5:6b:2b:b7:19:47:fa:
                    fa:2b:18:f7:a3:55:04:9e:77:7d:ae:a6:69:ff:ed:
                    26:43:83:b2:cc:08:54:c8:f8:ff:cc:8b:8b:69:47:
                    cf:90:7a:b2:16:c6:6e:f6:04:fb:21:2e:77:6c:db:
                    17:97:79:a0:e5:7b:05:dd:f4:27:aa:98:22:09:64:
                    5c:1a:3e:35:fa:89:e5:84:93:c0:75:68:0f:72:9f:
                    15:c4:e1:28:bb:6d:6b:15:8f:9e:d1:c3:a3:f0:34:
                    42:a4:c1:c4:24:b7:0f:4c:15:25:c2:97:da:87:a7:
                    65:6b:12:11:77:a2:17:4d:6c:1b:16:29:75:d3:49:
                    58:da:71:59:fc:54:15:21:5e:a5:40:11:47:e9:3b:
                    81:c7:a2:bf:4f:25:e7:4b:54:bc:53:f2:12:ad:49:
                    f3:9d:fe:3e:cd:ca:63:ef:09:5e:cc:14:f0:a6:fc:
                    f1:94:e3:a1:8d:d6:d0:fb:bc:9c:b7:fd:1f:9a:d0:
                    8b:be:fc:9a:25:95:11:6c:18:04:ce:4f:e1:a2:ff:
                    81:9d:c1:9a:1d:f0:81:ca:49:29:43:ea:f5:9c:62:
                    57:1e:94:ce:15:68:45:93:e8:23:ab:b8:6d:62:a2:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:67:01:54:78:A6:85:6F:72:59:4F:6E:F5:FE:DB:D6:E9:FA:57:F7
            X509v3 Authority Key Identifier:
                keyid:A8:3B:01:C9:6E:79:4D:E8:CF:8F:1C:9F:A8:64:21:29:6D:A8:71:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDsByW55TejPjxyfqGQhKW2occQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B978/FC4A2A20E90111E68C2CD311C4F9AE02/qDsByW55TejPjxyfqGQhKW2occQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:13:56:d9:a4:27:49:bb:87:fe:9f:a5:26:f6:9e:86:fe:d4:
         1f:9a:11:6d:b8:43:e3:bb:cb:c9:95:d1:3b:78:54:88:0e:14:
         dd:1a:2f:cd:61:90:d5:d2:4c:f3:0a:90:19:76:37:e3:88:fc:
         5d:52:8e:27:fe:ae:c9:49:53:0f:81:41:74:c8:a7:4e:7f:2c:
         cb:16:c9:81:6f:93:a7:68:c1:1a:d9:dd:ba:8b:32:f3:6b:c7:
         5f:3d:99:f2:cb:be:a3:52:46:fd:38:ba:28:0b:19:af:75:8a:
         3d:34:61:09:9f:64:61:ba:a3:34:5f:7d:0d:e5:1f:ee:46:69:
         e7:41:9a:d8:fa:36:c1:a0:b6:26:7d:a8:28:fe:a4:47:da:da:
         09:b5:bd:48:ef:a7:e0:27:28:56:54:50:7b:da:05:9b:f0:e5:
         2b:47:f0:f4:1c:1b:12:39:59:04:74:42:23:81:78:42:87:47:
         e7:57:4e:09:44:15:c2:68:ad:f3:8c:d9:c9:90:70:5f:cf:86:
         a3:8e:f2:3f:80:7d:5a:70:e5:5b:3b:79:df:8d:9d:af:c6:e0:
         54:e5:30:47:3c:91:c5:b9:2c:b6:b0:4f:30:ef:5f:af:8b:7d:
         f7:86:95:16:59:c4:fc:9f:4e:b5:06:d4:7e:7b:71:91:b8:71:
         1c:ff:e2:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI5NzgxMTAvBgNVBAUTKEE4M0IwMUM5NkU3OTRERThDRjhGMUM5RkE4NjQyMTI5
NkRBODcxQzQwHhcNMjUxMDE4MTYzMDI0WhcNMjUxMDI1MTYzMDI0WjAYMRYwFAYD
VQQDEw02OGYzYzBhMC1lNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHzh4d6Q4bp/lSir8r+DWf1Fz0Qvg/VrK7cZR/r6Kxj3o1UEnnd9rqZp/+0m
Q4OyzAhUyPj/zIuLaUfPkHqyFsZu9gT7IS53bNsXl3mg5XsF3fQnqpgiCWRcGj41
+onlhJPAdWgPcp8VxOEou21rFY+e0cOj8DRCpMHEJLcPTBUlwpfah6dlaxIRd6IX
TWwbFil100lY2nFZ/FQVIV6lQBFH6TuBx6K/TyXnS1S8U/ISrUnznf4+zcpj7wle
zBTwpvzxlOOhjdbQ+7yct/0fmtCLvvyaJZURbBgEzk/hov+BncGaHfCBykkpQ+r1
nGJXHpTOFWhFk+gjq7htYqJ90QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1nAVR4
poVvcllPbvX+29bp+lf3MB8GA1UdIwQYMBaAFKg7AclueU3oz48cn6hkISltqHHE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjk3OC9GQzRBMkEyMEU5
MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRlalBqeHlmcUdRaEtXMm9j
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FEc0J5VzU1VGVqUGp4eWZxR1FoS1cyb2NjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Qjk3OC9GQzRBMkEyMEU5MDExMUU2OEMyQ0QzMTFDNEY5QUUwMi9xRHNCeVc1NVRl
alBqeHlmcUdRaEtXMm9jY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApE1bZpCdJu4f+n6Um9p6G/tQfmhFtuEPju8vJldE7eFSIDhTdGi/N
YZDV0kzzCpAZdjfjiPxdUo4n/q7JSVMPgUF0yKdOfyzLFsmBb5OnaMEa2d26izLz
a8dfPZnyy76jUkb9OLooCxmvdYo9NGEJn2RhuqM0X30N5R/uRmnnQZrY+jbBoLYm
fago/qRH2toJtb1I76fgJyhWVFB72gWb8OUrR/D0HBsSOVkEdEIjgXhCh0fnV04J
RBXCaK3zjNnJkHBfz4ajjvI/gH1acOVbO3nfjZ2vxuBU5TBHPJHFuSy2sE8w71+v
i333hpUWWcT8n061BtR+e3GRuHEc/+Ke
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:05:14 2025 by rpki-client