Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
File:                     qtqjxEEWYN9cNEipHISuV1eibhM.mft (raw, json)
Hash identifier:          aR+HpLxcsDKkXsy8UYqQd7xyK081s8mSJNn3ZqLOUc4=
Subject key identifier:   D3:D0:C4:4D:1A:F7:5E:0E:B1:83:0C:2A:61:62:D3:4E:3C:B9:6A:EF
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       0707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
Manifest number:          06EF
Signing time:             Sat 18 Oct 2025 23:25:26 +0000
Manifest this update:     Sat 18 Oct 2025 23:25:25 +0000
Manifest next update:     Sat 25 Oct 2025 23:25:25 +0000
Files and hashes:         1: qtqjxEEWYN9cNEipHISuV1eibhM.crl (hash: RWny82At0bLpDDg+lhXGaNyJvKpELDJy7+ZrVylu6yc=)
                          2: E349FB7A6B8B11EBA041C843C4F9AE02.roa (hash: 1DE8XNCJLBR6QtwG0fu+8ZW2V670Rx0Kd3Rb7WKx+60=)
                          3: E4C0040A8C8C11EBB81BA228C4F9AE02.roa (hash: M1talUD7nGnyR5DD/wgP+RFBY6UhaAWGj+4ZLgWnUFg=)
                          4: 9D181A24D78211EC944E227FC4F9AE02.roa (hash: xNyXlLc3Ts7FB65YU9hZzt/4i9JW0/Xq/PKXKz2m6v8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
                          rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D, serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: Oct 18 23:25:25 2025 GMT
            Not After : Oct 25 23:25:25 2025 GMT
        Subject: CN=68f421e5-bd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:97:f1:e5:74:28:a3:12:9c:d6:19:27:94:
                    9e:7e:cf:9a:cc:b9:40:2c:cc:f0:7b:5c:62:67:59:
                    54:09:e5:ba:e7:c3:77:11:94:05:92:1b:aa:9f:dc:
                    a0:05:f6:a1:5d:f5:c6:df:80:8c:35:07:f2:c6:56:
                    1b:7c:97:a0:76:49:e8:a9:f0:68:d3:4c:bc:0d:fa:
                    62:eb:a4:7a:ce:c0:73:6b:aa:da:d5:ff:6c:8b:3f:
                    27:7a:6f:54:02:4e:c3:13:ea:dc:ae:8b:54:3a:90:
                    e9:09:87:1b:6f:01:41:dc:c5:6e:f7:a4:d4:8f:5b:
                    4c:e7:e9:84:c9:13:7d:55:0f:a0:01:18:39:34:f0:
                    ff:be:88:55:15:1e:63:77:0a:e7:8c:21:35:a6:48:
                    7b:e1:72:b0:a1:c0:69:66:a5:15:f0:3f:0e:b6:2a:
                    91:4d:a6:81:ee:df:1a:ee:5d:bf:10:2a:55:28:80:
                    3b:b7:36:95:64:e4:b6:95:f4:51:1b:99:1f:85:23:
                    d9:cf:0c:c1:c7:5e:2a:2f:c8:54:0f:c8:56:1b:64:
                    d4:cc:2e:44:a3:ba:9b:74:35:0f:af:b5:4d:a4:b2:
                    14:e0:d9:39:da:87:50:e5:d7:ee:44:cb:05:7c:03:
                    2f:a3:9e:bc:48:54:29:b8:c7:72:fc:9d:37:08:95:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D0:C4:4D:1A:F7:5E:0E:B1:83:0C:2A:61:62:D3:4E:3C:B9:6A:EF
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:33:b3:ae:72:85:f6:b2:1a:1e:a7:13:63:7b:3c:e7:c6:4c:
         09:85:68:41:9e:1f:0e:87:1b:77:69:ba:74:05:a0:ac:83:69:
         c5:bf:a4:f3:e3:d0:ea:6d:76:bd:78:b4:c0:7b:f9:d5:9c:7f:
         2b:73:d4:81:eb:83:1c:cf:c1:57:66:15:0b:b7:3e:1d:2e:a1:
         7a:cd:71:6d:e3:82:03:1b:a8:cf:53:92:4b:80:cf:14:f8:cb:
         af:c8:53:a3:3c:bf:ac:f0:83:b7:6d:60:ff:06:c6:d9:94:27:
         33:3e:13:29:f2:be:80:de:cd:c0:fe:11:1a:5e:cd:05:9e:80:
         42:f1:f6:3e:dc:0e:ac:f1:91:92:55:48:6a:25:77:a5:d7:9f:
         9d:f3:37:d9:76:b4:4b:13:e0:89:c3:a3:f3:7b:50:97:c4:3d:
         93:93:e6:92:7a:2e:0d:4b:03:e9:3e:91:36:15:58:4b:a3:11:
         2e:20:56:bd:3d:05:64:c3:39:aa:58:6a:10:ec:cf:1f:58:ee:
         4c:c7:61:df:52:75:cc:98:12:62:5f:0f:0d:df:f2:3f:7d:10:
         27:9c:99:59:bc:d3:be:3b:fa:4a:53:7c:7d:bf:92:c8:5e:9e:
         8c:e1:66:cd:2e:bf:3e:6a:1b:43:59:06:d5:20:4d:7f:a7:07:
         3a:65:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:17 2025 by rpki-client