Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
File:                     tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json)
Hash identifier:          BYybUZMCTuhQWJjZGPtpVRVfGqdPYThHUvwR1YHVr4M=
Subject key identifier:   DF:0C:7F:5A:38:8C:70:55:13:C0:9D:79:37:EF:CA:AD:3A:30:6A:F6
Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Certificate issuer:       /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
Manifest number:          54
Signing time:             Sun 19 Oct 2025 10:36:27 +0000
Manifest this update:     Sun 19 Oct 2025 10:36:26 +0000
Manifest next update:     Sun 26 Oct 2025 10:36:26 +0000
Files and hashes:         1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: YpeVgp7W8iQYjKbbiZnNWMrb23g5vuHWtV3loWTEaFc=)
                          2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
        Validity
            Not Before: Oct 19 10:36:26 2025 GMT
            Not After : Oct 26 10:36:26 2025 GMT
        Subject: CN=68f4bf2b-962d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:b4:75:66:5d:69:f7:52:6b:83:5c:9e:13:
                    ca:6c:c8:5d:8b:bf:31:da:a7:04:87:73:44:c2:29:
                    11:b7:c0:79:c8:32:6e:86:3f:cc:f3:37:96:17:8b:
                    11:b3:92:e6:f0:da:44:2f:9a:ef:83:23:9d:d6:34:
                    c2:88:8d:46:00:b5:c8:60:de:cf:98:a0:f9:39:4e:
                    b0:04:f0:b2:65:26:08:b6:2d:d3:1d:73:b5:11:b9:
                    60:3d:1e:14:cf:77:d1:8c:52:c4:01:cb:c3:f2:49:
                    1c:21:b5:25:d0:e7:d5:c7:9b:8a:75:93:c9:89:3e:
                    86:9f:d5:1a:ae:51:d4:1a:c1:12:e7:41:cc:07:3a:
                    4e:a5:00:49:31:95:71:ed:c3:8e:cd:f4:61:31:7d:
                    f5:ec:72:16:d9:3d:45:bf:ab:80:41:8e:b4:cc:c0:
                    95:59:17:cf:fb:65:f5:ed:a3:87:00:3c:c1:6d:7d:
                    3d:e6:4c:07:43:83:48:f2:ed:b3:11:18:1a:88:e4:
                    ef:91:e6:9b:bc:f7:76:f4:69:46:17:50:ed:4e:b2:
                    8a:de:3f:5c:b1:df:9b:86:f3:5d:54:e0:7d:72:9a:
                    a3:5e:0a:2c:96:bc:f3:4b:90:a4:9d:f4:a4:61:99:
                    65:c1:3f:df:86:ac:21:2b:a7:d5:83:68:1b:35:c3:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0C:7F:5A:38:8C:70:55:13:C0:9D:79:37:EF:CA:AD:3A:30:6A:F6
            X509v3 Authority Key Identifier:
                keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a6:8e:ea:67:fa:8e:b4:51:ee:d4:57:ba:20:46:e7:b7:bd:
         69:33:d4:14:7e:4e:32:63:70:a6:18:77:75:c2:b8:14:d6:45:
         ca:4c:9c:30:c8:16:32:ee:54:81:80:91:75:ae:3e:1d:8e:1b:
         2c:30:55:d9:cf:1e:d6:3c:fb:1a:4f:61:ed:bc:12:a4:ae:b1:
         2c:c3:a2:96:49:7f:39:a9:38:e0:72:16:67:17:81:5b:e9:36:
         62:ac:6a:88:da:ee:bf:92:ce:e4:a8:ef:8d:fb:55:4b:86:b9:
         53:f2:3b:5d:7a:1b:f4:e8:1c:28:1c:a1:a3:5d:62:36:c4:8b:
         17:79:a0:26:9a:d1:0b:a9:7c:ab:f7:c4:d8:a7:e3:85:27:d4:
         5b:a4:64:56:4a:2e:3c:d3:67:15:04:c2:ed:4b:0d:9f:ff:db:
         43:a8:bf:b1:a5:dd:58:70:18:fe:34:22:46:8f:29:5c:69:28:
         d0:02:79:38:1a:aa:34:14:ae:c8:85:15:4c:90:6f:4f:b0:fa:
         c5:ed:9a:99:17:9c:5b:f4:c5:10:ec:ee:95:bb:2a:bd:c5:38:
         9b:a2:e2:1c:91:62:27:55:13:30:51:82:ba:47:9d:3f:e6:b5:
         95:5d:97:cf:89:b5:86:d4:11:3f:c2:65:ca:7f:b3:13:53:b8:
         72:f6:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:15:16 2025 by rpki-client