Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
File:                     QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json)
Hash identifier:          I0O0BPY87/bMBspMmNPOGa/4uwtY3BrRvEDxlOf72sc=
Subject key identifier:   40:3F:5B:35:3F:C4:AF:FC:EB:F1:F7:93:76:DB:BC:32:91:88:72:E1
Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
Certificate issuer:       /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
Manifest number:          54
Signing time:             Sun 19 Oct 2025 10:36:30 +0000
Manifest this update:     Sun 19 Oct 2025 10:36:29 +0000
Manifest next update:     Sun 26 Oct 2025 10:36:29 +0000
Files and hashes:         1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: 3Ja6Ii6nwPEmFlzZq9EU0fKx2dSKBmIZG9wroi2B/9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
        Validity
            Not Before: Oct 19 10:36:29 2025 GMT
            Not After : Oct 26 10:36:29 2025 GMT
        Subject: CN=68f4bf2e-fc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:d6:9a:74:02:a5:cb:7e:d6:c0:42:da:c1:
                    7a:a5:77:d6:5d:4f:77:92:ec:89:3c:d4:79:c7:4a:
                    b3:5b:16:53:0d:d1:2b:3f:74:29:4a:e5:98:ff:a7:
                    d7:f3:73:2c:e9:a0:82:64:a8:83:90:e9:98:25:4b:
                    ae:70:3e:c0:9f:f7:00:88:da:68:22:9c:80:1f:0a:
                    22:be:66:b5:14:81:c3:fc:3f:8a:ef:85:4d:c5:c4:
                    49:88:ed:23:94:be:27:f9:99:9e:2e:0d:d2:2e:0d:
                    e5:a8:05:17:bf:d7:4a:3f:6c:fc:d9:bb:aa:d5:52:
                    50:b7:1a:ce:ae:c0:e5:86:9b:4f:a1:72:60:b7:f3:
                    06:57:6c:cc:59:36:b2:b0:bf:53:61:7e:d8:e0:37:
                    22:fe:1c:c6:6f:1b:27:c7:8a:16:85:d5:4f:cf:2e:
                    3d:80:42:c4:62:52:6c:7b:94:2e:f6:d1:16:70:18:
                    ff:00:e8:44:5a:e9:a2:9d:a1:b5:aa:81:df:18:57:
                    86:ab:60:98:6a:9d:14:90:f6:6b:43:1f:b6:f6:c4:
                    8b:00:d9:17:d0:2c:85:40:e0:7e:cb:34:52:6a:6c:
                    3f:38:a9:27:00:5b:b8:a1:54:3f:e8:e3:0b:88:d6:
                    2c:8e:b3:f9:62:37:44:c8:ec:4b:99:1f:e2:9a:21:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3F:5B:35:3F:C4:AF:FC:EB:F1:F7:93:76:DB:BC:32:91:88:72:E1
            X509v3 Authority Key Identifier:
                keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:27:a1:53:ca:e3:75:b2:6e:ad:69:40:e4:c1:fb:56:2c:40:
         db:d2:01:54:29:72:f8:ef:79:6b:1b:26:47:30:76:b1:b9:eb:
         58:dd:9f:04:37:c7:44:35:89:ab:33:ac:3e:3a:96:86:5f:97:
         5e:db:af:14:f2:7d:32:33:08:5d:7d:a3:d4:6a:83:83:ae:f6:
         32:f3:ef:09:8b:05:75:3f:58:89:30:b4:05:fb:60:a2:20:74:
         96:7c:e5:dc:f8:0a:cf:85:ba:b0:80:fd:31:89:10:ca:67:00:
         6f:4b:0d:7d:e5:82:fc:3f:2a:06:75:61:a5:1a:90:b4:c6:b7:
         3c:0c:84:ae:22:c0:b3:c3:4b:31:ee:97:c8:57:40:37:0e:ec:
         ae:a6:42:56:09:7c:22:9b:aa:2e:1e:9d:c4:5d:54:18:19:7f:
         be:75:2c:5e:1e:63:bd:44:7a:54:7a:b1:f5:4d:3a:3c:fb:2d:
         2a:c6:c7:a7:87:82:a3:cf:77:20:ef:c3:7a:f4:ef:83:ec:3a:
         19:60:13:4c:f8:57:f7:a8:51:95:b7:fb:6d:db:42:9a:79:0a:
         15:25:5e:a1:16:6e:90:0a:b9:3e:bf:da:78:09:8c:4c:2c:54:
         61:ad:45:b1:33:d9:f6:69:41:9f:0a:e4:68:20:86:3a:63:2b:
         99:da:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:11 2025 by rpki-client