Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File:                     qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier:          kJSedFhrqFsHGNBvUfWunytnl4S0WTQGEO8SLOG7q+Q=
Subject key identifier:   4E:FE:42:15:A9:A9:5E:5B:C3:F6:1B:17:2B:12:DC:F4:CE:34:3D:72
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer:       /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial:       087F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number:          0868
Signing time:             Sat 18 Oct 2025 21:49:53 +0000
Manifest this update:     Sat 18 Oct 2025 21:49:53 +0000
Manifest next update:     Sat 25 Oct 2025 21:49:53 +0000
Files and hashes:         1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: Qwc7jhjpyFnTQu3FwjvCTmInJePpdmyxvhIbWScqySs=)
                          2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: QEmg34gYMLcRImmZXOGPqukjodjpiHJ4l1SGgXAsmiI=)
                          3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: d2hFjD7xeVN3cyOnjASfx1gXiQEjM5kCyEH2NHogTpU=)
                          4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: eAvchTE2mjoaLizoiap/tIEL3DGgf3r4bWQpO2iGLTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Validity
            Not Before: Oct 18 21:49:53 2025 GMT
            Not After : Oct 25 21:49:53 2025 GMT
        Subject: CN=68f40b81-d089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:b9:c9:88:79:8b:95:8f:ee:22:b0:26:c7:
                    89:bc:fa:98:ff:98:a4:66:1d:bb:ab:23:42:a2:c9:
                    89:6d:5f:21:2d:f8:9c:38:53:7c:28:50:88:19:1e:
                    2b:b6:3b:08:29:0e:87:65:39:8c:99:f5:53:33:f1:
                    fe:63:34:48:69:4e:e7:ad:a1:ef:5f:c9:bb:20:8a:
                    d5:e7:45:c0:2c:7a:16:66:4a:3b:9a:3c:78:e7:f9:
                    79:00:91:58:41:f9:ce:f5:50:da:0a:4b:3a:6b:80:
                    c7:57:a8:a5:1c:71:3a:1d:d1:f2:6e:02:7e:01:68:
                    b6:70:e6:ae:70:e6:a4:29:86:46:5f:2e:99:d7:6f:
                    40:c3:a0:73:08:97:de:11:73:be:c0:d0:20:9d:0d:
                    a0:9c:69:0a:df:2b:e9:17:33:31:89:af:14:36:47:
                    7f:6e:a8:f9:0e:41:41:ae:24:74:7a:02:4e:e0:9b:
                    13:6a:e8:fc:6c:18:c6:01:93:af:fc:f4:da:c4:a2:
                    1c:f6:90:e7:68:c5:25:20:f9:09:8c:2c:db:e9:bf:
                    82:c6:4b:9f:84:5e:39:d0:6b:b0:12:77:e3:3a:3a:
                    f7:71:c5:42:96:30:f8:0d:2a:b8:04:5b:0c:62:c7:
                    3b:70:44:58:1a:1e:9d:7f:b3:a0:98:37:10:5d:e2:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:42:15:A9:A9:5E:5B:C3:F6:1B:17:2B:12:DC:F4:CE:34:3D:72
            X509v3 Authority Key Identifier:
                keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:06:f7:b7:6a:0e:7b:cc:a4:a4:a3:d7:e9:ac:ff:be:d2:f9:
         16:d7:f3:f1:18:a1:1a:6e:3c:a7:90:e9:9a:c8:64:44:61:f0:
         2e:95:d0:89:f8:50:04:68:1e:74:0c:32:55:a1:fd:90:9d:a7:
         74:c8:91:6a:ce:07:2f:71:9c:1d:4d:47:49:dd:ac:59:55:7c:
         22:bd:2b:43:b0:10:41:17:a8:6f:c1:9a:c4:c2:24:74:9f:f1:
         e0:b9:0d:90:23:aa:1b:4d:2f:dc:26:02:2f:81:52:fb:87:9f:
         bb:64:4b:ae:52:a1:c1:4a:51:9c:74:6f:d3:42:a0:c1:6a:62:
         b2:32:27:ff:10:d4:84:8e:77:a9:44:2d:72:7e:b2:1f:e5:a5:
         f1:4c:ca:7a:2d:3d:1b:2f:94:e0:a8:c5:07:5d:16:a1:ce:b1:
         af:df:9d:00:5f:99:59:11:8f:2d:1b:23:61:f6:85:be:e1:d9:
         56:61:01:f6:96:ad:13:1b:26:7b:5d:da:03:2b:08:42:b6:58:
         1c:a6:78:a9:20:27:ed:96:9c:c8:ca:86:ff:a5:f8:48:5f:20:
         6c:ff:31:6c:22:e2:54:47:44:35:98:e9:df:e9:97:f8:9e:8b:
         83:8e:01:5b:db:ed:f3:4a:0d:bd:25:73:2a:28:95:0a:ca:fc:
         49:20:4e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:41 2025 by rpki-client