Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
File:                     pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json)
Hash identifier:          Xxo0cpSCIQIOLyMq4QyW0vdwPAvSnh8fz8TnLCv+IMc=
Subject key identifier:   5F:A6:54:46:48:BA:C9:F4:86:A7:AD:35:44:44:2F:2B:93:31:F3:38
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Certificate issuer:       /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial:       028D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
Manifest number:          0288
Signing time:             Sun 19 Oct 2025 03:49:16 +0000
Manifest this update:     Sun 19 Oct 2025 03:49:15 +0000
Manifest next update:     Sun 26 Oct 2025 03:49:15 +0000
Files and hashes:         1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: YsD38KdIP+sJ9z4fdvFVnHBFvLW4IQJpdKdX1Ua7HvE=)
                          2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
                          rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
        Validity
            Not Before: Oct 19 03:49:15 2025 GMT
            Not After : Oct 26 03:49:15 2025 GMT
        Subject: CN=68f45fbb-5fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:c1:b5:30:2e:62:74:2d:49:ec:72:3d:45:
                    3a:74:ad:43:2f:33:78:11:a2:95:73:5f:61:7b:34:
                    cf:80:e3:52:63:4b:6d:08:67:03:ba:88:19:72:12:
                    c8:37:89:3e:c2:82:68:6c:76:c7:4f:a4:17:ed:7d:
                    13:3d:57:99:de:d6:41:3a:7a:83:40:0e:c1:59:b3:
                    1a:f4:9f:2c:7b:93:32:58:8a:57:48:d4:c0:46:aa:
                    09:9b:e5:74:4e:b4:69:23:41:86:a2:a6:74:ca:36:
                    29:6e:de:d5:f3:be:73:8d:cd:2b:db:1d:3c:38:f7:
                    74:de:f4:aa:79:53:82:3f:e9:08:72:aa:36:a9:80:
                    65:91:a9:04:4a:f6:5b:fb:1d:18:72:2d:16:08:0c:
                    61:f7:4e:32:ae:94:cc:85:5f:69:59:0e:9a:ac:2d:
                    2b:84:6c:cf:32:c8:b9:05:64:37:6f:c5:f9:09:37:
                    9e:f5:2f:5c:6e:be:14:f4:e1:e7:ed:36:b9:29:22:
                    94:8c:5d:31:4e:47:16:73:39:50:14:df:84:c6:58:
                    95:78:44:06:d0:e8:2b:01:0c:ac:59:0b:66:98:60:
                    05:f3:85:10:a8:eb:60:12:eb:e5:34:10:2f:9a:37:
                    80:45:78:4f:be:13:37:ba:ca:05:6b:1e:56:24:36:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A6:54:46:48:BA:C9:F4:86:A7:AD:35:44:44:2F:2B:93:31:F3:38
            X509v3 Authority Key Identifier:
                keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:4e:c3:bb:21:9b:13:42:da:32:1e:d5:85:ac:e1:5b:9a:
         ba:f4:11:f4:79:e6:67:eb:50:14:b7:20:4a:7e:53:bd:cd:00:
         fd:2f:9a:9a:9d:67:66:e3:e6:ce:b7:f8:0a:62:f6:ea:e9:e5:
         15:48:3d:af:85:2f:4e:29:75:9f:10:f0:62:b3:b0:78:3b:fa:
         4c:99:42:72:74:61:16:9b:a2:7c:85:df:5f:94:18:ed:0a:db:
         69:13:a8:0d:e0:93:22:64:92:ab:05:28:1b:3b:67:1b:c1:ef:
         26:ca:d9:51:76:3b:2a:56:60:27:88:c7:c9:63:7a:75:98:6f:
         73:55:23:18:f5:ec:5b:32:79:08:e7:91:0e:f2:55:5b:4f:53:
         78:45:55:e3:ec:62:28:38:10:a2:0a:ab:65:d9:f1:bb:ee:c6:
         86:7f:f0:e4:6a:57:0e:f4:ce:11:a6:13:21:51:ec:cd:62:9c:
         76:d5:43:15:4a:f2:0a:d4:c4:e1:13:03:c8:04:c4:98:c9:4c:
         52:08:4c:be:1b:0f:36:cc:0d:bd:64:17:4d:6c:3b:10:64:08:
         4e:6f:7c:db:7b:da:5a:f3:c4:fe:4e:b3:3f:3f:e1:6b:9b:78:
         e7:98:2e:8c:5b:7a:77:2a:3b:7e:0d:84:6f:24:51:83:33:59:
         21:7f:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:44:48 2025 by rpki-client