Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
File:                     q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft (raw, json)
Hash identifier:          FeghU37TJtJlNhgr16PDDGt0e7vGGumcepDYzpf6sbM=
Subject key identifier:   94:C8:25:6F:60:48:7D:0F:09:26:A6:59:DF:5E:42:B9:56:FA:4B:CB
Authority key identifier: AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9
Certificate issuer:       /CN=A9182A08/serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
Certificate serial:       08D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
Manifest number:          08D0
Signing time:             Sat 18 Oct 2025 21:33:02 +0000
Manifest this update:     Sat 18 Oct 2025 21:33:01 +0000
Manifest next update:     Sat 25 Oct 2025 21:33:01 +0000
Files and hashes:         1: q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl (hash: izhmKORqZ6A8fEiPkCLZrYpjD3n2FQ93TX2rQFawox0=)
                          2: AAA8232C123411ED90E8CA59C4F9AE02.roa (hash: Qvjv2xSzp0S/r6i5DYb7//RNl54uOnwi+XbNLz5OL3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl
                          rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2262 (0x8d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182A08, serialNumber=ABEA9194888677927C50903FBBF1DDE374D062C9
        Validity
            Not Before: Oct 18 21:33:01 2025 GMT
            Not After : Oct 25 21:33:01 2025 GMT
        Subject: CN=68f4078d-ed2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:43:9d:ca:45:fe:c3:e1:2f:c5:ea:99:f9:99:
                    b0:17:53:24:b1:7f:d7:d4:65:85:2d:95:d6:68:b7:
                    af:0d:69:93:bf:0f:83:95:5d:d9:42:50:7f:e2:53:
                    50:6f:33:08:fe:2f:e3:90:63:50:35:68:b8:d7:b4:
                    48:c0:d0:60:f7:fb:6b:14:34:ad:f0:94:37:c2:bf:
                    a7:8b:a0:2e:10:e8:07:ff:e8:00:27:9c:3c:5c:09:
                    a4:2b:47:ec:05:a9:c1:2c:e6:05:1a:47:51:da:b4:
                    3f:83:dd:e0:61:91:74:3d:02:fc:25:dd:2c:e6:87:
                    d5:2f:5d:37:81:ca:15:5b:76:13:3e:67:43:c1:59:
                    71:79:ca:af:9a:e9:81:ba:81:0e:a3:a7:57:0a:dc:
                    dd:c5:1f:16:79:26:e4:ab:8f:ad:96:2a:18:38:e9:
                    45:32:52:0d:1a:b1:f2:51:89:73:2b:9a:96:82:21:
                    cf:44:f9:18:a3:d5:97:1e:6e:f7:cb:c7:ab:ed:33:
                    2a:b4:27:a7:61:6a:2b:5f:79:68:07:52:79:1c:4d:
                    24:a5:af:b1:b8:37:e5:fd:7e:0e:02:47:95:9f:b0:
                    6c:50:4c:d2:8e:61:6e:f3:1b:4d:35:e1:33:0d:e1:
                    95:d5:55:45:77:13:11:67:e1:97:10:33:88:2a:65:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C8:25:6F:60:48:7D:0F:09:26:A6:59:DF:5E:42:B9:56:FA:4B:CB
            X509v3 Authority Key Identifier:
                keyid:AB:EA:91:94:88:86:77:92:7C:50:90:3F:BB:F1:DD:E3:74:D0:62:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-qRlIiGd5J8UJA_u_Hd43TQYsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182A08/D19D58F0BF5011EA92777E46C4F9AE02/q-qRlIiGd5J8UJA_u_Hd43TQYsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:39:01:cf:ef:5b:c1:14:c2:76:ff:d8:99:33:59:68:ac:7e:
         5d:7b:60:f1:f0:60:c6:d6:f5:ca:4c:ae:a9:ca:70:bf:62:0c:
         a2:fe:21:b9:2f:2b:f7:b6:eb:77:d6:47:bc:ec:4f:8b:13:be:
         47:0a:cf:1a:b6:28:ce:75:f4:63:b4:83:4d:91:3c:75:b9:72:
         c1:ea:7a:22:dc:aa:c2:48:3a:0a:3c:d0:cd:e5:41:fc:f3:37:
         56:96:11:b5:4d:e4:af:fc:27:5b:a6:c4:40:55:cd:21:8c:23:
         be:9c:20:ef:32:d2:64:60:bf:ee:2f:08:51:02:ce:96:f7:a5:
         d2:f6:0d:7b:71:6c:61:ba:e1:76:08:52:f5:ac:2a:02:1a:85:
         e4:53:54:ac:3b:8a:1c:fb:32:29:cc:1b:1a:49:53:f5:26:61:
         76:48:4e:7a:38:c9:b3:17:e9:55:a8:e4:3e:c5:18:e7:2e:66:
         0d:77:65:05:61:cd:23:87:16:9c:25:44:1c:ce:bc:ed:9e:ed:
         fe:f3:e7:2d:84:72:d2:01:ed:9c:f5:7e:6e:64:59:3d:44:10:
         d8:72:c0:82:72:47:23:fb:aa:9e:18:9d:02:6c:49:c6:55:2b:
         30:6f:ed:ec:f2:48:1d:ae:f7:8f:cd:80:66:13:4d:76:00:32:
         8f:b2:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:42:13 2025 by rpki-client