Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
File:                     qzsSgRukXmOSsAXTQfk6DQfyqxw.mft (raw, json)
Hash identifier:          5aB4D69Ra1KS4xTPGU51lzeOZ4bQd67vymfahhP2yY4=
Subject key identifier:   17:22:21:2B:67:73:F2:CF:A8:47:0F:4E:75:42:91:B8:C0:21:F6:57
Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
Certificate issuer:       /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
Manifest number:          01E2
Signing time:             Sun 19 Oct 2025 05:04:05 +0000
Manifest this update:     Sun 19 Oct 2025 05:04:04 +0000
Manifest next update:     Sun 26 Oct 2025 05:04:04 +0000
Files and hashes:         1: qzsSgRukXmOSsAXTQfk6DQfyqxw.crl (hash: 2bYVNPJNz9XO8EDDnrWRGGCpdTWow/ucRmDDxHFOD2w=)
                          2: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (hash: RRFkv0+MhucpLar3G+6nK3AMY5KxybMxRqr09USf+uU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
                          rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918557B, serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
        Validity
            Not Before: Oct 19 05:04:04 2025 GMT
            Not After : Oct 26 05:04:04 2025 GMT
        Subject: CN=68f47144-93de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:a9:16:d6:ca:70:b5:7f:d3:09:58:b7:bb:
                    f9:51:96:93:19:9b:57:98:c8:9d:4e:1b:27:5b:2c:
                    fd:31:23:13:b0:52:3e:be:9e:26:e3:3f:93:c1:95:
                    b0:f5:1b:27:9c:db:d4:1c:ac:f9:d5:30:ad:7e:e1:
                    75:dd:d5:e3:be:22:e8:ff:a6:fb:72:a8:72:e8:ad:
                    09:49:08:99:c7:cb:b5:cf:24:4c:70:9f:eb:ea:1f:
                    2f:1a:56:f5:e1:02:3f:f4:1c:b0:af:99:95:7a:8e:
                    c5:6c:50:cd:36:2f:20:e9:e8:b5:26:8c:fd:4f:dc:
                    a5:ce:ba:ed:f5:fe:ce:56:f6:40:92:5a:c3:93:ab:
                    d0:4b:45:90:66:67:38:f6:cf:b5:17:e5:77:46:71:
                    5b:dc:1c:36:2c:89:61:db:c4:e9:74:61:35:a4:65:
                    9c:06:f8:be:6c:94:e9:27:5d:74:9d:d3:dc:03:30:
                    92:84:b3:b7:0c:36:26:3f:ee:4c:bb:3e:d6:3e:34:
                    6b:df:cb:a5:34:d8:99:96:f9:f4:06:95:2f:c6:b4:
                    ea:8a:11:bf:48:28:cf:28:e8:1a:90:c3:37:d4:c4:
                    b7:15:f5:fe:27:9b:84:c6:97:74:4b:7f:aa:60:4a:
                    e7:64:41:f9:cd:82:2d:1d:9c:19:0b:d4:52:2b:ee:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:22:21:2B:67:73:F2:CF:A8:47:0F:4E:75:42:91:B8:C0:21:F6:57
            X509v3 Authority Key Identifier:
                keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:29:5e:e1:1a:09:05:8d:4a:8d:61:e1:b4:0f:99:e2:c0:53:
         e2:b5:3a:d2:bf:c2:93:c4:75:da:07:39:e0:ea:90:f0:ff:a5:
         46:95:17:f9:0d:f8:e8:e9:ea:3a:e3:d9:3a:30:c6:e4:bf:99:
         03:24:64:1b:db:e9:b6:3c:0b:11:4e:19:f7:bd:36:c7:4b:18:
         70:f4:3b:fe:96:52:6a:55:32:09:a0:52:23:15:6b:08:7c:76:
         f3:9b:0f:82:a2:1b:94:78:80:d8:b6:ef:78:d8:c8:54:52:f4:
         2a:0d:b5:45:9c:9a:6d:c7:b7:e9:2d:87:be:be:95:87:0d:9a:
         8e:36:de:f4:f9:12:37:f6:48:4e:77:43:54:6f:ae:2a:8e:77:
         6d:46:03:96:71:57:bc:0b:68:43:d4:72:89:c4:ff:c6:23:a2:
         33:c0:75:77:9f:fc:31:e2:cd:fe:d6:f3:4a:14:ef:33:43:c5:
         2a:7f:ae:95:8a:9d:cf:e2:da:84:b0:5d:19:65:09:c2:4a:37:
         0f:07:a9:12:a5:26:9a:fe:78:69:ee:12:e2:9f:57:19:4c:c6:
         f5:85:e0:62:26:db:4c:65:5a:91:aa:19:20:c7:18:2b:12:4d:
         01:fa:c3:24:cd:ad:dd:85:59:7e:12:fe:15:e0:4e:70:11:a8:
         d4:5d:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:29:47 2025 by rpki-client