Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft
File:                     Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft (raw, json)
Hash identifier:          ydSdU2mxJ0+IhzjHUYHkzfj/P/clhYYa20UaqU6RNjM=
Subject key identifier:   A9:03:E1:E3:B2:E4:B0:C7:C7:2A:39:C9:B9:6C:47:91:40:61:6A:3C
Authority key identifier: 42:FF:E9:51:F9:C3:90:47:38:A9:2B:AC:A5:3D:08:45:98:99:E8:84
Certificate issuer:       /CN=A918ABAC/serialNumber=42FFE951F9C3904738A92BACA53D08459899E884
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft
Manifest number:          3F
Signing time:             Sun 19 Oct 2025 10:55:53 +0000
Manifest this update:     Sun 19 Oct 2025 10:55:53 +0000
Manifest next update:     Sun 26 Oct 2025 10:55:53 +0000
Files and hashes:         1: Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl (hash: edbOTFZZkgcetYl3UCP1QV/HjG02C59AZOE18fnxbfk=)
                          2: F3A1F32E51E111F0B810EE3AC4F9AE02.roa (hash: jxu2i0AbbyNEnTbuxTH6+1BC3Aaiwa6vcqioCG/wOIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl
                          rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ABAC, serialNumber=42FFE951F9C3904738A92BACA53D08459899E884
        Validity
            Not Before: Oct 19 10:55:53 2025 GMT
            Not After : Oct 26 10:55:53 2025 GMT
        Subject: CN=68f4c3b9-59dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:3e:bb:a4:ed:81:9a:db:51:a0:54:e4:b3:
                    22:52:ce:92:8d:99:a2:3c:b9:1f:59:63:e8:b6:4a:
                    8f:fa:26:8f:4d:46:ba:60:69:09:21:de:3b:56:ef:
                    69:7b:ab:4f:7a:e7:2f:55:83:aa:11:b7:9f:a1:c0:
                    2b:82:15:fd:f1:7b:7f:65:b9:78:40:bc:fa:e9:5b:
                    01:0e:32:8a:18:f7:a7:11:28:6c:c6:fd:e3:c0:6e:
                    3c:1c:a2:4f:87:23:2c:c0:98:8a:1d:f4:e8:4a:27:
                    05:9e:83:38:15:7b:49:30:c2:09:44:36:a3:c8:10:
                    6c:81:5b:53:14:a1:70:2d:16:3c:2b:70:64:05:8e:
                    5e:02:71:79:1d:a0:4c:50:98:8e:1c:59:eb:83:42:
                    c5:09:f1:82:98:aa:d7:1f:00:8b:07:20:4b:04:88:
                    63:21:aa:12:c1:6c:e8:58:d8:3c:85:b4:28:46:c7:
                    77:7b:39:a1:3a:f8:81:ff:a2:ec:20:56:e5:63:3a:
                    8d:75:1f:2e:74:40:f7:8b:5a:ad:50:cc:18:5e:42:
                    f8:11:dd:6d:32:8e:6a:bc:8d:41:0d:c2:46:d6:66:
                    c5:40:ac:65:c3:7f:ab:97:bd:06:96:85:77:d0:c7:
                    5e:31:40:b9:a9:79:b1:2f:02:6d:34:0f:6d:2c:0e:
                    32:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:03:E1:E3:B2:E4:B0:C7:C7:2A:39:C9:B9:6C:47:91:40:61:6A:3C
            X509v3 Authority Key Identifier:
                keyid:42:FF:E9:51:F9:C3:90:47:38:A9:2B:AC:A5:3D:08:45:98:99:E8:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/6D4B296C50C911F0B4730246C4F9AE02/Qv_pUfnDkEc4qSuspT0IRZiZ6IQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:27:ce:d6:bc:ae:b8:86:6d:00:4e:3e:3a:f9:38:4d:f1:c0:
         b7:3b:29:51:1c:a8:93:5f:d8:2c:d9:02:2e:54:47:e9:cf:da:
         c6:a4:24:6c:9e:8e:74:af:2f:d5:fc:4e:c6:53:cd:ba:8a:bf:
         f8:e4:66:91:9c:fc:3a:22:8d:03:8f:b2:46:37:97:63:c7:bf:
         03:48:aa:f0:21:0f:d9:ff:8c:e8:59:74:93:ae:42:6f:a3:2a:
         d2:80:bf:57:8a:ce:5f:cf:43:ab:4b:fc:cc:67:08:34:93:d0:
         8c:d9:24:53:3d:00:51:df:96:56:8b:aa:f1:01:66:a0:b4:d8:
         b5:04:93:99:10:81:9b:e5:99:d2:59:9b:6e:b6:31:b1:c3:50:
         a1:9a:d3:75:e8:de:d0:72:ce:0d:6e:5a:73:25:ef:ee:98:c9:
         64:be:28:3f:cf:23:d9:df:f9:1d:f4:ab:40:ae:a8:23:0a:3f:
         db:3a:12:e7:87:8e:3b:cf:d1:25:12:b7:f9:88:1c:5c:a1:31:
         b0:af:58:97:62:73:23:64:e7:42:2f:05:c2:85:1a:a0:bf:3d:
         a9:a5:5d:7a:56:1c:81:33:15:58:91:05:b5:30:95:ca:0d:b4:
         49:60:88:e5:11:e0:0e:4c:04:7b:12:81:74:59:67:c8:44:36:
         18:d7:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:47:44 2025 by rpki-client