Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
File:                     M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json)
Hash identifier:          mBYKCOcCTTR1paMN3Hb2I5l+nO2Qh62GuP+5bT7ZD+8=
Subject key identifier:   3D:1A:85:A2:F4:EB:51:8C:A1:91:FB:AE:26:F1:0D:55:B1:DE:EF:1D
Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12
Certificate issuer:       /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
Certificate serial:       0D0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
Manifest number:          0CFC
Signing time:             Mon 20 Oct 2025 18:38:09 +0000
Manifest this update:     Mon 20 Oct 2025 18:38:08 +0000
Manifest next update:     Mon 27 Oct 2025 18:38:08 +0000
Files and hashes:         1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: GwQGskWi0kA41qCOYOy8I/ve2Lf/fpCCvqX7lLujEuc=)
                          2: 65674CAE2CC911F085E9B54FC4F9AE02.roa (hash: WfQhPmIZUh24j8d27BZmWadRYjUYQWfuUpvwsdxRVBY=)
                          3: 1CFC5814474611F087FA4A1DC4F9AE02.roa (hash: /bUmZK3GNNVLfX/JC5Le5EvDW4qNPqhqfyqkqK8mIkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl
                          rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 18:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912
        Validity
            Not Before: Oct 20 18:38:08 2025 GMT
            Not After : Oct 27 18:38:08 2025 GMT
        Subject: CN=68f68191-a54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:00:66:10:be:1c:54:02:c3:32:6a:6e:02:70:
                    45:e7:f6:af:c3:79:c1:b9:8a:fe:7d:47:5d:c3:16:
                    2e:0a:96:c0:d6:18:66:4b:82:71:75:c5:5e:c4:54:
                    3d:82:ef:61:03:fb:4a:3a:fc:70:58:cf:7b:0a:e6:
                    1a:ef:a9:3d:51:66:bd:a0:6c:2a:4c:d6:7c:d0:87:
                    5f:32:09:43:8f:6f:3e:b4:f5:39:95:52:8a:2f:75:
                    11:10:3b:fd:c2:06:c7:53:92:83:c5:2b:3c:37:24:
                    25:65:4b:27:f2:11:68:5a:0d:b0:48:19:62:45:77:
                    ad:03:ad:14:a8:50:ea:2b:2a:70:e6:21:50:c8:ae:
                    6b:ea:5f:30:c7:38:1f:d1:3c:27:e5:67:fd:42:f6:
                    ed:16:69:1d:e7:bd:43:f6:50:02:e2:8d:7d:e3:13:
                    83:99:c9:3c:28:5b:b2:88:7b:be:ca:cb:a8:21:44:
                    3b:2a:b1:4a:32:ae:06:83:f1:ab:1b:b2:20:ce:08:
                    06:68:34:38:fa:c4:09:ef:30:d1:06:c3:b6:80:c5:
                    3c:66:8c:dc:b7:c2:52:62:d4:b2:81:c5:b9:bd:f7:
                    a9:a8:6d:ed:30:aa:93:b3:f0:d0:21:0e:7e:82:53:
                    a1:d3:da:af:a2:9d:d4:d9:59:2a:47:ee:82:b0:41:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:85:A2:F4:EB:51:8C:A1:91:FB:AE:26:F1:0D:55:B1:DE:EF:1D
            X509v3 Authority Key Identifier:
                keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:1e:23:57:39:43:cb:3e:98:4c:97:b5:33:b4:0d:57:56:
         33:44:d0:bd:c0:f3:5d:3f:db:f9:9e:39:3e:92:42:7a:1d:a0:
         61:fb:75:24:a8:08:f8:27:6c:46:00:66:e6:0b:4b:bc:3b:8f:
         14:2f:f0:8b:f3:00:93:c6:e7:22:5e:d8:9f:e6:e9:d5:9c:ce:
         93:2b:6e:34:c0:5b:ec:ca:99:cb:da:da:d8:9c:d9:64:b6:d6:
         e0:86:f2:a9:a6:03:56:d7:ba:70:39:22:29:d0:18:d5:dc:53:
         ad:a1:da:e2:84:42:cf:3e:5d:4d:50:0a:6c:60:bf:e6:2d:c3:
         3d:f4:f4:42:27:4e:4e:c0:ca:78:59:c5:51:83:7c:84:66:49:
         d8:3a:6c:a1:38:a8:20:65:d4:b1:51:78:d0:b0:07:0c:61:15:
         59:8a:f8:83:0a:a3:31:d9:71:ac:60:c4:30:01:ca:51:e8:d0:
         7e:08:3e:dc:72:ad:21:4e:41:85:90:0e:aa:63:93:2e:3d:3b:
         24:85:ee:ca:31:42:f2:e3:ea:b2:27:82:bb:6f:2a:c0:ae:bb:
         f0:47:14:69:d0:dc:f6:10:6d:62:34:20:ea:01:57:54:0e:29:
         d9:dd:13:66:d7:5c:18:6c:6d:83:79:49:0b:05:56:ce:89:3b:
         8f:65:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:41:31 2025 by rpki-client