Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File:                     Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier:          RgSbKupu+R7+m+ujw8FhBRbghR9GXzWo3QTrfXG3iNs=
Subject key identifier:   79:D5:20:02:07:D9:18:49:33:EB:46:69:0D:65:12:71:C5:C1:B9:E9
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer:       /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial:       177B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number:          1772
Signing time:             Sat 18 Oct 2025 16:59:44 +0000
Manifest this update:     Sat 18 Oct 2025 16:59:44 +0000
Manifest next update:     Sat 25 Oct 2025 16:59:44 +0000
Files and hashes:         1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: SPvNmh1IbkVuYMbZsblm1la3m9wEsBHuICedryfXAxA=)
                          2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: Ooak6D5iQ2fJ6FZTf7sU2wRFg0kTNy2Wu4Ysho3zOO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
                          rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6011 (0x177b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
        Validity
            Not Before: Oct 18 16:59:44 2025 GMT
            Not After : Oct 25 16:59:44 2025 GMT
        Subject: CN=68f3c780-4990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:8d:a9:cf:14:53:77:65:5d:80:be:b8:91:
                    9b:d4:3b:c8:a3:c8:bc:bb:9d:81:7e:cd:78:94:6e:
                    32:8d:da:98:a7:c4:6b:28:d0:e1:23:c5:f5:1e:b2:
                    98:cb:33:ed:ac:6b:32:eb:3b:4a:8c:b5:3d:b4:56:
                    cd:11:fb:62:77:7c:ed:88:bc:76:80:98:cc:19:06:
                    95:43:70:d3:4d:84:d2:be:d5:28:38:81:78:86:86:
                    06:47:a0:6f:9f:b3:11:29:b3:e4:52:41:34:bd:0e:
                    8b:9c:3b:c5:cd:03:7d:cb:07:75:d4:e2:d5:f8:dc:
                    0b:72:af:01:97:52:e4:1a:3c:2c:2d:17:91:9c:12:
                    5d:f6:53:69:9b:30:9b:9b:c7:21:b9:cf:6b:b4:ae:
                    a9:5d:9d:95:33:8b:0a:af:64:14:71:4d:2b:44:83:
                    fd:37:2f:03:38:86:50:c3:e4:38:78:3e:ee:f9:cd:
                    da:39:3e:63:c6:41:d6:c9:d4:01:de:8b:0a:45:f3:
                    7f:02:37:38:eb:2a:9a:3e:48:fa:5f:37:c0:3e:08:
                    1f:59:c9:55:bf:4c:4d:bd:f5:59:0b:9a:f0:5d:61:
                    33:00:37:74:94:0f:64:7e:66:96:6f:ff:54:c8:0d:
                    7f:fd:15:21:f4:fd:b8:9e:4f:b3:6b:5f:43:85:3b:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:20:02:07:D9:18:49:33:EB:46:69:0D:65:12:71:C5:C1:B9:E9
            X509v3 Authority Key Identifier:
                keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:5f:50:ae:e5:96:dc:d5:4e:32:39:3a:78:69:f3:d1:3e:
         27:01:88:dd:f6:20:7a:35:fc:29:54:60:32:1e:a9:3f:17:b8:
         4e:f7:8b:64:76:e7:b3:d2:df:dc:c1:23:f2:66:e3:83:f7:61:
         11:a6:4c:52:66:98:31:03:80:22:d1:e4:08:c2:94:77:4f:24:
         7a:90:57:c7:d1:2b:39:3c:52:bd:10:85:e2:eb:63:60:36:d2:
         00:88:e5:28:b5:e4:d9:60:0f:22:c7:15:54:f3:42:f7:c6:ca:
         f8:64:54:a4:89:11:c9:d7:b5:a3:60:9a:f9:c3:35:de:2c:90:
         e7:63:34:91:32:89:76:7d:f9:7a:d4:ec:e3:1a:ab:db:15:2b:
         44:87:95:45:55:01:b0:ad:37:0c:cb:46:96:d8:d9:09:39:6b:
         ab:6c:42:24:3f:b1:06:8e:62:14:b2:bc:5b:fc:69:74:2b:ff:
         f4:34:4b:1f:35:ff:91:82:34:ea:47:77:a5:cb:14:1e:4e:8c:
         92:82:ca:e1:7d:12:e5:ee:40:16:63:c0:e6:e0:81:32:59:80:
         58:a8:6b:2a:58:0b:49:54:f0:28:d9:35:5a:b4:c5:70:26:27:
         cf:5c:13:ba:d8:1f:d0:2e:94:7e:3e:38:2d:24:6c:3b:a6:23:
         fc:06:d2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:42 2025 by rpki-client