Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
File:                     s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json)
Hash identifier:          ZzNPFhwJPF3NzEKJkkpFolV+We7PYG8FTqA9OQ2raew=
Subject key identifier:   D8:99:C7:B7:77:F3:CE:FB:EB:62:AE:1B:4F:53:C2:3F:21:2F:6D:31
Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
Certificate issuer:       /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Certificate serial:       0B6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
Manifest number:          12E6
Signing time:             Sat 18 Oct 2025 19:56:17 +0000
Manifest this update:     Sat 18 Oct 2025 19:56:17 +0000
Manifest next update:     Sat 25 Oct 2025 19:56:17 +0000
Files and hashes:         1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: COMAHcCPzVCZYwZg5lhCK7ZsQ0Trs2naxIKNWfqbtDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl
                          rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2924 (0xb6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
        Validity
            Not Before: Oct 18 19:56:17 2025 GMT
            Not After : Oct 25 19:56:17 2025 GMT
        Subject: CN=68f3f0e1-67c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:47:8a:25:a5:8e:f6:9d:88:f2:eb:f3:53:bb:
                    15:69:d3:f7:f4:14:58:a4:9f:5f:59:eb:aa:ed:e5:
                    40:83:43:6f:e2:ac:83:9c:8f:cf:f7:a8:75:42:e7:
                    7b:21:af:87:7a:db:c7:4c:0a:ca:36:9c:59:66:da:
                    d3:d6:84:b7:f4:4e:fd:e1:64:b8:31:59:a0:2f:ab:
                    b2:1f:f6:1b:65:d6:f2:d8:1e:6b:de:36:79:f9:47:
                    8f:b4:f0:2f:f0:89:dd:dc:c6:37:ab:bd:a7:af:2f:
                    75:3d:21:20:8a:4c:18:ab:50:0e:4a:34:c5:cd:36:
                    5a:5c:86:54:61:7d:45:dd:21:13:96:21:0f:89:39:
                    2f:65:fb:98:2d:d7:87:70:b0:c3:75:a6:04:86:9e:
                    32:6d:bd:76:b4:4c:ba:96:69:85:48:09:37:71:c1:
                    9c:76:93:d3:46:ef:b0:b4:33:5d:e0:c2:ba:5e:58:
                    76:a1:26:14:92:e7:f5:54:4e:ca:cc:53:d7:95:f7:
                    e1:01:5e:f0:30:b0:83:a1:75:1a:ce:d0:ab:94:d4:
                    71:26:e8:cc:75:b2:3b:64:4d:59:c9:03:35:40:8f:
                    2b:c3:cf:43:24:f9:26:c3:0b:ee:cf:de:87:b8:0f:
                    9c:0c:00:d8:45:b4:f5:0b:56:c9:e0:e7:58:ac:f7:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:99:C7:B7:77:F3:CE:FB:EB:62:AE:1B:4F:53:C2:3F:21:2F:6D:31
            X509v3 Authority Key Identifier:
                keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:72:84:e5:a0:22:1f:c4:a1:ef:03:41:f7:e1:87:13:cd:
         c4:8d:d4:11:5d:4a:a3:4a:8f:3a:50:4b:62:ec:8b:11:16:15:
         77:ba:ed:ae:43:d2:99:cf:c4:2f:a9:cf:f0:dd:3d:53:ed:e1:
         52:1b:0d:a4:69:91:9f:d8:8e:a5:58:28:61:1b:3b:ff:f8:d0:
         51:7e:50:64:92:6e:03:48:57:73:11:df:97:f3:55:5b:4d:ac:
         f7:59:63:ac:2a:f1:7c:5f:44:7a:7e:73:0a:9c:08:81:2f:bc:
         7a:10:9c:02:ff:a9:d9:ec:27:bb:35:2b:7e:c6:2e:a6:37:a8:
         a0:93:b9:27:59:98:bb:ce:77:c2:49:6c:b6:b0:36:ca:3f:2b:
         ad:61:0c:57:4a:18:bb:ed:f4:39:c1:a0:19:8b:d3:31:d6:ab:
         c4:f4:7e:79:23:46:d3:26:6b:c5:ba:46:90:cd:75:91:f5:d3:
         85:1a:db:29:63:ee:3a:7b:1f:9a:f2:dd:b9:fb:66:0b:57:c3:
         cf:ba:03:ba:6c:9b:4d:7a:78:37:c6:ad:98:20:f8:4d:b7:1e:
         8a:a9:75:51:65:3a:e7:35:c5:ef:ec:28:d9:b4:57:1e:f0:88:
         4c:d9:1b:8a:dc:71:d9:48:b7:b4:9e:bf:87:4a:33:5e:a9:c9:
         89:7c:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:42 2025 by rpki-client