Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
File:                     Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json)
Hash identifier:          VC+r5NvQU5Xc5ulGezKx5JLWVQiaE9UAkCvOTeyhrog=
Subject key identifier:   E1:0D:06:53:51:88:65:0F:5C:71:BB:F0:13:5C:2F:68:72:D8:09:A6
Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
Certificate issuer:       /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Certificate serial:       2100
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
Manifest number:          55BC
Signing time:             Mon 20 Oct 2025 14:58:41 +0000
Manifest this update:     Mon 20 Oct 2025 14:58:40 +0000
Manifest next update:     Mon 27 Oct 2025 14:58:40 +0000
Files and hashes:         1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: rzJ/xPA9a74ZcwPqmR8jUed5aLOCyr0Z3ux0md1y5PU=)
                          2: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: DZexhviKSVjUz0wtVaAtdHsphj1mTjOP+0tLYZS1w4g=)
                          3: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: wW6HtygaJuqa+MnCVL4XlwdsV1VvmruGQrlj4oWNX84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8448 (0x2100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
        Validity
            Not Before: Oct 20 14:58:40 2025 GMT
            Not After : Oct 27 14:58:40 2025 GMT
        Subject: CN=68f64e20-96b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:5c:10:4c:82:0d:76:9b:4a:9f:30:45:65:
                    2a:59:97:e6:6c:12:1d:4a:51:21:fd:aa:4a:8d:48:
                    63:5d:2f:13:a8:c9:87:d8:a9:7d:82:64:85:a7:07:
                    2f:29:e1:49:72:a1:ef:76:e2:b9:2b:88:2a:4a:58:
                    39:0d:50:6b:67:53:75:0f:57:c3:af:59:82:d8:d0:
                    2c:3a:a9:c3:45:33:4a:7b:c3:c0:3a:12:34:b5:24:
                    21:10:9f:1a:d9:dc:6f:59:89:10:96:20:65:4f:60:
                    8b:94:74:0e:4d:be:8c:45:ac:d7:f6:53:6e:9e:6f:
                    46:e0:25:28:59:df:73:bd:05:d3:0b:05:c1:15:11:
                    48:8b:c4:de:c5:fb:67:47:a7:38:3a:d9:3b:2e:f2:
                    07:cc:4a:88:03:a5:05:e4:48:11:f3:b2:26:a5:b9:
                    88:78:33:cb:4e:a1:9a:2b:fd:20:5f:08:60:a8:e7:
                    bc:74:f5:57:ee:30:6b:63:3c:a2:08:12:13:66:05:
                    a1:57:37:3a:df:0d:2f:64:95:a4:6d:d4:bc:9b:5a:
                    2e:4c:bd:ab:c3:1f:36:67:60:6c:c8:90:17:f6:08:
                    73:7d:9d:70:8f:03:e8:6b:4a:23:3b:32:aa:2f:70:
                    b8:c8:cb:b6:ba:56:cd:db:f2:7a:e5:b0:37:f9:24:
                    8c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0D:06:53:51:88:65:0F:5C:71:BB:F0:13:5C:2F:68:72:D8:09:A6
            X509v3 Authority Key Identifier:
                keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:81:b9:c7:d4:96:94:df:3a:c0:6d:52:78:e4:c4:99:97:02:
         24:c5:f1:ad:af:51:72:c8:17:c8:b3:74:cd:9c:62:91:10:bb:
         6c:16:b5:ed:7a:b8:ef:6b:e4:85:75:9d:c2:21:d2:59:be:45:
         3e:a3:4b:5d:b9:ee:a3:0e:46:6a:70:f4:5c:19:bd:3c:26:32:
         10:f2:f1:d8:c7:e7:ef:59:21:35:fc:9d:82:16:f6:6e:dd:e3:
         fd:78:d2:e3:31:90:18:8a:2a:ea:6c:98:fc:53:1b:95:29:9c:
         1d:d6:05:1a:03:b6:67:b5:bb:b7:77:45:0e:aa:22:3f:0c:82:
         6e:83:98:5a:c6:e1:ba:89:37:3b:9a:38:8a:b7:7a:39:f5:2e:
         f5:bd:73:36:13:d4:e4:ec:92:63:27:93:72:b4:b3:1f:c1:fa:
         d9:5c:1b:b2:74:bd:00:de:9f:11:5d:ef:a8:b0:7c:7d:38:2f:
         b4:e8:6f:cb:29:b6:33:06:83:51:ff:a5:e3:b0:7b:94:1b:ca:
         ab:d4:8b:27:eb:24:8e:14:26:44:6b:4c:33:3b:57:9c:33:3a:
         82:cd:7e:31:a1:27:4c:76:9e:9a:f0:11:f2:f9:74:96:9a:2c:
         98:70:e6:b0:57:95:9b:a4:28:dc:81:18:43:a2:97:f0:8d:d9:
         52:b4:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:19:27 2025 by rpki-client