Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File:                     2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier:          yynX1LnrC/y7028oUMnMoD0bPfSs2eyIxU2YgMKW16s=
Subject key identifier:   CB:A4:68:F8:16:33:FC:2D:56:10:93:14:48:DE:CA:5B:D4:7A:1E:2A
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer:       /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number:          51
Signing time:             Sun 19 Oct 2025 10:38:54 +0000
Manifest this update:     Sun 19 Oct 2025 10:38:53 +0000
Manifest next update:     Sun 26 Oct 2025 10:38:53 +0000
Files and hashes:         1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: xz1EsLc0V6QuiWfba0p/0MMXedR2IpF63XNOAtbO1bA=)
                          2: D474730E311C11F08B197B65C4F9AE02.roa (hash: Pu/QPbX6etZqKvOsEtAWX426lG3kK44YjXzpJvX5ecs=)
                          3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: OuYK59uWIga3ZAzcT5ocu0lcjNK1alPA7Ti+SUQJrh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
        Validity
            Not Before: Oct 19 10:38:53 2025 GMT
            Not After : Oct 26 10:38:53 2025 GMT
        Subject: CN=68f4bfbd-272d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:36:74:00:3a:ed:26:0f:74:91:0e:fc:f1:52:
                    b4:00:ef:e7:18:26:48:12:f2:8c:24:88:99:f7:41:
                    49:98:48:31:1f:38:4c:97:3d:d1:5e:89:27:83:90:
                    4d:a9:47:ca:cb:ac:b1:98:08:19:35:dd:71:b6:bf:
                    b4:29:15:fe:b3:7d:36:02:c2:69:a6:dc:85:24:ef:
                    68:6f:e4:6b:0c:bb:c9:14:1c:15:6f:6f:ad:06:20:
                    6c:31:cf:a1:72:d3:a3:5c:60:03:b1:67:e5:e2:84:
                    3a:b9:81:ea:64:24:1f:25:f5:88:42:db:86:f4:38:
                    29:f3:50:95:91:c7:99:67:ce:c1:97:6c:7f:04:ab:
                    67:cc:a2:f8:7f:e5:2e:5d:d6:88:6b:d5:ea:9a:3a:
                    63:6b:85:08:e4:11:3f:87:75:d9:da:62:68:c3:29:
                    09:07:a0:bb:89:68:9e:ab:c5:4c:c5:64:68:df:d7:
                    14:e9:d5:6b:f5:a8:50:cb:c7:5f:79:7c:0b:7d:a3:
                    21:3d:0e:3e:7d:53:f2:05:82:7c:e4:2e:af:4a:4a:
                    a9:6c:66:3f:4e:8d:c3:29:fa:c4:86:83:b7:5f:77:
                    41:de:60:09:9f:be:76:b8:d8:48:67:3e:da:90:a9:
                    b6:5b:33:0d:45:2d:2e:26:dd:93:76:67:09:23:9c:
                    0e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:68:F8:16:33:FC:2D:56:10:93:14:48:DE:CA:5B:D4:7A:1E:2A
            X509v3 Authority Key Identifier:
                keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4e:db:25:25:43:42:f2:6c:32:0e:38:0e:b2:df:d8:8d:10:
         54:63:f6:0c:c8:8c:0c:e9:cf:93:ce:42:15:55:59:55:49:ae:
         c2:a9:39:72:33:23:8e:41:32:4a:e8:40:dd:e4:01:bd:14:a3:
         1b:c4:84:a4:39:ce:70:81:dc:c5:3c:ef:68:d4:ae:bf:4a:ce:
         3c:03:ae:e2:53:97:5e:05:f2:c1:89:f8:1d:62:52:4e:77:8c:
         df:50:11:9e:d3:88:f2:38:00:95:fb:8d:28:44:84:21:2d:b1:
         76:3e:ef:76:9c:4f:98:b6:2a:1c:b0:5f:61:2b:91:01:8d:93:
         66:e0:a5:2f:b9:b6:ea:c0:69:a0:e7:e7:aa:9f:06:43:f6:94:
         c5:aa:58:d7:74:cf:6a:31:75:0b:8e:0b:33:d0:a8:96:7d:3e:
         6d:df:a4:be:b3:8a:6e:f1:6e:1b:df:52:d7:ed:8a:1c:08:79:
         4c:f6:c7:8d:6b:ba:ee:e7:dc:f4:bc:c1:7a:39:5f:1a:a4:ad:
         a4:f5:84:65:a0:8e:ff:74:a4:37:18:b3:f6:b1:91:ee:6f:a5:
         f6:58:2d:eb:76:bb:35:d2:d2:20:31:79:15:ab:07:00:02:8f:
         ff:06:ea:1b:b9:9c:1c:49:20:ae:02:56:72:e0:d7:41:1f:d2:
         16:46:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:49:13 2025 by rpki-client