Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File:                     CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier:          YFUWh/0xN9dXOs8yzgSAxIMtQ+YoKhxT/ngOLYNultw=
Subject key identifier:   40:28:EC:95:BC:39:C9:94:A2:E1:D4:9E:65:1F:C7:21:7B:64:00:96
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer:       /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number:          82
Signing time:             Sun 19 Oct 2025 09:57:12 +0000
Manifest this update:     Sun 19 Oct 2025 09:57:12 +0000
Manifest next update:     Sun 26 Oct 2025 09:57:12 +0000
Files and hashes:         1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: AsD19/tOv02EmNMDSGD0XH9pgtFxvFmxH+SQxOCc4w0=)
                          2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: ZmMACpx0tXblh0b0hKepgV++JlkkfQUXi26fcUJQ2dU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
                          rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
        Validity
            Not Before: Oct 19 09:57:12 2025 GMT
            Not After : Oct 26 09:57:12 2025 GMT
        Subject: CN=68f4b5f8-0ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:77:36:59:63:a8:c3:33:0a:92:14:af:7d:
                    1d:47:f2:91:01:af:09:a2:ab:3c:40:5b:b7:f5:70:
                    b6:c0:d4:cc:2a:5f:73:f1:2f:4a:58:c1:45:33:11:
                    09:c1:a1:3e:c8:ab:28:c6:4b:72:10:dd:47:8e:2c:
                    a4:22:a2:bc:32:13:13:d5:bb:35:b3:42:87:c6:4d:
                    cf:e3:d2:d2:a9:a8:03:4e:dd:1e:5c:da:ce:26:31:
                    4c:56:97:cf:5a:d4:67:76:92:b1:21:fa:2e:d1:f6:
                    30:c5:7e:a8:79:09:7f:29:b7:a2:66:c4:68:d0:45:
                    23:44:41:f1:3d:90:2f:8b:6e:5e:f9:f8:f8:1c:3a:
                    ff:66:81:60:fa:d2:b0:e2:f0:8e:bb:86:31:82:cb:
                    8e:94:3f:cf:5b:5c:c7:71:52:7b:8e:9d:8f:2d:03:
                    f9:ae:51:4c:55:0d:84:99:85:63:a5:5c:a5:4f:89:
                    c9:4c:82:75:f0:51:94:74:34:38:fd:84:bd:73:f4:
                    56:32:61:1b:5a:0b:31:57:a8:15:fc:0f:b0:e7:c8:
                    24:bf:8b:54:75:f3:7b:b9:52:e2:99:b3:db:28:3d:
                    a5:b9:19:79:e3:cf:cf:31:97:58:e0:e1:9c:51:dd:
                    13:1d:57:c4:44:14:0f:a4:1b:5f:d1:e3:39:e6:81:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:28:EC:95:BC:39:C9:94:A2:E1:D4:9E:65:1F:C7:21:7B:64:00:96
            X509v3 Authority Key Identifier:
                keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c3:0b:33:1c:52:b0:03:40:f1:eb:8c:ca:ae:1d:f7:dc:1d:
         74:76:25:ff:7d:26:9d:0c:e2:f1:8f:7d:42:73:dc:11:e7:7a:
         03:82:32:57:7a:e0:40:55:c7:31:28:89:32:3c:eb:03:fe:5a:
         21:01:79:61:31:44:54:63:7d:56:fd:7f:65:15:a7:55:79:78:
         71:48:93:b4:59:6f:a3:48:6d:13:98:f0:be:04:a8:c9:c2:30:
         b0:c7:58:a3:d8:c3:74:82:09:d0:7a:d4:3f:43:85:a7:75:2a:
         7e:2f:28:8b:34:87:24:29:db:2d:84:c4:ad:69:fd:72:41:fd:
         05:b9:14:c9:18:12:7b:08:cc:9c:ee:22:e5:db:2d:56:55:05:
         dc:59:d6:f2:a9:c4:61:4d:f0:18:e4:11:97:b0:04:4e:61:7e:
         13:6c:03:26:ab:f9:f8:91:7e:03:a3:81:f7:e9:bf:7e:b6:f9:
         55:ae:d3:aa:a0:97:c5:1e:af:f3:b3:d9:e2:39:57:38:d6:f4:
         c3:9c:50:9e:96:11:69:54:3c:f1:27:f1:49:b8:1a:79:a5:f2:
         75:a2:69:ae:13:7b:6a:2b:99:f3:1e:2b:09:06:de:0f:64:f2:
         b4:ba:41:5d:23:b6:be:1b:d1:41:4e:2f:be:79:cf:85:d8:a4:
         ab:c9:ab:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTcyNzMxMTAvBgNVBAUTKDA5MDY3ODgyQ0RDMDIwMzQ5MTYxRTA5M0JGMzQ3MzFC
M0Y4MjJCRDcwHhcNMjUxMDE5MDk1NzEyWhcNMjUxMDI2MDk1NzEyWjAYMRYwFAYD
VQQDEw02OGY0YjVmOC0wZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvh3NlljqMMzCpIUr30dR/KRAa8Joqs8QFu39XC2wNTMKl9z8S9KWMFFMxEJ
waE+yKsoxktyEN1HjiykIqK8MhMT1bs1s0KHxk3P49LSqagDTt0eXNrOJjFMVpfP
WtRndpKxIfou0fYwxX6oeQl/KbeiZsRo0EUjREHxPZAvi25e+fj4HDr/ZoFg+tKw
4vCOu4YxgsuOlD/PW1zHcVJ7jp2PLQP5rlFMVQ2EmYVjpVylT4nJTIJ18FGUdDQ4
/YS9c/RWMmEbWgsxV6gV/A+w58gkv4tUdfN7uVLimbPbKD2luRl548/PMZdY4OGc
Ud0THVfERBQPpBtf0eM55oF2xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAo7JW8
OcmUouHUnmUfxyF7ZACWMB8GA1UdIwQYMBaAFAkGeILNwCA0kWHgk780cxs/givX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GM0QyMkMyQ0U3
NzExMUVGOURGQkRENTBDNEY5QUUwMi9DUVo0Z3MzQUlEU1JZZUNUdnpSekd6LUNL
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0NRWjRnczNBSURTUlllQ1R2elJ6R3otQ0s5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NzI3My9GM0QyMkMyQ0U3NzExMUVGOURGQkRENTBDNEY5QUUwMi9DUVo0Z3MzQUlE
U1JZZUNUdnpSekd6LUNLOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgwwszHFKwA0Dx64zKrh333B10diX/fSadDOLxj31Cc9wR53oDgjJX
euBAVccxKIkyPOsD/lohAXlhMURUY31W/X9lFadVeXhxSJO0WW+jSG0TmPC+BKjJ
wjCwx1ij2MN0ggnQetQ/Q4WndSp+LyiLNIckKdsthMStaf1yQf0FuRTJGBJ7CMyc
7iLl2y1WVQXcWdbyqcRhTfAY5BGXsAROYX4TbAMmq/n4kX4Do4H36b9+tvlVrtOq
oJfFHq/zs9niOVc41vTDnFCelhFpVDzxJ/FJuBp5pfJ1ommuE3tqK5nzHisJBt4P
ZPK0ukFdI7a+G9FBTi++ec+F2KSryaun
-----END CERTIFICATE-----
Generated at Tue Oct 21 06:57:50 2025 by rpki-client