Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
File:                     qC5jMev0T1j8ZZmG2wVExmFfJvE.mft (raw, json)
Hash identifier:          37w8rDuVG0sMq0ahMs49xgqEI7ottjOHfGeY7hw4fCI=
Subject key identifier:   97:E8:E3:FB:20:91:B0:03:3D:5A:CE:63:FA:D1:9A:4E:1E:2F:20:B4
Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1
Certificate issuer:       /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
Manifest number:          0136
Signing time:             Sun 19 Oct 2025 07:21:31 +0000
Manifest this update:     Sun 19 Oct 2025 07:21:30 +0000
Manifest next update:     Sun 26 Oct 2025 07:21:30 +0000
Files and hashes:         1: qC5jMev0T1j8ZZmG2wVExmFfJvE.crl (hash: YEqB2gQ05V1H+2X9E+R8BYg2NNWSQM/HBqwICvQ6F5Y=)
                          2: B57678E8D73711EEAECFA720C4F9AE02.roa (hash: 1mdRwvV5n8x0UgBPlIBjHnwgQhIGSx8VQkbewDudiQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl
                          rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC415, serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
        Validity
            Not Before: Oct 19 07:21:30 2025 GMT
            Not After : Oct 26 07:21:30 2025 GMT
        Subject: CN=68f4917a-bef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:f6:fb:56:06:ef:1c:db:39:26:ef:a7:e1:
                    e5:30:8e:39:2e:79:80:39:4f:db:52:16:58:ed:5b:
                    20:9d:8e:9b:66:e9:f3:ef:1a:43:ff:f8:5d:bc:8e:
                    1a:5f:ea:a5:0b:2f:80:c4:0e:fa:37:18:06:56:d2:
                    c4:db:8f:e0:6c:88:b1:df:23:6b:3d:a1:cd:e8:2b:
                    9f:5f:99:ae:a7:32:12:92:d0:f4:54:19:13:ce:ee:
                    46:74:6c:f5:d3:04:1f:23:91:8a:5e:b4:9d:02:d8:
                    98:fd:cc:e4:1c:a5:fa:b6:87:82:78:3e:5d:ae:85:
                    c8:6c:0f:a4:42:73:fc:be:a7:aa:f9:97:27:5b:5c:
                    f0:dc:5a:68:69:99:44:20:ca:4c:2f:26:76:1b:cd:
                    78:f1:7c:cf:5e:35:22:c0:91:c8:52:36:92:56:ae:
                    8e:ed:c3:5c:33:c4:76:70:e5:e6:5a:6d:4a:e2:ae:
                    5e:74:f1:f6:4f:3c:b6:90:9c:5b:ca:1e:8e:f5:06:
                    7c:6c:dc:1a:ca:d3:c9:80:99:ab:08:9f:f7:5f:aa:
                    79:ca:9b:a2:57:85:5e:c1:9c:2c:26:cb:f7:f2:11:
                    8a:30:37:75:92:b9:88:72:37:f1:db:b6:f9:97:b2:
                    3d:74:d6:35:de:48:6c:e4:08:90:3e:e5:f4:ec:32:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E8:E3:FB:20:91:B0:03:3D:5A:CE:63:FA:D1:9A:4E:1E:2F:20:B4
            X509v3 Authority Key Identifier:
                keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:2e:6f:c2:4c:44:15:85:b9:cf:3e:c2:1b:8c:b0:2d:ff:7e:
         bb:5c:73:a6:b5:c3:ea:ae:f6:c4:02:05:97:0e:52:61:c3:36:
         db:4c:45:b0:39:9b:79:7d:a0:46:cf:5e:5b:7e:b4:48:72:ea:
         d0:8f:67:28:02:e6:9c:e3:76:5a:38:af:1d:ff:bd:64:c9:45:
         d4:9c:ef:58:f1:c6:93:c9:9b:2f:bb:3c:fa:e8:2f:fe:dc:7f:
         38:fd:8b:03:ed:0e:1f:88:85:4f:6d:91:0e:78:c8:68:89:af:
         99:2f:2a:22:c2:86:6e:7d:3b:3c:8c:f9:ce:b1:fb:33:55:b1:
         30:ff:5d:0d:17:cd:92:83:1f:1d:1d:8a:1f:5e:c1:d0:4a:13:
         31:42:6e:03:15:db:47:a7:fb:37:87:82:d2:20:c8:57:50:01:
         57:2a:ea:99:1f:11:8d:c6:06:fb:c7:b1:65:19:ab:2a:d5:cb:
         0d:e3:e8:81:16:e7:3a:25:ef:7f:46:45:aa:4d:cd:a4:f3:02:
         8f:ab:c5:58:c8:06:c1:a7:05:b2:e2:0d:e4:d6:50:11:e6:f1:
         a0:d1:29:8e:22:d9:21:0a:31:3a:e9:33:5f:7c:f7:a9:b7:46:
         cd:62:5e:15:5d:23:f5:06:2c:11:55:71:b2:84:64:db:9d:2b:
         79:46:48:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:53 2025 by rpki-client