Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
File:                     qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json)
Hash identifier:          5e+OqjEWpm1mOnKe2CuqP0ZWeuD/Zwt8TrCh2AfPAvE=
Subject key identifier:   DC:8E:5F:B1:60:91:99:98:01:E9:99:49:3B:41:DF:9F:23:AE:3D:E1
Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
Certificate issuer:       /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Certificate serial:       1A3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
Manifest number:          1A34
Signing time:             Sat 18 Oct 2025 16:43:16 +0000
Manifest this update:     Sat 18 Oct 2025 16:43:15 +0000
Manifest next update:     Sat 25 Oct 2025 16:43:15 +0000
Files and hashes:         1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: dJzDYgz4p3Sk1j/LTqcnCPtcwB9iZ72f41xrQnuQCQU=)
                          2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: JD/t6QBbxRTutJyXKFJnddzibwxtjVqq1blAC5X3uC4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
                          rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6715 (0x1a3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
        Validity
            Not Before: Oct 18 16:43:15 2025 GMT
            Not After : Oct 25 16:43:15 2025 GMT
        Subject: CN=68f3c3a4-773a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:14:74:8b:38:28:eb:62:7b:50:05:ce:3a:
                    6d:61:bb:e1:0d:b7:0d:a9:75:c4:33:9c:4a:37:e7:
                    ca:ee:58:42:47:75:6e:97:d5:d7:03:07:2c:5a:06:
                    d0:51:33:d0:1c:86:a4:a4:3e:40:1b:e0:05:eb:27:
                    d1:b8:50:3d:3e:10:71:c9:21:d1:a1:7a:8d:22:79:
                    86:6b:43:d4:eb:da:76:01:1a:38:2f:0a:69:56:20:
                    de:93:49:3b:ba:61:32:c3:52:12:42:b3:c0:81:d6:
                    b0:b5:f2:0c:ea:6f:84:1c:e2:24:3d:4b:2b:37:5d:
                    81:00:aa:ac:10:07:9b:08:78:34:f4:5b:1e:bb:8b:
                    d7:d6:6d:f2:37:43:db:f4:b6:7c:f3:31:40:27:6d:
                    7d:d2:8a:50:1b:4c:8c:ec:45:6a:c8:84:5f:85:2c:
                    44:ed:5e:67:fb:0f:a8:36:71:0f:5a:31:8e:d0:29:
                    06:57:cc:38:1c:54:20:57:6e:54:b1:b6:fa:50:97:
                    0d:a2:48:e8:f4:55:0c:0a:de:71:d9:2e:41:5a:f8:
                    59:b1:a6:d8:f3:57:3d:54:2a:ca:ef:7e:75:19:ea:
                    03:e4:e9:6a:43:56:c8:e0:bc:90:07:2b:f2:85:4f:
                    26:16:31:ad:9a:58:f4:80:8f:bc:a6:d8:08:4c:6b:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:5F:B1:60:91:99:98:01:E9:99:49:3B:41:DF:9F:23:AE:3D:E1
            X509v3 Authority Key Identifier:
                keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a8:bc:d7:97:d9:e7:cc:f0:1d:22:87:b0:f6:e9:82:d4:c8:
         bb:af:52:f5:80:6e:e9:34:1b:8a:88:0e:a0:f8:2b:e5:da:e5:
         58:1c:12:4c:ab:33:b1:ee:83:ad:1d:9c:e1:37:02:77:a6:c8:
         8a:6f:79:7a:31:a6:bb:26:ed:84:b9:2f:f2:a9:b5:7e:07:af:
         a5:5a:43:d3:7f:06:fa:7b:e2:be:ec:76:3a:31:72:4b:73:aa:
         34:5a:fa:88:8c:c9:80:86:a0:1d:11:a7:1e:b0:37:c0:8b:53:
         28:98:62:2f:55:21:a0:8e:c2:74:82:c7:7b:4a:fb:09:77:9b:
         e1:66:2a:54:5e:56:e5:cc:7c:42:78:0b:53:40:6f:9c:e5:14:
         65:b4:9e:3b:57:b2:2a:64:2b:61:54:00:6d:18:53:37:0e:0a:
         ff:eb:f4:bb:79:eb:25:21:5f:91:5c:21:24:93:53:c9:25:e5:
         7f:c3:48:92:2d:a5:a7:8f:0c:d9:47:46:1e:c4:00:d7:5e:22:
         b5:bc:96:e2:5e:4a:23:d1:fc:91:20:6f:4f:0d:88:a8:33:26:
         d9:5a:05:59:bb:1b:89:ca:ff:bc:dd:cf:a0:90:00:de:0b:23:
         86:4a:dc:ce:63:14:f2:e6:f8:aa:ee:49:bf:b9:21:d4:b7:ab:
         8a:56:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:35 2025 by rpki-client