Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File:                     QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier:          SC03hWrQHXYMX67DtXGsd7uhruhPQr0u17/nB+iIx8M=
Subject key identifier:   73:9A:42:87:6F:E5:59:72:DA:12:7B:CD:B4:54:62:DC:59:F9:D0:0C
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer:       /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number:          011E
Signing time:             Sun 19 Oct 2025 07:50:46 +0000
Manifest this update:     Sun 19 Oct 2025 07:50:45 +0000
Manifest next update:     Sun 26 Oct 2025 07:50:45 +0000
Files and hashes:         1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: mXRoFJymDr86RVXa+7n3mqEL58bDzthM/YmdbZSbyO8=)
                          2: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: VGNr+wy397+x+eo2u5nezP4JupOw3/BZyZCNhIT48y4=)
                          3: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: f31wkh4SmRezq8K+eaS7YGeeme+WhDVB3FqGjZlLVDI=)
                          4: B1F23610923B11F084052A57C4F9AE02.roa (hash: 6wBIunqzVP5IVwrNYuKOIIoGdjbUyMvHMZGflDhF2Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
                          rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
        Validity
            Not Before: Oct 19 07:50:45 2025 GMT
            Not After : Oct 26 07:50:45 2025 GMT
        Subject: CN=68f49855-5cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:0c:d5:05:48:8c:a4:8a:2b:04:bb:dd:4c:
                    be:fe:46:a2:93:01:01:86:33:cf:fb:14:40:ce:b4:
                    48:1d:68:64:cf:19:a9:cd:d9:32:9b:9d:dd:f5:6a:
                    d3:fe:64:3b:e1:c0:2c:1d:81:45:2a:63:0f:73:78:
                    32:48:dc:ff:27:64:58:af:aa:71:a3:d3:e1:3f:92:
                    82:25:23:d5:d4:1b:22:d8:ee:f8:0b:3d:8d:c0:e8:
                    60:f8:66:ec:ee:8f:55:07:9b:3f:ec:16:8d:e0:7f:
                    01:26:42:26:42:d4:e0:97:1f:fd:51:fa:6e:0b:b8:
                    34:b5:33:15:66:22:15:2b:72:73:40:9e:0b:09:67:
                    bf:40:99:a1:2d:75:e2:c2:81:1b:81:c3:9c:d5:8b:
                    2b:85:1d:29:8c:31:0b:7b:17:b4:f3:f2:9a:87:03:
                    cd:15:2c:a3:a4:6c:36:6f:dc:33:3d:b9:91:0d:c6:
                    72:f0:16:0d:76:7e:e8:53:42:f7:d6:29:ed:7a:4c:
                    49:ff:6e:c6:f3:d6:78:17:5f:a0:77:d9:94:7e:e7:
                    e8:02:d5:b9:c9:1b:2a:66:5f:a1:b1:40:e2:c4:a9:
                    7b:ce:51:ad:9a:ca:28:aa:f2:09:da:42:c5:3e:c9:
                    78:9b:24:e9:fa:ab:d6:f1:ac:06:dd:5a:e7:c8:78:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9A:42:87:6F:E5:59:72:DA:12:7B:CD:B4:54:62:DC:59:F9:D0:0C
            X509v3 Authority Key Identifier:
                keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:43:ef:52:fe:cd:42:bf:e4:a1:fd:40:c1:9c:f2:1c:43:da:
         d5:27:1c:f6:69:f8:3f:36:ce:b2:e3:54:de:9f:87:20:b8:ea:
         4e:65:d5:f0:48:c7:0f:fe:29:be:b6:24:ff:ac:30:7a:b7:0d:
         db:f7:00:46:de:d5:76:77:63:1d:4a:77:9a:a1:ce:4f:09:71:
         d0:35:f2:a2:d2:af:24:f0:9e:45:26:dd:fa:00:7c:6b:45:ae:
         f8:92:8a:0f:b0:c9:2f:83:e4:17:ea:b1:e1:2e:e6:44:ee:e7:
         c3:dd:ad:a0:d2:6c:a3:d3:8c:c6:d8:4c:fd:a5:96:c0:9e:1a:
         d5:d3:48:f0:19:f1:7d:da:a1:4f:2d:19:67:74:44:9a:65:d7:
         c2:f5:56:10:1d:b5:55:79:34:50:f7:8a:08:59:12:ea:f4:be:
         38:e7:2d:3a:44:42:10:52:9b:78:cd:c6:e3:c5:bf:c9:ea:5a:
         f9:b8:36:82:d5:67:79:15:18:58:29:05:b5:5e:86:bf:f8:ff:
         10:1e:2e:8e:a3:ad:d0:3c:81:4f:50:44:e4:f8:e1:48:b9:15:
         9c:0c:4b:d1:c8:54:60:59:9a:bc:60:bd:4a:b9:49:fd:ef:d5:
         63:98:0d:9a:20:c0:64:01:69:9c:31:ea:3c:b4:09:74:ee:df:
         04:d2:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:05 2025 by rpki-client