Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier:          Exl6Nh+UoXwsjrGxYSYOhfeD5o3liBdu5QAJiralJL8=
Subject key identifier:   F6:8C:04:0B:B2:16:BC:C2:A1:F0:BE:EB:F2:1D:EB:2D:1C:43:47:8B
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1BDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number:          1BC6
Signing time:             Sat 18 Oct 2025 16:34:39 +0000
Manifest this update:     Sat 18 Oct 2025 16:34:38 +0000
Manifest next update:     Sat 25 Oct 2025 16:34:38 +0000
Files and hashes:         1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: f96LPf4cP4QwGtBe72Y8UFU2s3kzPGJfJCr+jBWBnMo=)
                          2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: d9C+rmMNQQZELmuy5aIPVlKeATtzTC5JJ8WoYiMXlHI=)
                          3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: V0J+K3DJnN+osBZ9dwTDUPh/HvfjgBzZSWLUoCMaCuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7133 (0x1bdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Oct 18 16:34:38 2025 GMT
            Not After : Oct 25 16:34:38 2025 GMT
        Subject: CN=68f3c19e-4c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:a8:d4:a8:86:cc:5c:67:3e:10:ef:90:1d:
                    b7:61:5c:11:e3:ba:c3:e2:4a:81:fe:e3:63:40:82:
                    cc:0a:d2:57:b2:05:15:83:8a:07:13:23:9d:54:78:
                    93:ad:e3:0b:f4:db:ae:eb:dd:44:74:28:52:89:5a:
                    6e:2e:4b:d1:d6:e9:0c:ce:22:37:6e:fc:36:9f:0e:
                    36:29:f5:bc:fa:cc:3b:14:98:e4:d1:db:b0:df:2f:
                    c3:c1:a2:18:d0:2a:3c:35:33:4e:08:7f:45:3c:50:
                    c3:70:a3:54:24:f1:da:d2:20:e1:8f:c1:3f:39:a8:
                    4d:7c:45:35:67:0a:7c:c5:4f:6b:ff:06:3d:42:fe:
                    a5:e8:bd:b5:e1:a6:27:77:07:ea:f5:37:7f:a1:08:
                    23:13:33:2f:69:e0:aa:80:98:8a:e9:6f:94:dc:91:
                    bf:5a:00:9b:9e:af:53:ec:6d:7b:f3:d5:10:cc:cb:
                    71:4c:99:63:61:39:05:ae:16:31:c0:84:b4:3f:aa:
                    f6:5a:14:2d:a1:d4:0a:bc:03:1f:35:bd:6a:26:a8:
                    17:02:ae:eb:4f:0b:dc:cb:3f:54:ac:f1:8a:a3:4f:
                    26:9a:d1:7b:8a:f2:02:f8:b9:74:6c:b1:9b:a2:33:
                    9b:71:c2:ee:44:23:fe:a6:f9:71:05:a8:82:d5:46:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8C:04:0B:B2:16:BC:C2:A1:F0:BE:EB:F2:1D:EB:2D:1C:43:47:8B
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:83:39:41:a4:ff:b6:b8:aa:79:12:4b:b3:82:98:26:5b:d9:
         75:72:3f:8e:a3:6b:e8:60:25:00:37:9d:c8:d3:61:e5:de:0a:
         7c:aa:a5:d9:cf:00:34:b5:34:24:6e:c2:9f:bc:00:35:32:28:
         0c:ca:13:b3:11:2b:2d:33:00:3b:c0:55:87:8f:dc:76:4c:d5:
         c1:1e:89:05:bb:cd:d3:83:5c:2b:24:1b:79:b0:bd:7a:a3:73:
         8c:34:c5:60:1d:7b:20:11:eb:51:9e:0e:2b:86:be:c6:3a:f7:
         36:74:3a:33:c5:f4:a4:f9:bf:14:ae:fb:00:f0:e4:e5:1e:6d:
         96:37:90:72:29:f1:7b:08:ee:68:66:3f:c2:c7:f1:e0:4e:72:
         72:2b:92:87:a2:1d:3b:6e:29:cd:3e:1d:bc:b9:cb:38:3f:f1:
         a0:9e:b4:38:b3:61:70:9a:15:38:97:d5:a3:e8:e2:b1:1a:d0:
         f3:71:7b:50:e0:c1:0d:3f:33:bf:49:b9:84:1c:1f:71:47:8a:
         b9:2c:17:91:14:a9:2c:2c:ad:ca:be:ff:7e:1f:11:f1:82:bb:
         65:bf:5d:89:77:d5:9e:b8:ee:78:e0:70:42:84:e5:af:35:b3:
         ee:42:11:68:4b:de:77:58:80:fb:95:4a:18:c9:5f:92:e0:80:
         eb:9d:e9:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICG90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3
OUQzMDUyMzQwHhcNMjUxMDE4MTYzNDM4WhcNMjUxMDI1MTYzNDM4WjAYMRYwFAYD
VQQDEw02OGYzYzE5ZS00YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Syo1KiGzFxnPhDvkB23YVwR47rD4kqB/uNjQILMCtJXsgUVg4oHEyOdVHiT
reML9Nuu691EdChSiVpuLkvR1ukMziI3bvw2nw42KfW8+sw7FJjk0duw3y/DwaIY
0Co8NTNOCH9FPFDDcKNUJPHa0iDhj8E/OahNfEU1Zwp8xU9r/wY9Qv6l6L214aYn
dwfq9Td/oQgjEzMvaeCqgJiK6W+U3JG/WgCbnq9T7G1789UQzMtxTJljYTkFrhYx
wIS0P6r2WhQtodQKvAMfNb1qJqgXAq7rTwvcyz9UrPGKo08mmtF7ivIC+Ll0bLGb
ojObccLuRCP+pvlxBaiC1UY1fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaMBAuy
FrzCofC+6/Id6y0cQ0eLMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5
ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX
ckZQRU03bGxoRzk1MHdValEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBngzlBpP+2uKp5EkuzgpgmW9l1cj+Oo2voYCUAN53I02Hl3gp8qqXZ
zwA0tTQkbsKfvAA1MigMyhOzESstMwA7wFWHj9x2TNXBHokFu83Tg1wrJBt5sL16
o3OMNMVgHXsgEetRng4rhr7GOvc2dDozxfSk+b8UrvsA8OTlHm2WN5ByKfF7CO5o
Zj/Cx/HgTnJyK5KHoh07binNPh28ucs4P/GgnrQ4s2FwmhU4l9Wj6OKxGtDzcXtQ
4MENPzO/SbmEHB9xR4q5LBeRFKksLK3Kvv9+HxHxgrtlv12Jd9WeuO544HBChOWv
NbPuQhFoS953WID7lUoYyV+S4IDrnelm
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:48 2025 by rpki-client