Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
File:                     qEiFS7_Ou01JgBuyrj2EQIscPSc.mft (raw, json)
Hash identifier:          dRF3q7p6mCd9kUEDktuHxvNJ3C/UQz5TSGG52UxD7AY=
Subject key identifier:   6E:A3:AB:65:CE:8A:57:0C:0D:5D:C8:09:F5:AA:8A:8D:BE:96:D1:F1
Authority key identifier: A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27
Certificate issuer:       /CN=A91BD939/serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
Manifest number:          0E
Signing time:             Sun 19 Oct 2025 11:35:37 +0000
Manifest this update:     Sun 19 Oct 2025 11:35:36 +0000
Manifest next update:     Sun 26 Oct 2025 11:35:36 +0000
Files and hashes:         1: qEiFS7_Ou01JgBuyrj2EQIscPSc.crl (hash: FaL1FJJmVR0h2DhZZ/wdDW0o83/e5x4GjKOIocr14pA=)
                          2: ABD937089D6511F0A6A3E74BC4F9AE02.roa (hash: Jkbb7HkAq8iDWnzG+rvThhFx1fDkJFLk00mNMZ+k2pU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl
                          rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD939, serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
        Validity
            Not Before: Oct 19 11:35:36 2025 GMT
            Not After : Oct 26 11:35:36 2025 GMT
        Subject: CN=68f4cd08-8384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:7d:09:2a:c9:ed:f1:48:54:68:52:d4:60:
                    1d:fa:c9:06:a5:51:6e:26:08:77:1b:05:f2:23:8f:
                    6a:dd:83:57:49:94:41:8d:05:05:30:3e:9b:20:dc:
                    01:dc:d0:30:c1:0d:f9:19:13:e1:08:46:95:7b:db:
                    08:1c:d6:ed:24:52:80:89:f9:81:9f:b6:2c:4a:e0:
                    51:89:ca:34:68:52:86:0a:20:0e:60:11:db:bb:d9:
                    0a:fa:f3:42:e4:fa:5c:21:45:26:bb:55:b1:af:a5:
                    15:e7:24:41:20:f8:bf:82:43:03:e5:fe:fc:05:f8:
                    79:00:64:58:3a:2e:26:54:55:df:09:9c:c7:66:00:
                    e3:df:79:da:88:c5:eb:21:ba:38:d9:85:84:78:2e:
                    0e:b6:10:b4:af:f9:c7:06:31:53:77:e7:01:88:d1:
                    dd:4e:3f:f2:bf:88:cd:06:f6:76:be:e3:4e:f9:03:
                    80:34:d4:68:3f:30:97:77:7f:63:df:ef:3d:05:02:
                    08:33:22:c4:ed:53:02:49:e1:43:d1:f7:e0:68:06:
                    b4:d5:92:e3:c4:24:7a:65:3a:5a:44:6b:7f:99:18:
                    ec:94:37:a8:bb:2b:de:42:e2:54:14:2d:7c:75:cb:
                    56:30:81:56:c2:ab:a3:73:85:e3:15:47:27:7c:b6:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A3:AB:65:CE:8A:57:0C:0D:5D:C8:09:F5:AA:8A:8D:BE:96:D1:F1
            X509v3 Authority Key Identifier:
                keyid:A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:03:de:68:c5:59:f2:a6:4f:7b:0e:06:d7:b7:6e:d8:02:8a:
         a9:d5:27:d7:9f:78:be:e1:39:9f:a7:c1:47:cd:c8:1f:e8:00:
         1d:10:db:6d:55:a3:35:da:96:2d:41:49:28:18:9e:4f:7c:24:
         09:ef:b3:47:0c:ca:f5:e0:8c:e7:e8:c1:74:b4:38:20:db:72:
         75:f9:fb:a1:d7:5b:e9:54:35:24:19:a9:cd:6f:9d:15:9b:4c:
         22:cb:e5:6e:3f:1b:fb:e2:42:ff:ea:75:55:c3:53:aa:f2:3b:
         96:81:e1:b3:74:56:88:1f:cd:8d:8a:91:86:88:aa:85:73:54:
         30:b5:16:12:d5:8e:3b:54:50:50:8f:9f:05:f3:32:75:6a:3b:
         99:e9:14:b1:8f:ad:94:4d:50:80:52:5a:40:2e:5a:93:92:77:
         0f:e2:84:43:6d:42:2e:e9:68:76:02:80:4d:82:b9:3c:95:2a:
         b8:2e:6d:76:3e:b7:00:da:9b:2d:82:5f:44:20:e3:ac:db:47:
         0d:84:cc:3c:84:2a:19:c1:4f:89:e7:06:ea:d6:30:ff:bd:c0:
         0c:26:07:1d:c2:05:8a:0e:da:70:87:8e:3a:22:de:16:18:9f:
         3a:64:ae:f0:fe:79:96:51:38:f8:ca:50:96:6b:f5:82:6f:93:
         2c:44:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:44 2025 by rpki-client