Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File:                     Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier:          bnXPBf2HGTbpAiFwEBRvt4nmoHs+RxiJrXGlufAjyJA=
Subject key identifier:   61:A4:FA:34:BE:BA:28:7B:73:30:E9:8F:82:37:60:C1:A1:A2:33:74
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       0640
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number:          0626
Signing time:             Sun 19 Oct 2025 00:26:15 +0000
Manifest this update:     Sun 19 Oct 2025 00:26:15 +0000
Manifest next update:     Sun 26 Oct 2025 00:26:15 +0000
Files and hashes:         1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: 7rCdXxs4mtAD/lDiiSJW1oF6Zqfuf6MAScAEpxq61eE=)
                          2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: FrN9o1lFg/xEbU5z0+woTSKpRYhEXE4ng2cT+urUy+w=)
                          3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: p2SDVbwBZwxr3yJ4yGh7aCxA4CeficP3aVklyI/yKDc=)
                          4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: LIJfkhB+FEnFSom6qGXtkQF2GYNSzLyM4CrNqHpDKAI=)
                          5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: WL1wjvavlZNBJVifGm25dsfKzlKEpfNQuM2fEKaPYkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: Oct 19 00:26:15 2025 GMT
            Not After : Oct 26 00:26:15 2025 GMT
        Subject: CN=68f43027-ff96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:22:bb:49:5f:0e:5f:78:51:5c:38:87:f7:
                    3d:d7:09:72:90:62:8f:06:d0:ea:d3:2f:97:36:e0:
                    2d:5d:ee:d4:1d:eb:23:3b:16:fe:b2:b8:c5:7e:7a:
                    80:8c:7b:30:61:7c:9a:ea:3e:28:43:b7:c8:bd:0e:
                    fc:6d:bf:2f:91:b2:df:7d:54:24:14:c4:20:0b:e8:
                    a2:20:21:e2:1a:37:fa:86:2b:d3:b7:4c:14:2c:46:
                    32:ef:e3:28:1d:8d:fb:a5:b2:47:5a:7d:ec:ac:4b:
                    6d:40:8e:e1:39:9d:94:37:04:be:55:30:f9:84:57:
                    4a:5e:e8:1c:7c:e7:e4:f0:59:51:e4:41:d7:1f:c4:
                    ca:61:9f:30:74:96:9b:19:26:0f:42:d9:c5:17:f1:
                    b7:d0:0f:8a:3a:97:08:ea:ce:30:ac:d5:d7:5a:09:
                    b0:44:9e:d9:f7:d8:36:25:98:1b:5b:b0:7f:a2:cb:
                    bc:56:ae:e2:0e:51:dc:db:8f:55:92:a4:c6:d2:21:
                    26:cb:59:69:3a:70:24:76:00:1d:0f:7a:b0:8d:0a:
                    3c:8c:84:ce:08:79:81:31:35:66:1e:e1:5a:74:80:
                    67:9b:dc:39:bb:ff:50:01:ac:20:38:f3:e8:0c:f1:
                    7d:5a:64:fa:e1:e2:a0:61:07:74:ac:1e:18:3d:06:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A4:FA:34:BE:BA:28:7B:73:30:E9:8F:82:37:60:C1:A1:A2:33:74
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8f:e9:ee:93:64:a5:5d:be:a5:0d:e5:78:96:37:89:30:c6:
         41:87:50:74:08:67:04:ee:a3:3b:b1:f3:3a:4a:2f:e2:8a:6a:
         b1:90:cb:81:71:aa:85:e1:59:fd:65:3f:71:8f:41:2c:a2:a0:
         de:f5:c3:9b:9e:a9:30:c6:e5:65:4c:c5:ba:1b:18:73:fb:6f:
         06:6a:d2:b1:7b:e2:29:37:55:ec:bf:03:39:8a:99:a6:35:2a:
         89:6d:bd:47:b2:73:2a:76:a3:f4:17:2c:fa:bb:1b:bf:d2:dc:
         6d:58:ce:87:c2:01:20:52:78:47:f9:0f:a5:9d:1b:dc:44:e4:
         05:35:a4:d0:f2:3b:e3:09:ac:2b:35:61:3e:53:75:f9:20:42:
         e1:6c:fe:c0:a9:a3:82:10:b3:10:cf:6e:56:fc:f1:91:25:97:
         7d:89:8c:b3:59:dd:28:1e:7d:80:6e:80:af:93:5c:8b:62:58:
         b1:ed:db:db:da:4e:cb:52:33:06:df:52:b8:7f:e8:2f:b4:85:
         9c:4f:49:69:c8:b3:10:9d:df:79:cb:72:1c:b9:ae:2b:73:5d:
         d6:43:5a:85:09:01:a4:25:9e:46:38:99:8d:96:67:40:0b:a6:
         48:93:79:1c:9d:b1:ee:98:b1:bf:e2:56:93:4f:d7:70:a9:bd:
         83:b4:21:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:36:14 2025 by rpki-client