Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          FuoEx06Wwl/17XnzAZkT7f8h22uocyZEXtMKyBG+ji4=
Subject key identifier:   1F:B5:36:66:8E:70:4E:3F:D5:DC:CE:0F:7E:46:11:F6:EC:B7:5C:2E
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       0553
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0CEA
Signing time:             Sat 18 Oct 2025 22:40:29 +0000
Manifest this update:     Sat 18 Oct 2025 22:40:29 +0000
Manifest next update:     Sat 25 Oct 2025 22:40:29 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: 9dAnMX6HsfItIOBIP8CPiZJAkAkteqW1pCqETur1la0=)
                          2: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: OzR5m76bC5p8Qn4iW9ZQqG9vOQByfBzOqdZe3AXXfw4=)
                          3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: DQKnkPiyi5yFhInT8cazQ0WWqMZZ/NRSyMH4kCN4yVg=)
                          4: A291634816B711ECBD752D47C4F9AE02.roa (hash: V08dtQEG7kMtP+yJo1aJfEkwIclQOyk17r+rjbxf9Vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Oct 18 22:40:29 2025 GMT
            Not After : Oct 25 22:40:29 2025 GMT
        Subject: CN=68f4175d-ccaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:47:94:07:d3:13:2b:b6:bf:39:7b:27:c6:
                    f5:f9:78:ee:94:37:24:67:4d:c5:a3:e4:94:09:c9:
                    03:5c:ae:5b:a3:15:f1:e7:39:9d:71:5f:90:95:b2:
                    01:42:1e:f4:cb:d2:32:74:7d:90:b0:12:04:a6:c9:
                    db:fa:49:d5:5f:d9:ad:a3:38:de:0f:f8:54:53:c6:
                    60:e9:6a:3f:a9:79:94:2e:05:90:3d:6d:87:0d:14:
                    24:c5:31:c0:ac:f2:b3:9e:67:35:ff:ce:04:40:68:
                    a6:ba:c0:99:2b:1e:cf:cd:6f:ba:75:1b:2d:ff:11:
                    d5:af:a7:65:c6:19:fd:0b:dc:7d:39:6e:55:bc:5a:
                    8b:23:3b:f9:74:34:0b:b8:ac:23:ea:89:fb:27:c3:
                    5d:e8:87:66:0b:74:81:e8:19:ea:af:b2:ae:2a:74:
                    2e:0f:8b:6d:e8:ed:61:06:c4:6c:30:c1:28:cf:4b:
                    12:1a:15:bb:c8:0f:37:22:5e:1b:c9:da:78:ce:b3:
                    3b:65:c6:9b:5d:eb:f2:b4:52:0b:74:d2:a8:5c:2c:
                    a5:ac:7b:3b:44:19:ab:ea:6c:b7:a5:f7:19:f0:95:
                    3d:d5:d6:8d:9d:0e:28:52:d3:45:80:58:e6:80:57:
                    60:ff:50:0a:79:7d:64:5d:18:b9:af:e4:fc:9d:95:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B5:36:66:8E:70:4E:3F:D5:DC:CE:0F:7E:46:11:F6:EC:B7:5C:2E
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:18:17:d7:16:71:ac:c5:0c:d4:f7:af:47:3d:53:44:d6:
         59:9a:fe:fa:72:f5:db:f3:3d:5d:38:a1:66:1e:93:55:e3:4d:
         60:c1:4c:08:59:f1:5d:8f:d6:aa:95:6a:d9:ee:7f:d4:3f:90:
         9f:d5:73:95:80:2f:b0:0a:3d:04:e6:df:17:40:d5:e0:40:af:
         f9:c2:8a:ee:39:20:8b:a1:a1:33:30:f4:4e:65:18:cb:e4:e9:
         87:c1:74:a1:2f:88:52:78:38:cb:be:17:c9:9f:51:f2:7c:c6:
         71:d1:5e:95:77:d1:f8:72:a8:3b:ea:fd:1f:d5:50:6b:5a:36:
         6e:f3:5e:e0:31:68:91:3d:c2:b0:27:59:7d:aa:a0:23:5c:7f:
         9f:5d:c5:f6:8a:33:66:af:24:e0:bd:ba:da:2f:f3:89:c8:9d:
         17:5a:46:ea:25:fc:b8:12:4d:47:46:32:ea:41:66:f0:35:e9:
         80:a1:e2:9a:55:78:59:e4:97:b9:a9:b4:00:7a:d8:6a:94:4d:
         69:4b:72:4d:47:34:85:e3:ba:7f:4f:ef:c6:93:8a:3b:eb:c6:
         c3:16:4f:e8:5d:f4:0f:bf:e1:33:9a:35:40:7b:8f:c8:88:cc:
         d8:40:98:19:7d:7f:de:8a:5a:10:cd:d5:ca:7c:3d:5c:3e:67:
         ce:39:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:33 2025 by rpki-client