Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
File:                     qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json)
Hash identifier:          L30WCPxmyhIlbD+iWYZLBeEv/kbdJmbJsI6tG+jriL8=
Subject key identifier:   C2:48:52:FE:38:5C:7A:09:BB:43:67:68:60:51:BA:1E:30:3F:C7:D5
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Certificate issuer:       /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial:       3528
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
Manifest number:          3500
Signing time:             Mon 20 Oct 2025 04:51:35 +0000
Manifest this update:     Mon 20 Oct 2025 04:51:34 +0000
Manifest next update:     Mon 27 Oct 2025 04:51:34 +0000
Files and hashes:         1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: 44++JLCKuKVQp/IhCzMtE1uL4LJRg+mBaLEI4uyyDPM=)
                          2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: IJhdmy/yaxT+3c7CLBVZdDHqC15tF8wOYJzJ42dHOw4=)
                          3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: dXPESe0AS5zU2YANDMu05Iuv4X+774tiDNq9FoG/6Go=)
                          4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: Jj1NVOgg11V9rBHXb/ngLI6yeEIfUQhi8bFPhl/4/hg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
                          rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 04:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13608 (0x3528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
        Validity
            Not Before: Oct 20 04:51:34 2025 GMT
            Not After : Oct 27 04:51:34 2025 GMT
        Subject: CN=68f5bfd7-d07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:ce:4d:07:4f:dc:6d:8c:bc:b9:0a:e3:e3:
                    ef:33:87:08:12:dc:7c:b1:8d:13:5b:0d:40:2c:51:
                    ed:3f:45:03:0c:3e:d4:e3:71:3b:2e:bc:4b:27:fa:
                    d4:43:40:b2:11:a5:c2:38:15:ea:f8:0a:18:b5:55:
                    2e:a5:bd:2d:80:91:2d:b6:9e:0e:34:d2:09:63:25:
                    49:9a:2b:db:7b:89:4c:3b:41:86:5c:e0:1f:4a:ad:
                    07:3e:f2:0b:46:22:98:3a:8a:ef:1a:b5:66:ad:d5:
                    9b:7b:8b:98:1c:61:6d:4f:84:d9:14:7c:2a:d2:47:
                    a5:91:c7:47:5f:ea:0a:f3:8c:c6:49:d7:a5:d5:aa:
                    1f:58:6d:21:3e:e5:bf:33:64:0d:df:ea:5c:80:09:
                    d8:cc:25:9a:fa:e0:d2:7a:8c:2c:bf:04:54:bc:38:
                    0b:20:d5:72:1b:02:e2:3a:4c:80:87:4f:11:25:b8:
                    01:9e:dd:03:00:31:c8:44:80:69:b0:e6:5d:e7:42:
                    ae:77:6f:8c:e1:79:c7:a3:27:87:46:ed:b1:ce:df:
                    a1:45:7f:9c:c5:b7:96:6e:10:c3:64:78:0b:a8:4a:
                    a2:e0:6b:0d:79:04:2d:d4:a4:07:08:d1:a1:df:e5:
                    a3:a8:75:8b:8b:ba:8c:e6:44:12:2b:53:8c:20:84:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:48:52:FE:38:5C:7A:09:BB:43:67:68:60:51:BA:1E:30:3F:C7:D5
            X509v3 Authority Key Identifier:
                keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1f:bc:e0:80:32:10:e2:a4:65:b6:4f:9a:cf:28:f0:79:86:
         d3:c9:5c:2b:01:68:80:23:20:5b:db:85:57:6b:5f:31:b6:ff:
         eb:75:b9:69:c3:1a:b9:39:44:4b:a7:a3:2b:4a:b9:0d:dc:57:
         f8:1c:5f:59:9c:a4:dd:a4:47:d4:bb:a8:51:64:4d:f5:8b:6f:
         26:fd:90:85:64:10:43:06:01:0b:40:1d:57:78:43:13:eb:8f:
         2c:f8:c3:ac:4e:cd:50:ca:25:4f:60:37:4c:2f:8f:b8:36:11:
         d8:36:d1:c9:df:64:4b:c1:8b:59:75:c6:0c:b6:a4:fe:6c:1a:
         b9:30:16:51:68:31:9f:a9:98:33:8b:4b:8a:94:2c:23:b5:f4:
         9f:d4:05:9f:8b:0e:f3:b5:56:ba:88:6f:48:8a:0c:b0:b1:a7:
         6d:38:79:c8:2f:ed:06:1e:2d:9c:37:da:87:4a:32:cb:e6:08:
         eb:07:3c:99:d7:2a:ec:1c:5e:3c:a3:ed:fc:d5:48:97:da:db:
         19:a7:6f:60:61:a5:ee:46:7f:13:d7:ea:0f:c8:5f:a6:45:a8:
         ad:8f:18:42:ed:fb:74:13:73:06:36:09:31:67:62:67:fa:16:
         dc:ec:58:17:cd:b2:df:9b:e4:29:d0:b6:69:e6:c4:0c:07:fe:
         6f:15:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:32 2025 by rpki-client