Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
File:                     p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json)
Hash identifier:          gbXXAHnARsZ3Nm4WP2qbQdZ7UcwA7Ro6nXvG9r76WQU=
Subject key identifier:   FD:CD:0B:E5:9A:AB:7B:32:29:67:01:6D:FC:51:DC:55:8A:40:8F:15
Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
Certificate issuer:       /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Certificate serial:       1E15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
Manifest number:          1E0B
Signing time:             Sat 18 Oct 2025 16:23:40 +0000
Manifest this update:     Sat 18 Oct 2025 16:23:40 +0000
Manifest next update:     Sat 25 Oct 2025 16:23:40 +0000
Files and hashes:         1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: A5T4r5Cj/RU6r1JiA3HOS3+5xJW3fLspUy1Jcveolz0=)
                          2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: OwRMtrtGPYaPPKGjgTatExbq339fV5j/IPlfXafo770=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
                          rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7701 (0x1e15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
        Validity
            Not Before: Oct 18 16:23:40 2025 GMT
            Not After : Oct 25 16:23:40 2025 GMT
        Subject: CN=68f3bf0c-827a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:a8:fa:b8:d8:bf:e9:c4:16:a1:2c:b2:08:
                    c3:03:73:44:44:53:e6:85:5f:72:31:97:ca:8a:8a:
                    fe:ff:ea:e4:70:7c:1c:06:6a:72:02:14:11:3d:c7:
                    09:ed:7b:fd:33:27:21:b7:ef:27:a5:73:e7:ff:09:
                    3d:3c:bf:aa:f5:ed:e3:45:12:4c:31:21:e1:32:70:
                    fd:2d:1c:5e:0a:60:e9:e3:41:be:83:db:f1:c0:24:
                    eb:f7:f3:0f:59:da:c5:83:86:6e:08:bc:a9:50:e0:
                    22:26:f9:f8:a9:fe:52:4e:75:2e:6e:4f:a4:06:cc:
                    0f:e6:cd:f0:b3:46:31:3d:e1:0c:83:aa:ec:59:bc:
                    30:d1:f2:d5:08:f8:47:d9:0c:05:ef:42:67:a1:0b:
                    a0:00:30:ae:2f:88:44:16:47:89:57:f3:bf:be:c9:
                    8b:eb:2e:66:dd:3f:99:76:53:44:98:3a:f4:0f:6a:
                    a9:fd:e8:e1:98:56:fa:c2:07:48:af:33:27:0c:ce:
                    dd:65:d1:f0:67:1d:78:e7:5f:08:c6:74:93:7b:ab:
                    c7:23:1a:d7:e0:73:0c:0f:79:73:03:da:03:c1:b7:
                    b6:17:fa:8c:50:3a:a6:21:ab:3c:86:04:15:12:cb:
                    8e:66:89:e7:26:d5:b1:0b:e6:bc:00:93:d4:ec:fe:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CD:0B:E5:9A:AB:7B:32:29:67:01:6D:FC:51:DC:55:8A:40:8F:15
            X509v3 Authority Key Identifier:
                keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:41:5b:45:f6:f6:8e:09:ed:76:b5:03:9d:6b:44:9b:1b:be:
         d0:9d:4c:68:2e:3a:0c:61:86:0b:d7:82:ed:81:04:9b:af:0f:
         fe:a0:79:18:91:6d:1b:5f:1e:31:cf:96:f5:0d:a9:df:39:13:
         ff:d9:f2:09:54:a2:97:9d:ea:9f:6b:c3:8e:c0:48:e5:76:19:
         3a:d6:b8:3e:9b:66:c0:1d:2e:1e:67:d3:fd:f6:1d:b0:4c:fe:
         d5:0e:ed:5c:c2:69:f2:e9:bd:ec:2b:05:8b:95:4a:e2:31:a0:
         29:29:79:5f:ce:ea:5a:78:e3:ab:4e:b1:62:95:8e:46:20:47:
         20:50:70:32:a0:54:16:fa:f1:73:a3:ef:d3:bc:8c:36:28:f2:
         b1:00:86:35:30:c8:40:3e:f0:76:65:73:6a:63:4b:7b:15:3d:
         f7:be:ec:df:0e:c9:68:fd:03:37:75:94:2a:72:01:c6:c1:ea:
         7d:99:74:56:d3:6e:2e:8e:9d:28:37:35:7c:30:ce:20:75:3d:
         94:0d:b1:48:f9:c9:74:64:c7:22:6e:ce:6f:ab:3a:b9:57:df:
         85:7f:1d:a7:9c:5f:b5:d1:3d:36:d3:d2:ee:ed:37:14:30:6f:
         51:6e:79:81:80:95:23:c8:c8:30:ac:92:5a:d9:20:23:d4:e6:
         c1:18:50:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx
NzQ0RTBCRjEwHhcNMjUxMDE4MTYyMzQwWhcNMjUxMDI1MTYyMzQwWjAYMRYwFAYD
VQQDEw02OGYzYmYwYy04MjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz/yo+rjYv+nEFqEssgjDA3NERFPmhV9yMZfKior+/+rkcHwcBmpyAhQRPccJ
7Xv9Mycht+8npXPn/wk9PL+q9e3jRRJMMSHhMnD9LRxeCmDp40G+g9vxwCTr9/MP
WdrFg4ZuCLypUOAiJvn4qf5STnUubk+kBswP5s3ws0YxPeEMg6rsWbww0fLVCPhH
2QwF70JnoQugADCuL4hEFkeJV/O/vsmL6y5m3T+ZdlNEmDr0D2qp/ejhmFb6wgdI
rzMnDM7dZdHwZx14518IxnSTe6vHIxrX4HMMD3lzA9oDwbe2F/qMUDqmIas8hgQV
EsuOZonnJtWxC+a8AJPU7P5dZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3NC+Wa
q3syKWcBbfxR3FWKQI8VMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1
QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx
dDFzUmVSMVY0NTBYUk9DX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnQVtF9vaOCe12tQOda0SbG77QnUxoLjoMYYYL14LtgQSbrw/+oHkY
kW0bXx4xz5b1DanfORP/2fIJVKKXneqfa8OOwEjldhk61rg+m2bAHS4eZ9P99h2w
TP7VDu1cwmny6b3sKwWLlUriMaApKXlfzupaeOOrTrFilY5GIEcgUHAyoFQW+vFz
o+/TvIw2KPKxAIY1MMhAPvB2ZXNqY0t7FT33vuzfDslo/QM3dZQqcgHGwep9mXRW
024ujp0oNzV8MM4gdT2UDbFI+cl0ZMcibs5vqzq5V9+Ffx2nnF+10T0209Lu7TcU
MG9RbnmBgJUjyMgwrJJa2SAj1ObBGFAB
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:02 2025 by rpki-client