Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
File:                     mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json)
Hash identifier:          8TxGprCol+3IGGiktEVwbjRx8SuwknT9GKL7YNn1B2s=
Subject key identifier:   4A:25:8F:9F:F7:A3:AE:CF:39:0A:80:8B:9C:7A:D2:F1:E9:6B:4C:A0
Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
Certificate issuer:       /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
Manifest number:          38
Signing time:             Sun 19 Oct 2025 11:02:32 +0000
Manifest this update:     Sun 19 Oct 2025 11:02:31 +0000
Manifest next update:     Sun 26 Oct 2025 11:02:31 +0000
Files and hashes:         1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: KAVhwVoRNPz6o6trH2DS5TtsCMmVnXMk5vgsaw08EbI=)
                          2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: lMMp/Z5aJImzHek/MJHR1M6D45Ar+B1jRsvx5k7nHRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
        Validity
            Not Before: Oct 19 11:02:31 2025 GMT
            Not After : Oct 26 11:02:31 2025 GMT
        Subject: CN=68f4c548-971d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:d7:23:57:86:4a:5d:d6:df:bc:d7:72:47:
                    e7:a6:5a:cb:f0:d1:e9:83:3d:74:f0:a7:e5:b6:48:
                    d4:39:35:35:fb:6d:29:fe:2c:23:9f:19:4b:69:38:
                    e8:0a:00:93:e8:32:92:99:a9:11:b3:f6:08:1c:07:
                    1d:45:32:a0:11:d2:f8:16:08:b1:6f:22:af:6a:53:
                    93:4b:00:36:f5:3b:96:4c:45:eb:34:03:ab:a2:45:
                    d0:f1:5b:76:93:50:2a:51:f4:49:4d:d2:6b:43:74:
                    32:da:2b:a6:18:ab:c9:ff:10:0a:22:ff:4e:41:99:
                    ab:0c:e3:6d:57:86:27:15:37:f8:ed:04:19:a4:bb:
                    d8:fa:79:2a:c5:90:81:ef:2a:7c:4d:d7:7f:95:3d:
                    1a:fb:c3:62:24:52:22:aa:00:c6:42:a9:3e:67:17:
                    b8:69:67:ea:dd:5a:96:9a:73:cb:7b:5c:9f:17:7c:
                    57:00:cb:60:90:63:47:09:ae:1a:3b:b8:84:63:53:
                    51:cf:f0:b2:bb:24:03:97:eb:9a:1d:6f:45:98:2d:
                    ff:9a:4b:c1:6e:d2:6b:20:44:15:70:71:3e:d8:f8:
                    74:d1:e9:ed:44:bb:b7:5f:7c:42:58:c5:4b:5e:ef:
                    15:3a:20:8a:8c:5e:d1:6d:07:30:49:0e:dd:e7:02:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:8F:9F:F7:A3:AE:CF:39:0A:80:8B:9C:7A:D2:F1:E9:6B:4C:A0
            X509v3 Authority Key Identifier:
                keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:d8:03:8e:16:20:15:bd:99:35:ba:1e:f5:0d:7a:3f:2c:
         44:d2:5f:3c:3d:98:39:76:7c:79:0f:04:d2:83:23:95:7c:99:
         bb:b6:b3:3a:8f:8f:bf:bd:41:12:8f:55:3a:c9:56:3c:7b:2e:
         ed:85:d7:6f:9e:5d:12:f0:3d:70:90:92:9f:14:c5:3a:6a:e1:
         ca:08:6f:f2:0b:48:96:3f:c1:36:4c:b4:f2:5f:64:df:80:5a:
         3f:c0:7d:46:9d:3f:94:8e:ad:a4:0d:8f:d2:db:66:5f:4c:ec:
         c9:a3:d9:c6:7c:2e:8b:11:17:92:c6:e0:42:a9:de:ae:b8:8e:
         e4:39:1f:37:3c:5a:01:6b:3b:f3:46:9c:92:69:ae:7c:f7:3c:
         1c:89:95:76:bc:e2:be:5c:91:da:04:c1:99:56:15:17:41:3d:
         63:47:8c:79:aa:91:9c:45:10:cb:74:51:23:87:9f:c1:7c:5a:
         79:70:31:c0:8c:e3:bd:77:31:da:81:9a:6b:bb:53:08:80:f1:
         f1:65:65:90:d1:9c:7d:d6:8d:d2:63:26:d2:f6:e4:78:28:54:
         28:4d:ef:10:57:a3:88:82:c0:63:95:2f:fb:6f:d4:48:3c:ea:
         3f:ec:69:9e:ae:a0:e9:35:05:58:33:61:2d:2c:1b:51:65:9a:
         98:a9:5c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:55 2025 by rpki-client