Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
File:                     Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json)
Hash identifier:          FkfkteVTCKufXF3eRNz5Kn877jyuOmRt0lHAuZv4FtA=
Subject key identifier:   16:40:FE:8C:2B:0C:8C:BC:60:0D:86:4D:20:E1:A4:F2:A0:AA:9D:F4
Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
Certificate issuer:       /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
Manifest number:          019E
Signing time:             Sun 19 Oct 2025 05:53:17 +0000
Manifest this update:     Sun 19 Oct 2025 05:53:17 +0000
Manifest next update:     Sun 26 Oct 2025 05:53:17 +0000
Files and hashes:         1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: Sc4SHIuG3XhCIHrP/Y0nwNq6NRNKfjqjxr1qNsyteRM=)
                          2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: e+rpsrJfE3yU94kVnBShl6jDwyCOKp3rugpFTdwj4Dw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
                          rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
        Validity
            Not Before: Oct 19 05:53:17 2025 GMT
            Not After : Oct 26 05:53:17 2025 GMT
        Subject: CN=68f47ccd-ae69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:64:2f:84:66:86:b7:5f:cc:51:bb:af:d7:a8:
                    17:c0:f3:59:21:d4:18:43:5a:15:c7:96:87:41:97:
                    f7:02:26:3c:37:4c:fb:be:24:09:fe:7c:e1:59:1c:
                    a7:8a:5f:d0:f5:d8:b0:c5:5b:68:a9:03:51:fa:d8:
                    0d:59:d9:f3:e0:f0:28:65:28:a1:d3:da:34:21:0e:
                    e5:3d:54:6b:6e:94:f8:dc:8c:49:79:c9:48:9b:f1:
                    d5:12:52:ce:70:a9:01:e1:09:06:f4:ba:a1:f3:59:
                    8a:36:78:ff:c6:a2:75:de:de:8d:9e:df:ec:4c:9d:
                    20:d1:af:04:8e:23:62:08:04:87:98:88:de:27:2d:
                    88:7b:ef:d3:ff:22:60:ab:90:2a:16:00:cf:b3:d1:
                    d0:79:6b:e4:e3:35:29:0f:13:1a:76:a3:60:28:8e:
                    3a:54:c0:c1:85:9a:c7:96:16:7a:79:53:cd:53:f7:
                    43:40:58:1d:d4:dd:cb:ea:b3:80:7f:d3:bd:db:fb:
                    3e:70:db:7a:11:79:85:ca:f5:64:15:2b:e5:53:35:
                    b4:fb:99:1e:90:ce:b5:44:b8:93:06:37:00:49:fb:
                    f1:76:2e:3f:db:f3:32:87:57:58:bb:cf:d0:0c:7e:
                    c9:fc:8d:f8:44:53:62:1e:53:ce:ea:90:e1:9a:1f:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:40:FE:8C:2B:0C:8C:BC:60:0D:86:4D:20:E1:A4:F2:A0:AA:9D:F4
            X509v3 Authority Key Identifier:
                keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:42:0e:6c:ae:ab:a5:15:51:01:af:ee:94:cd:f8:d1:d6:9a:
         64:b2:24:b2:65:6f:b0:fb:ff:c0:cd:7e:cd:9a:0d:c5:48:82:
         06:77:6b:15:a1:68:72:62:92:1d:41:02:d4:21:ce:8e:78:8f:
         a6:ec:76:33:84:67:53:5d:77:fa:a3:4e:01:36:56:37:7b:b6:
         e7:4b:ad:47:9b:ff:80:38:5b:2f:af:27:ba:d5:ad:38:a1:f8:
         cc:5a:b3:c2:c0:5d:45:c0:bf:5e:6f:7b:80:06:a2:fc:a4:d7:
         9d:99:6f:c5:e1:42:f0:3e:a8:5d:81:38:84:a1:d7:6b:c9:e6:
         8c:96:03:3b:e4:f4:fa:74:6f:9d:d0:fa:4d:72:bc:3b:fe:5d:
         8d:51:4b:08:91:cd:38:51:ce:b6:a4:67:56:8f:cb:c5:ec:c3:
         f5:0e:e1:1a:1c:d0:62:2f:fa:2c:8e:4b:f6:b4:e8:ac:03:93:
         02:7b:d9:b8:03:f6:12:d4:04:f0:fa:fa:87:76:c3:c7:71:33:
         2b:ff:04:32:19:66:ef:f2:b0:6f:eb:f6:7c:c4:f1:9d:6a:0c:
         38:5c:43:91:23:b5:3f:0e:4a:d8:82:1f:3a:d1:af:9d:f1:ed:
         ca:9b:8c:49:08:5f:3a:ef:e4:a6:ca:ed:db:b6:52:8c:bb:c4:
         ed:1f:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:49:41 2025 by rpki-client