Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File:                     QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier:          x7+DzXKkvGvoJti2OlB2QXczF8K2ijmjwZ582E3dWOs=
Subject key identifier:   2C:6B:8D:58:D3:5D:1C:AF:90:65:9F:6C:33:84:F8:4E:75:0C:8F:00
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer:       /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number:          0749
Signing time:             Sat 18 Oct 2025 23:06:47 +0000
Manifest this update:     Sat 18 Oct 2025 23:06:46 +0000
Manifest next update:     Sat 25 Oct 2025 23:06:46 +0000
Files and hashes:         1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: O1yT3uK5CdgCyK2WdSGLopPLoiEsD42JRCmgrfxy8iw=)
                          2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: mIOY2vhOsc+nNqge7lnkHLB5M4DsgX2WsmX/mvk1lyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
        Validity
            Not Before: Oct 18 23:06:46 2025 GMT
            Not After : Oct 25 23:06:46 2025 GMT
        Subject: CN=68f41d86-a2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:95:4e:a5:89:9a:7d:ec:ca:c7:b1:a9:fc:
                    19:39:0c:7c:c2:35:5a:fe:42:a8:b8:39:14:dd:79:
                    fa:0c:0f:90:5f:79:6c:6b:45:01:da:ca:00:88:1d:
                    f6:e7:31:7e:dd:d0:c3:e0:e3:4b:25:92:9b:d9:ee:
                    8a:d2:79:65:28:da:08:db:a4:59:5c:13:cd:0d:ee:
                    a5:7c:b2:31:2c:f4:e4:ac:54:f2:ee:15:90:3e:8e:
                    d9:71:f9:cd:f8:8f:e8:9b:c5:e5:74:bf:dc:d5:20:
                    94:ac:c0:c4:73:78:29:6e:e6:71:0c:f4:16:0c:0c:
                    c0:69:d9:18:fc:a6:45:83:71:27:4e:f6:f3:f5:57:
                    8f:6f:d1:1a:98:62:20:f8:af:75:55:45:aa:6d:53:
                    7a:c7:d8:19:0c:99:9d:00:fc:ef:bc:8c:4f:e6:51:
                    7c:90:ed:9d:21:46:c8:b0:d4:96:97:f9:2e:06:dc:
                    ba:fd:5e:0d:e6:dd:e3:a2:20:95:cf:a6:6c:57:f3:
                    88:8e:24:50:cc:88:60:3b:3e:fe:06:d6:e4:a6:02:
                    0e:f0:a7:05:87:76:fc:25:78:df:d0:3b:c8:f0:5d:
                    36:2f:f3:79:3a:3e:1b:7e:c1:ba:f4:d1:21:dd:f9:
                    a5:83:51:ce:c4:1b:17:b1:60:db:29:11:36:9f:17:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6B:8D:58:D3:5D:1C:AF:90:65:9F:6C:33:84:F8:4E:75:0C:8F:00
            X509v3 Authority Key Identifier:
                keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d4:4e:ce:a9:e9:6b:5a:92:7f:1f:bc:5b:e1:69:46:e9:38:
         64:f4:bb:fd:31:39:13:ef:26:e5:5d:83:15:63:d8:0a:3d:e9:
         92:47:c2:d4:c7:65:ae:4a:04:05:aa:36:74:03:9f:a7:41:0e:
         15:b8:04:3c:41:dd:6e:97:c1:12:30:ed:9f:7d:86:70:32:26:
         a7:2a:ab:11:22:38:e0:aa:4e:38:76:51:a2:f3:46:b4:ca:32:
         7e:78:0a:52:bf:a7:0c:4d:18:58:6e:18:51:58:cf:bc:c9:e7:
         27:e5:ed:5e:07:69:a0:af:ba:4b:dc:a1:13:87:e0:b3:67:ec:
         42:85:b6:f6:fc:1b:9f:c1:6e:c3:c5:3b:11:92:e1:d7:ff:67:
         f2:c1:13:69:45:c1:bc:1f:71:0a:48:e8:56:77:18:36:56:e2:
         7b:34:4c:03:d8:1b:fb:c0:28:b8:44:ad:f9:9c:7e:b4:94:9f:
         31:35:12:20:60:f9:10:16:f4:03:27:20:c4:c5:70:06:f7:4e:
         d0:5e:25:7d:7f:8b:ac:54:90:cf:67:7d:49:a3:ad:76:74:24:
         5e:ae:31:d4:63:7e:2d:1a:7f:c8:b0:9d:05:01:e7:8a:b4:d2:
         ad:fd:78:bd:67:d3:b2:2a:ed:b1:20:db:4b:93:3d:75:98:e1:
         00:1e:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:19 2025 by rpki-client