Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
File:                     qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json)
Hash identifier:          Lz7g4Uk710iYqwapk0k/sJKb8mqlVL40l4CCChn5yus=
Subject key identifier:   B5:D2:4D:40:83:64:C8:EE:82:6B:5D:60:A7:EE:C1:48:DE:F9:80:DF
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Certificate issuer:       /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial:       353B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
Manifest number:          34FC
Signing time:             Sat 18 Oct 2025 14:26:49 +0000
Manifest this update:     Sat 18 Oct 2025 14:26:48 +0000
Manifest next update:     Sat 25 Oct 2025 14:26:48 +0000
Files and hashes:         1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: aPP23x8TXbQSryHNT9CQvJpN/KtP1TSgYGAm0KnP8Uw=)
                          2: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: 9JsagnY9rpoPlsVMt4iVRdULuA/96P9hw1zuWPkbXY4=)
                          3: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: yyuVGHEHdjgOJV3OL5d2WHtm2S0Tu6t1QPxDqH/At3U=)
                          4: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 1QH0WR9EAexZONoxgrkCIP2BPHtzOEA7LLO//ildFDE=)
                          5: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: snUS5Nz9OXbIohiNncX/rLVlHKKNwvL/WKysUwbCRFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
                          rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13627 (0x353b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
        Validity
            Not Before: Oct 18 14:26:48 2025 GMT
            Not After : Oct 25 14:26:48 2025 GMT
        Subject: CN=68f3a3a8-2b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:9e:6c:d0:14:65:d5:36:59:a1:ac:af:72:
                    22:2a:e2:0e:0a:e6:98:03:c2:12:07:fa:34:d3:1f:
                    08:ba:da:0e:86:b1:90:83:08:b9:14:50:db:e6:a2:
                    d2:b9:ea:27:01:58:3d:4d:bc:0d:3a:73:cc:f8:25:
                    19:04:76:d3:d4:a1:91:fc:54:dd:32:49:ff:05:19:
                    8c:c9:e6:84:a3:ee:58:94:e2:04:ed:ec:bd:e4:35:
                    09:72:ea:d4:06:36:c2:30:dc:c6:bd:e3:08:78:63:
                    9b:02:0e:2d:7c:c0:31:ec:76:16:a0:2c:f0:9f:b1:
                    87:1f:17:30:65:e4:4d:61:59:ee:46:61:06:29:ee:
                    19:6b:44:15:6a:43:55:36:84:67:71:fe:fe:21:46:
                    c7:8e:e9:5b:38:a3:4c:7c:31:ea:3e:88:18:00:30:
                    06:ec:6d:5b:11:52:9a:13:cb:10:d9:5e:c9:4c:f2:
                    67:c8:33:a7:94:b9:27:21:72:49:88:97:1b:46:83:
                    7c:41:90:4f:d9:d3:ec:41:2b:58:fc:f2:72:96:f3:
                    b4:f0:5c:fa:8a:15:5f:51:35:63:48:be:cf:81:bb:
                    95:9f:2e:e9:22:23:fc:0f:e8:01:16:de:43:64:56:
                    63:2c:42:e9:75:65:fc:5c:f4:fc:19:12:1b:27:52:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D2:4D:40:83:64:C8:EE:82:6B:5D:60:A7:EE:C1:48:DE:F9:80:DF
            X509v3 Authority Key Identifier:
                keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:f1:21:87:7b:b4:21:ae:43:80:a9:2b:4e:97:2b:b9:09:
         d7:a4:ef:56:5b:52:fc:a3:62:09:ca:94:34:52:65:7d:18:b7:
         7a:7a:9b:8a:4f:ec:87:46:ca:14:48:c3:ab:2e:1d:b1:bb:4d:
         67:54:e3:72:7c:b3:fa:7b:59:80:cc:0d:f5:61:4b:34:8f:58:
         9d:d0:76:27:a0:fb:bd:ba:70:09:e6:7f:6d:d7:50:f8:70:f8:
         dd:ce:01:16:48:0d:cc:1d:1e:2c:69:3a:42:9a:b6:10:1d:06:
         a1:f8:d9:c5:88:eb:83:a9:ea:0f:5a:58:31:af:ac:0b:18:ac:
         b3:da:aa:d1:ff:87:11:9f:af:53:d0:5a:d0:fd:79:c8:bc:be:
         f7:33:d9:4d:d8:e7:cd:22:59:73:e4:9b:ed:7b:95:9a:f1:37:
         f0:e6:c0:15:cc:33:76:3f:43:20:0d:5f:ae:5b:a1:4b:78:c8:
         fe:1d:49:4c:a5:70:bd:ee:76:10:24:ca:20:0a:3f:1c:f0:89:
         2d:7b:6d:9b:49:a3:6d:36:df:fb:0e:cf:f6:82:fb:a8:0c:c2:
         10:83:f7:d7:1c:f6:21:16:7f:83:3d:48:4f:b6:d1:78:cc:ae:
         f3:66:de:11:56:e7:67:8a:2f:4b:40:7c:62:26:62:55:62:9c:
         08:6b:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:07 2025 by rpki-client