Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File:                     qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier:          4lFTtD3Pdn58qL+SiGBzxi3E1gO39Q1be04WCFWrKyc=
Subject key identifier:   3F:88:D6:55:C8:10:8E:25:8D:4C:4F:99:8D:92:46:48:18:2D:5A:D4
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer:       /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number:          0178
Signing time:             Sun 19 Oct 2025 06:26:27 +0000
Manifest this update:     Sun 19 Oct 2025 06:26:27 +0000
Manifest next update:     Sun 26 Oct 2025 06:26:27 +0000
Files and hashes:         1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: 9xlYv7a9alraJzNT5jKoQTDlYvRAhANE1RxNiFZB6tM=)
                          2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: 182Ac4fyaiVrniCYLGV61RP5qpWrfJewUwg3lX5zumg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
                          rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
        Validity
            Not Before: Oct 19 06:26:27 2025 GMT
            Not After : Oct 26 06:26:27 2025 GMT
        Subject: CN=68f48493-a279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:0f:bb:d4:5d:a0:6e:14:6f:0f:f8:4e:13:
                    5c:11:b0:82:0d:a9:7c:d2:49:5e:80:12:c1:c3:da:
                    ab:15:3e:38:e7:ae:42:b6:c6:82:09:c4:25:37:ba:
                    5c:a2:0f:ae:92:dc:fa:be:91:f9:42:ed:05:e9:ac:
                    80:c1:cd:82:9f:99:84:12:25:69:fe:c4:36:ab:f3:
                    b5:9b:3e:23:c7:b9:fd:b9:c7:9b:e8:fd:db:2e:1d:
                    d6:45:2f:e2:ab:e6:8b:d6:fb:c1:c8:2a:80:43:06:
                    c0:e9:18:98:9e:79:0f:5b:64:25:cc:75:61:db:0c:
                    47:5d:1a:40:7e:b0:8b:5a:e2:18:68:33:23:8f:e7:
                    80:98:ca:b6:ab:92:8d:70:3f:40:3d:b8:69:c9:28:
                    db:3b:2d:32:43:3a:da:a1:76:ed:3c:4b:9b:cc:35:
                    fc:bb:2d:bc:08:7c:af:2d:b0:20:ca:d1:e0:f8:75:
                    5d:fe:5c:6f:08:77:b0:bf:99:24:3d:4a:f0:16:f4:
                    dd:5b:80:e8:91:a8:1a:d7:b7:1e:79:a8:94:e9:34:
                    d2:d7:c8:71:74:90:0b:a7:e7:b5:72:73:58:cd:d9:
                    6b:45:80:12:6e:b3:fe:a0:74:d6:be:fc:ba:15:e5:
                    73:5d:41:e6:76:1d:e1:00:62:f2:5b:ed:fe:14:39:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:88:D6:55:C8:10:8E:25:8D:4C:4F:99:8D:92:46:48:18:2D:5A:D4
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1b:38:44:38:45:9a:ce:b6:b3:ba:4b:99:66:02:0b:1e:a4:
         9b:b9:ad:7f:13:af:ee:bd:f6:d4:19:f4:c0:b0:f0:02:ac:81:
         ab:e2:e2:e2:83:2a:26:fc:10:29:ca:16:c3:51:a4:43:4d:57:
         7f:c7:ab:14:25:e0:52:63:d2:46:c4:26:36:b7:c9:45:73:9f:
         b0:a3:18:39:c4:33:b1:9d:b3:ac:e2:23:a0:cf:3b:be:78:64:
         57:45:ad:11:e5:fb:85:a8:81:04:99:29:c1:5c:34:c5:6b:25:
         bf:8e:55:47:c6:51:c7:34:80:25:94:a2:be:5a:6d:53:bb:21:
         d7:a5:82:32:06:97:ea:c9:f6:c1:ce:6a:ad:bf:5c:b5:98:36:
         75:8f:fa:cf:fc:f6:dd:b1:0f:52:fa:e7:10:a8:d8:ab:c5:3a:
         60:40:02:b2:6d:9f:01:27:cd:cb:8e:d3:af:a2:c0:78:f8:58:
         65:00:e0:d8:d7:c2:38:9a:ce:fb:48:db:0c:4b:7e:af:e0:2a:
         52:b6:36:65:0d:9d:fa:5a:0c:c2:dc:41:aa:d0:8e:82:23:b1:
         05:03:2b:d9:69:eb:be:09:b2:89:f5:98:5c:37:76:2f:1f:17:
         0a:a5:ba:72:8c:61:ff:e3:4d:ff:84:e7:1e:d7:86:23:ec:81:
         05:0e:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:50 2025 by rpki-client