Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
File:                     QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json)
Hash identifier:          q1/vJi5Sjy30Ag7cGeH1gFVKO7569LRgyg/fIygvF38=
Subject key identifier:   92:E0:DE:C2:24:FE:F4:D7:AE:80:5E:6F:73:81:6E:89:3C:D7:AA:CB
Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B
Certificate issuer:       /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
Certificate serial:       0810
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
Manifest number:          0808
Signing time:             Sat 18 Oct 2025 22:09:52 +0000
Manifest this update:     Sat 18 Oct 2025 22:09:51 +0000
Manifest next update:     Sat 25 Oct 2025 22:09:51 +0000
Files and hashes:         1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: gkuntRpRlvBsNFfdvPWOJWKwZV+GMDcuHc8xvOMj1qE=)
                          2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: WFvsYGxGbZsMpR4I2mqKInKvSm7CH4Awmh5yfhBmFLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl
                          rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2064 (0x810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4F4C, serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
        Validity
            Not Before: Oct 18 22:09:51 2025 GMT
            Not After : Oct 25 22:09:51 2025 GMT
        Subject: CN=68f41030-518a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:39:02:4b:26:06:14:c0:b9:e0:1a:17:13:
                    9f:1d:aa:f1:f3:af:ff:cc:df:cb:70:f4:f5:dd:4c:
                    70:83:fb:99:5e:d2:66:c5:7d:bb:8f:56:ce:8a:b4:
                    86:d6:46:6d:56:60:c7:ab:14:4a:43:ca:5d:d5:48:
                    38:96:2c:2d:4c:14:c1:7b:c5:65:ee:4f:38:95:d2:
                    49:3d:6b:8b:a7:cc:89:9c:4a:18:bf:5d:bd:ca:dd:
                    1e:7c:b1:72:b7:db:99:b2:37:59:04:20:90:5c:ca:
                    35:00:93:3b:f3:dc:9a:b0:3c:31:8a:4c:e2:93:8c:
                    33:f1:68:81:51:58:0e:98:78:90:2e:07:00:42:b7:
                    c7:db:89:30:68:02:3b:2e:e1:74:af:fd:4f:6f:76:
                    ec:54:71:b3:75:af:3f:37:09:75:25:98:d3:08:30:
                    40:f6:ae:0e:8f:29:42:e5:0c:27:ed:a5:54:94:86:
                    47:61:6a:76:34:a6:74:54:5a:ce:bb:33:3d:66:b2:
                    e8:0b:4a:0c:e3:20:92:24:43:ff:69:0c:03:61:22:
                    9c:b9:6b:74:35:48:2f:7c:f7:09:c7:9d:3f:8a:cb:
                    75:27:f4:96:75:ba:f6:0b:c4:6c:53:34:39:d3:ed:
                    55:21:5b:d9:16:e8:43:16:3e:38:24:4f:78:de:00:
                    10:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E0:DE:C2:24:FE:F4:D7:AE:80:5E:6F:73:81:6E:89:3C:D7:AA:CB
            X509v3 Authority Key Identifier:
                keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:03:35:2c:18:7c:de:ef:c6:08:1a:8b:0e:0e:0a:f8:1e:02:
         f7:28:f0:13:68:a7:4c:9d:fb:4e:2a:d3:4b:81:37:49:75:48:
         9e:af:3d:7f:72:15:ba:26:ba:ee:9e:c9:fc:a5:69:c5:7e:51:
         88:8a:aa:65:45:26:13:b7:f1:f3:de:51:5e:82:c3:69:36:e9:
         b0:03:56:63:5c:b1:44:7b:cc:ad:27:a8:14:2e:cc:65:29:58:
         67:8b:fc:ef:c6:73:c9:b7:ab:59:5e:72:60:45:db:48:b3:a3:
         ff:54:81:a8:3b:8b:93:10:f0:6f:f1:5b:31:3a:02:95:e3:31:
         d9:3c:c2:36:5a:a1:9e:b9:a7:38:2b:6b:95:38:a8:d6:6d:fa:
         70:60:56:35:b1:49:81:de:aa:2f:c1:64:e3:ec:b6:96:9f:75:
         be:69:a5:e9:32:73:5e:7e:7e:2f:3a:1f:a0:c7:01:d9:1e:82:
         33:e9:f9:de:fd:ca:a4:a2:c7:3d:d1:e9:bc:1f:36:14:db:dd:
         f2:e0:c8:b4:e4:92:e2:9c:96:3a:77:98:e4:bf:eb:82:23:19:
         52:99:8c:c2:01:cd:0f:bd:bb:09:b0:b5:e7:b0:14:49:bd:d4:
         32:9b:84:f2:5c:ed:fd:6a:51:76:e0:62:50:8d:38:0f:ba:a4:
         9e:d5:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:53 2025 by rpki-client