Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File:                     qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier:          0aYS0in6lBqiOwMImsxSAIOVtwz+5EoQtK7TGxBrR3U=
Subject key identifier:   0B:50:12:EA:DF:47:7B:FB:18:86:06:BF:D6:FF:60:68:24:06:BF:24
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer:       /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial:       0ACB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number:          0AB0
Signing time:             Sat 18 Oct 2025 20:29:57 +0000
Manifest this update:     Sat 18 Oct 2025 20:29:56 +0000
Manifest next update:     Sat 25 Oct 2025 20:29:56 +0000
Files and hashes:         1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: EAP1N4MxOS2iITElJ2oGkjUROuGNmKNWelHg2rLmaEA=)
                          2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: NCtWjC1uM4+Sx0ntIvyY3s6R1AF8S0ZUO+CcBcvcH7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
                          rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2763 (0xacb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
        Validity
            Not Before: Oct 18 20:29:56 2025 GMT
            Not After : Oct 25 20:29:56 2025 GMT
        Subject: CN=68f3f8c4-4ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:e1:f8:a7:38:b9:bb:29:68:96:b5:76:5e:
                    c8:ec:4e:fb:f7:d5:59:14:e7:61:60:d4:f5:cc:1a:
                    a6:97:86:c8:38:dd:1e:16:0c:fb:b2:ea:81:0d:6f:
                    61:92:56:c9:ef:d0:c2:16:37:f9:9c:02:eb:dc:ea:
                    ec:c0:f6:be:f4:4f:f2:e1:38:ff:86:3a:01:78:91:
                    07:dc:02:9e:3b:cc:cf:6a:a1:93:1f:77:4a:a1:6a:
                    e1:c3:93:08:d8:5c:fc:d6:cd:17:90:1b:4f:2e:fa:
                    d3:61:23:dd:1b:6f:7e:d2:fa:89:f8:77:b0:c0:d3:
                    f6:d5:c5:82:2a:07:de:32:f3:d6:60:2b:4d:91:d4:
                    38:2b:c0:11:75:d1:cb:ad:ae:8a:ab:b2:8a:a8:a8:
                    3e:8d:c0:eb:68:85:63:09:34:02:b9:ff:65:c2:4a:
                    b4:ee:72:15:f0:f0:46:0a:b1:67:6d:ef:28:ee:f8:
                    c3:de:82:64:ac:06:f0:ae:1e:7b:92:c0:7d:f7:81:
                    e1:9f:61:f8:6c:10:05:54:71:ee:c0:28:a3:5d:78:
                    16:ff:d3:16:9e:51:2d:0e:c2:94:40:69:8e:95:71:
                    de:a5:ed:aa:50:97:c7:98:ab:ef:5d:43:4e:5f:d3:
                    51:f9:f8:9d:12:a2:d0:6b:8b:4f:e0:fc:bc:f0:b3:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:50:12:EA:DF:47:7B:FB:18:86:06:BF:D6:FF:60:68:24:06:BF:24
            X509v3 Authority Key Identifier:
                keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:62:da:68:66:6d:ad:69:1f:c6:73:40:0d:bf:f9:ae:6c:5b:
         9c:7a:40:61:7f:89:db:a1:15:aa:71:2b:40:dd:e5:c2:d8:11:
         bc:b9:25:07:15:34:b0:89:b8:42:f9:3a:6b:fd:b8:51:62:90:
         6f:80:14:17:6a:e3:80:31:86:f9:e9:2a:27:a0:7a:0f:01:b9:
         a5:2d:54:6a:f6:90:c0:af:4d:91:80:ff:e6:e8:ff:ec:ee:43:
         42:dc:6e:4c:c4:ba:c9:3c:eb:43:a0:af:d4:86:22:a4:14:69:
         85:d6:b0:fa:96:52:54:9a:1e:c9:d8:55:e5:9f:cb:ff:f4:68:
         77:1f:3d:64:b1:0f:83:67:17:9c:2c:51:b4:ce:6a:86:df:0b:
         b9:09:2f:4a:77:73:8c:80:94:4d:63:e9:99:c4:9b:27:e5:25:
         72:f5:80:03:ac:b5:05:7d:e3:b1:ac:87:ed:c4:e0:5b:98:61:
         ed:7c:ae:22:96:ca:74:4f:e3:22:16:86:a6:d6:67:fe:46:16:
         9a:73:0a:01:55:e4:8c:13:03:a6:f8:ca:53:ea:4e:22:16:59:
         c8:f0:99:e3:d6:ef:a6:60:28:7d:02:58:a0:e7:b1:b2:fc:3b:
         2e:42:41:98:ca:97:d8:90:cd:d7:71:ef:56:f4:0c:52:d6:8d:
         ec:fc:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:24 2025 by rpki-client