Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
File:                     qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft (raw, json)
Hash identifier:          Hgq1/O34xFzfGWrG/Z2vcI7LRTF9KVzD14lIUjYmuKc=
Subject key identifier:   B7:97:D5:1C:FE:D8:E1:BA:D5:7F:4B:1A:CD:38:8C:38:3C:83:28:5B
Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81
Certificate issuer:       /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
Manifest number:          88
Signing time:             Mon 03 Nov 2025 06:36:32 +0000
Manifest this update:     Mon 03 Nov 2025 06:36:32 +0000
Manifest next update:     Mon 10 Nov 2025 06:36:32 +0000
Files and hashes:         1: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl (hash: rPcF64TVxs7W21w0eeGAfVCFSmrcoPx3WXVJPFJcDEM=)
                          2: B1C9E322E9EE11EF9D68D841C4F9AE02.roa (hash: ALIstNSOUyPJoG6tUF7wdbXN7LDhADIjhA1ktsIa/iA=)
                          3: 7F053D7E0A9611F0AA1BF786C4F9AE02.roa (hash: o0d52lCnr33Uh8iwtFl+nwRiBmZy5UFNqyfIv33Dtv4=)
                          4: 723F9406E9EC11EF9AC2151CC4F9AE02.roa (hash: IU1Sto6R/eoM72dkcviucBTl2Wo6d0jfNJDSJ53kN6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
        Validity
            Not Before: Nov  3 06:36:32 2025 GMT
            Not After : Nov 10 06:36:32 2025 GMT
        Subject: CN=69084d70-3f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:7b:19:42:8a:ef:d8:b4:a1:0a:b8:ca:c6:
                    95:2a:38:f4:cf:eb:f0:f5:9a:eb:b5:9a:7c:5e:0d:
                    94:26:38:e5:56:fd:41:ca:50:d9:81:62:85:cd:21:
                    cb:0d:9d:cc:d8:c3:22:b5:03:c8:88:25:7f:92:a7:
                    f4:29:f3:6d:e9:07:4b:f8:95:30:30:76:b2:46:40:
                    07:52:22:5f:fd:d6:3f:f3:d4:f7:aa:c0:45:6b:1a:
                    19:2c:21:9b:45:69:6c:09:4c:9c:51:70:65:16:44:
                    aa:95:f4:8f:87:2c:cf:e5:5c:c2:9c:5f:f0:96:43:
                    9d:b6:ef:8a:55:60:22:82:22:f6:2e:29:8b:dc:c7:
                    8d:a6:be:4c:57:30:f6:cc:2c:80:cf:64:3a:0b:62:
                    b9:32:a2:f8:96:2e:ba:0a:38:33:6f:db:bd:cb:9d:
                    32:07:91:f8:2b:14:a9:c9:60:41:64:f7:7b:28:58:
                    f3:c9:d0:1d:4d:27:5b:a0:ce:86:6f:35:8a:9a:3d:
                    5d:02:3f:8b:59:e8:35:5f:32:96:7a:cf:02:99:6c:
                    c6:8e:f0:c9:4c:2b:d4:6c:fa:03:6c:3b:b4:d8:e7:
                    3e:62:58:ec:80:9c:8b:2b:7f:ff:e4:fc:ff:5f:e1:
                    0f:02:bf:53:4d:b1:63:24:df:fc:2c:35:cf:f4:d5:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:97:D5:1C:FE:D8:E1:BA:D5:7F:4B:1A:CD:38:8C:38:3C:83:28:5B
            X509v3 Authority Key Identifier:
                keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ef:ef:6c:ee:85:9f:f5:ed:b5:58:6e:8f:77:9b:dc:4f:95:9e:
         c1:41:51:4c:0c:ba:bb:1e:27:1d:a4:af:12:86:b3:11:90:87:
         f0:39:30:3c:22:c6:2d:ae:90:33:c3:e2:e4:51:65:e9:c8:9b:
         6b:e4:a9:67:5b:83:8d:5e:12:c8:ab:22:30:9d:22:de:60:ba:
         a7:4b:47:13:9d:70:ca:9e:da:2d:0f:c3:5f:55:77:92:ea:6f:
         2e:f8:cf:6b:de:a0:c2:c5:03:03:91:7f:02:9a:d8:8c:f6:3e:
         fe:09:8a:12:41:91:16:e2:e6:a8:38:e8:b2:59:de:2d:46:57:
         e1:22:db:16:11:cf:b7:40:0a:3c:f9:6a:cb:cd:86:7a:4e:61:
         78:f8:69:00:7a:0e:11:8b:f3:75:cf:6f:40:af:0c:03:c3:1a:
         96:65:37:b8:d3:09:80:3b:61:ed:bf:4a:55:ed:b8:8a:78:96:
         cc:fa:e6:92:5c:42:b7:3b:b7:01:da:07:1d:9a:1f:9a:e0:98:
         d1:51:0f:4b:54:f8:78:4a:a5:2c:a9:80:9f:04:29:5f:1e:c2:
         19:47:22:af:b4:80:48:49:2b:b3:15:ff:30:e6:6e:15:a3:5b:
         94:ad:b5:ae:3a:c8:f9:55:42:ab:21:d7:0b:3f:9d:1d:ce:73:
         d2:70:08:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:31:29 2025 by rpki-client