Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft
File:                     QuZl4REE2M0IP7GdPG81XHYoxEU.mft (raw, json)
Hash identifier:          iNSZ1Ui8z/N/n+9IRwebtGYDsH+IJv6A5ivOKFKRsQU=
Subject key identifier:   60:B9:6E:24:58:7E:52:0C:FF:37:9A:51:75:6E:AD:90:1C:A8:33:BE
Authority key identifier: 42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45
Certificate issuer:       /CN=A912968B/serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft
Manifest number:          0135
Signing time:             Wed 05 Nov 2025 04:39:44 +0000
Manifest this update:     Wed 05 Nov 2025 04:39:44 +0000
Manifest next update:     Wed 12 Nov 2025 04:39:44 +0000
Files and hashes:         1: QuZl4REE2M0IP7GdPG81XHYoxEU.crl (hash: xLUHe0XyEOglko/M0rPjanjfCAwwGe6+3n/OmiLZcOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl
                          rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912968B, serialNumber=42E665E11104D8CD083FB19D3C6F355C7628C445
        Validity
            Not Before: Nov  5 04:39:44 2025 GMT
            Not After : Nov 12 04:39:44 2025 GMT
        Subject: CN=690ad510-9095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:cf:ad:e4:90:0b:ae:02:58:69:06:80:9a:
                    bf:ad:f7:aa:62:82:ce:24:ce:d5:bf:c2:ab:91:e6:
                    3d:18:d0:7b:ed:78:1c:fc:fa:2f:e0:18:40:2a:4a:
                    c9:e9:49:84:c5:83:41:89:d0:f1:f9:4f:24:c2:ca:
                    65:65:81:3f:07:10:c5:30:b7:67:7d:6b:a9:c7:e9:
                    d5:a9:75:2c:d7:6b:29:a3:d5:30:26:ca:06:e7:bf:
                    70:8c:e9:75:bd:e2:67:52:de:39:d4:bb:4c:a1:4a:
                    3f:57:55:0e:7f:85:c8:c1:38:17:b0:33:e5:93:68:
                    30:43:b7:08:0e:1b:4a:34:87:a0:86:7b:a1:9f:fe:
                    08:56:8f:56:19:d8:53:cb:53:9a:ca:c4:d6:ff:48:
                    4f:af:bd:58:74:65:0e:98:12:45:c1:dd:61:a7:8d:
                    74:57:70:06:17:b9:18:14:24:fc:13:ff:53:9d:22:
                    7d:2d:17:43:c6:6f:35:08:87:45:c6:6f:13:32:6e:
                    a7:6b:90:86:3a:89:df:e3:24:77:88:32:14:24:47:
                    65:bc:11:25:bc:87:92:d3:c4:e6:ed:89:1f:31:0b:
                    98:07:d2:0f:30:08:7b:f8:fe:c4:48:da:62:4e:6e:
                    61:60:8a:1a:63:3e:80:35:d2:41:d9:76:ed:4f:79:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B9:6E:24:58:7E:52:0C:FF:37:9A:51:75:6E:AD:90:1C:A8:33:BE
            X509v3 Authority Key Identifier:
                keyid:42:E6:65:E1:11:04:D8:CD:08:3F:B1:9D:3C:6F:35:5C:76:28:C4:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuZl4REE2M0IP7GdPG81XHYoxEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912968B/FC1D2736E12A11EE8684C217C4F9AE02/QuZl4REE2M0IP7GdPG81XHYoxEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:27:d7:ea:dd:ce:ca:75:a6:70:d7:59:1b:69:26:79:74:26:
         eb:aa:87:16:c9:53:1f:34:82:c3:98:7a:e8:b3:3a:5e:82:a5:
         3c:08:2b:c6:7d:3f:e0:b3:df:e7:28:d3:a3:9f:9a:14:bb:fa:
         74:a5:49:7e:9b:4e:81:49:01:2f:9f:51:e0:4c:20:15:ff:8e:
         ce:5a:70:fd:16:94:79:0f:5f:cc:19:7f:ca:58:1b:df:b5:07:
         28:8d:31:2d:40:4e:47:88:11:7b:99:d9:83:55:bb:11:ff:2b:
         fe:48:ed:0c:a4:8f:98:fe:d1:65:a0:43:13:44:d5:6b:85:de:
         c2:56:76:77:c8:50:ee:73:40:c2:cb:32:f9:4a:9c:67:13:92:
         e2:23:19:ec:5e:c3:e3:90:db:18:82:ec:c9:ed:37:cd:c5:87:
         54:d4:69:92:c7:b4:b8:79:1b:c7:62:02:8d:5e:a4:dd:c3:ec:
         5c:dc:fe:b6:9d:bc:66:5a:3b:a4:a0:14:91:e7:10:0c:6d:c5:
         e8:58:11:d8:12:42:33:1c:87:fa:5b:bd:f2:b8:91:dc:7f:1c:
         bb:d0:5c:55:a6:00:43:b0:70:c6:ba:f4:e1:52:33:52:e3:7d:
         11:4d:41:91:a0:0b:ec:bf:a2:ac:c6:64:bf:9c:69:c6:16:ad:
         c7:36:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:47:13 2025 by rpki-client