Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
File:                     Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json)
Hash identifier:          gvWecvpKAAdd2N7QcCfF+iAWQc0oK3WgNl8BvFK8ovc=
Subject key identifier:   5C:5F:08:FA:7D:6C:71:5D:C6:2A:A1:DA:7F:A7:E5:4F:DF:F5:E5:C2
Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Certificate issuer:       /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Certificate serial:       04D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
Manifest number:          04CC
Signing time:             Tue 04 Nov 2025 23:57:31 +0000
Manifest this update:     Tue 04 Nov 2025 23:57:30 +0000
Manifest next update:     Tue 11 Nov 2025 23:57:30 +0000
Files and hashes:         1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: KSvpKPLPNsExTXkpJ8tIfpFBn6MeA88bx8tCdFgcW60=)
                          2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: BPstFCUC7r4sqZcas3tBZS1NiGfkeUG5bomyvOkC2W0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
                          rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238 (0x4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
        Validity
            Not Before: Nov  4 23:57:30 2025 GMT
            Not After : Nov 11 23:57:30 2025 GMT
        Subject: CN=690a92eb-387c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:38:8d:dd:be:38:84:49:bb:6b:73:9a:ea:
                    16:06:71:cd:2b:6c:fb:29:80:63:be:0b:ab:bc:83:
                    20:37:a6:11:a4:89:76:a8:d9:b5:9b:95:04:42:eb:
                    a1:06:d3:30:54:29:37:ee:70:1b:72:67:55:43:50:
                    14:fd:67:1b:2f:a9:ef:28:9f:ca:3f:0c:f4:e3:e6:
                    b4:8d:1d:53:e3:55:89:90:a3:8d:e1:17:bb:8d:33:
                    c6:29:99:f5:a2:ea:ae:38:6c:ff:8b:66:97:31:4d:
                    70:46:c5:9d:5c:3b:f7:a0:0e:8f:03:bc:df:f1:5f:
                    70:c4:bc:71:63:0c:27:db:28:b3:3b:33:af:fa:d9:
                    54:46:ac:a8:cb:b1:a8:af:49:f4:b9:b4:98:83:34:
                    52:ce:4e:9e:b5:86:8a:fe:90:c0:3a:cf:8a:14:7e:
                    89:79:8d:f4:ee:ee:c0:78:9e:3d:e1:1b:a1:36:d7:
                    72:79:e7:2c:5c:b5:ba:f9:d0:97:06:c8:64:3a:87:
                    59:92:cf:2c:d8:c4:eb:e1:d9:b7:ec:46:28:8c:4f:
                    5b:27:73:e5:77:06:54:3c:85:7e:ec:13:c5:ec:35:
                    94:60:d1:e5:f8:df:62:dc:0c:9e:b0:a4:82:79:f7:
                    cf:ac:d3:69:8f:a4:e2:c3:40:cd:ab:b7:28:1b:8d:
                    20:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5F:08:FA:7D:6C:71:5D:C6:2A:A1:DA:7F:A7:E5:4F:DF:F5:E5:C2
            X509v3 Authority Key Identifier:
                keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:79:20:71:8c:d0:2b:02:54:11:13:5f:42:24:7f:15:34:
         a2:94:17:e1:59:f7:40:dd:ee:39:e3:23:c2:a1:45:33:53:98:
         cf:28:3c:2a:a5:e8:a7:0c:0f:6b:95:9e:6c:ea:d3:7b:f7:56:
         be:66:a5:f3:65:2a:47:bd:4f:c9:74:d1:32:cf:2d:9f:c4:1c:
         dc:bb:99:5d:97:2d:7e:62:c8:9c:ce:80:27:7f:81:ad:1a:3e:
         2a:bf:91:83:5c:9a:f7:ab:42:0c:3e:20:49:00:63:e1:37:0d:
         bf:51:da:fa:ca:46:90:76:dd:08:6f:b7:19:56:8f:e7:16:d6:
         37:ef:ac:9c:5e:2e:98:c1:70:ac:6b:fe:97:84:9e:1c:35:ca:
         e0:c3:6f:67:9a:77:80:f9:29:27:50:3e:1c:59:b1:f3:5e:9a:
         be:c1:7e:21:79:b2:18:03:9a:cd:88:1a:1d:12:72:08:82:db:
         24:91:f7:25:d3:22:41:16:1c:3d:d8:f6:b7:2f:37:dc:d0:c6:
         1d:cb:2d:b2:36:c0:77:99:9d:fe:33:21:a3:9c:3f:ee:b3:51:
         99:d2:94:22:ac:8e:20:89:c1:5c:9c:d1:e4:71:ee:64:67:59:
         79:f9:bd:a2:41:c0:8c:d5:7c:7c:38:42:ae:4a:27:57:d0:d1:
         3f:1f:8b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:30:12 2025 by rpki-client