Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
File:                     QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json)
Hash identifier:          c8rJQPhcgYvTI/83cWccwp/wMybhM4o6sH7SU3MSJUQ=
Subject key identifier:   6B:D2:4A:B3:6B:43:B2:29:D6:8F:06:E3:48:42:51:43:27:A9:1B:0E
Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
Certificate issuer:       /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
Manifest number:          B3
Signing time:             Mon 03 Nov 2025 03:12:56 +0000
Manifest this update:     Mon 03 Nov 2025 03:12:56 +0000
Manifest next update:     Mon 10 Nov 2025 03:12:56 +0000
Files and hashes:         1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: EY3PCv0EhfBsJdZKMc+y1UC7fxUVdQNDDRAH/Fn++LU=)
                          2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mZ/ViBjIVIPe+nE/GVSLUGS2VukLj6yBRBsTJ8+0mQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
                          rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:12:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
        Validity
            Not Before: Nov  3 03:12:56 2025 GMT
            Not After : Nov 10 03:12:56 2025 GMT
        Subject: CN=69081db8-8803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:9a:85:6f:5d:8c:4c:c6:86:f6:7b:08:3c:
                    f9:c5:cb:a8:40:b8:62:fe:71:4d:d1:7b:d4:12:8e:
                    8c:29:f6:bf:ef:4a:74:4c:33:c0:98:81:57:63:c2:
                    d2:aa:a7:31:fa:6f:dd:91:63:32:79:d3:3f:f1:a1:
                    c2:e8:98:0a:22:3c:0f:6a:8f:47:62:9d:bc:0a:b3:
                    a3:05:cc:b7:0d:6b:7d:48:da:6a:62:a2:26:4a:d9:
                    c5:ff:83:2c:e6:cd:dd:cd:0f:33:ee:d2:e1:94:9a:
                    42:8c:1d:9d:3e:50:23:c6:01:c4:3c:7d:38:25:0d:
                    05:46:43:47:00:e2:a2:a6:03:24:7c:1a:d1:c6:a0:
                    eb:19:25:1a:27:05:27:1b:c7:28:aa:38:7e:7b:b8:
                    b4:f7:ad:d0:f1:8d:ad:e7:57:4e:9d:03:f5:67:f7:
                    6c:84:2f:03:e3:06:6d:32:16:cc:94:b9:58:58:20:
                    73:4e:a1:ba:59:85:c2:53:27:3e:fb:6e:22:89:ac:
                    7c:03:42:81:57:55:7f:1e:6d:97:8d:85:9d:32:17:
                    66:67:c5:83:fb:c2:47:52:d3:aa:2a:07:2c:a2:1b:
                    09:fd:c5:4c:23:35:5e:12:c9:6f:0d:ee:52:43:de:
                    21:a6:7b:1a:b3:05:00:c3:9d:67:c2:a7:47:31:0f:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D2:4A:B3:6B:43:B2:29:D6:8F:06:E3:48:42:51:43:27:A9:1B:0E
            X509v3 Authority Key Identifier:
                keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c6:34:f5:b8:d2:3d:d6:12:3d:95:34:e0:60:37:bc:0a:2d:
         80:06:5b:a9:b6:75:c5:36:f1:83:c2:32:73:96:b2:6d:73:51:
         b0:20:a0:f7:8a:a2:07:dc:ea:03:52:8a:09:4b:7a:35:ca:7b:
         18:72:56:bc:03:0a:6d:22:02:2c:7f:8e:9d:36:58:7e:e0:34:
         0b:e0:a7:e8:5d:1b:7b:b2:f2:49:94:ce:05:2d:8e:3e:61:fe:
         c0:9b:27:d3:37:b0:94:79:97:af:08:7b:5f:1f:40:68:db:b3:
         15:9c:56:99:0b:da:69:33:8f:6f:f3:a7:d9:23:86:60:dc:a1:
         9d:2e:cd:7b:49:e3:d4:e8:0d:ce:4c:e0:f8:43:fc:45:62:01:
         5c:4a:d4:05:91:2b:93:8b:4f:a6:85:78:95:87:fd:52:d7:53:
         0f:10:55:86:6e:91:b4:d9:47:d0:66:41:85:2f:23:22:14:f1:
         69:da:96:f0:26:b2:d4:c2:6a:61:28:23:52:8f:e5:6a:18:b1:
         8d:bb:42:33:5f:53:f1:76:1e:d5:cf:fc:54:a3:98:f6:f0:1b:
         11:e8:83:24:1d:aa:32:15:cf:0d:0a:65:04:48:86:70:2e:1f:
         1a:ef:dc:01:45:d6:ea:1f:2c:ff:aa:96:42:d6:a0:d2:17:40:
         30:eb:d3:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI0NUYxMTAvBgNVBAUTKDQxMTUyMjM0NjBBM0RERkFDODNBODJGQzYxQjJCRTlF
QzYyNkMyMEMwHhcNMjUxMTAzMDMxMjU2WhcNMjUxMTEwMDMxMjU2WjAYMRYwFAYD
VQQDEw02OTA4MWRiOC04ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw3+ahW9djEzGhvZ7CDz5xcuoQLhi/nFN0XvUEo6MKfa/70p0TDPAmIFXY8LS
qqcx+m/dkWMyedM/8aHC6JgKIjwPao9HYp28CrOjBcy3DWt9SNpqYqImStnF/4Ms
5s3dzQ8z7tLhlJpCjB2dPlAjxgHEPH04JQ0FRkNHAOKipgMkfBrRxqDrGSUaJwUn
G8coqjh+e7i0963Q8Y2t51dOnQP1Z/dshC8D4wZtMhbMlLlYWCBzTqG6WYXCUyc+
+24iiax8A0KBV1V/Hm2XjYWdMhdmZ8WD+8JHUtOqKgcsohsJ/cVMIzVeEslvDe5S
Q94hpnsaswUAw51nwqdHMQ+jhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvSSrNr
Q7Ip1o8G40hCUUMnqRsOMB8GA1UdIwQYMBaAFEEVIjRgo936yDqC/GGyvp7GJsIM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ1Ri84Q0EyMEExQ0FB
RDIxMUVGOUFBMEVGODBDNEY5QUUwMi9RUlVpTkdDajNmcklPb0w4WWJLLW5zWW13
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjQ1Ri84Q0EyMEExQ0FBRDIxMUVGOUFBMEVGODBDNEY5QUUwMi9RUlVpTkdDajNm
cklPb0w4WWJLLW5zWW13Z3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgxjT1uNI91hI9lTTgYDe8Ci2ABluptnXFNvGDwjJzlrJtc1GwIKD3
iqIH3OoDUooJS3o1ynsYcla8AwptIgIsf46dNlh+4DQL4KfoXRt7svJJlM4FLY4+
Yf7AmyfTN7CUeZevCHtfH0Bo27MVnFaZC9ppM49v86fZI4Zg3KGdLs17SePU6A3O
TOD4Q/xFYgFcStQFkSuTi0+mhXiVh/1S11MPEFWGbpG02UfQZkGFLyMiFPFp2pbw
JrLUwmphKCNSj+VqGLGNu0IzX1Pxdh7Vz/xUo5j28BsR6IMkHaoyFc8NCmUESIZw
Lh8a79wBRdbqHyz/qpZC1qDSF0Aw69PF
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:39 2025 by rpki-client