Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File:                     bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier:          ogjB22/CRXQZ5loJQrR4ASze9HvklKKRRkMQO+UTpdE=
Subject key identifier:   75:E2:18:BF:1C:69:7A:BC:BA:B0:44:FC:C5:08:E3:70:DB:F6:56:C4
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       04D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number:          04CF
Signing time:             Tue 04 Nov 2025 23:56:47 +0000
Manifest this update:     Tue 04 Nov 2025 23:56:46 +0000
Manifest next update:     Tue 11 Nov 2025 23:56:46 +0000
Files and hashes:         1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: lvDV/mBj9q9Dn0GWSglqJX6LkTujNTtvQBdKJxWxbpA=)
                          2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: eaIiY9RvMlvN9KkRdh0VxXvRbPe5lNuNtQtAJNjGWj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: Nov  4 23:56:46 2025 GMT
            Not After : Nov 11 23:56:46 2025 GMT
        Subject: CN=690a92be-1a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:51:5f:bc:ed:44:9e:2f:c0:5a:f4:fa:7f:
                    d4:1c:1e:3e:bf:73:c7:c6:d0:71:f9:41:51:05:cc:
                    d0:21:11:17:50:06:1b:4d:af:05:f6:d1:59:66:f8:
                    1a:fd:74:6a:ba:e7:7a:c2:ee:c5:4a:c7:79:ca:b3:
                    b7:d8:33:e5:45:02:f2:18:e2:0b:cd:b4:db:34:b6:
                    d7:9e:f3:ba:ea:54:33:77:c6:65:fa:26:d3:28:cd:
                    36:06:48:ae:46:ff:f0:6a:f4:64:f3:70:55:d2:fd:
                    ae:a1:f3:2d:58:51:20:78:86:95:83:1d:c3:32:fc:
                    0d:79:7b:20:b0:7e:5a:e5:28:e5:0c:f7:49:39:d3:
                    bf:14:4a:5c:f2:3a:94:0b:eb:8f:64:6d:b7:42:a6:
                    84:94:85:77:96:69:6d:3b:a2:8d:46:be:40:43:23:
                    ff:e7:6a:b5:1f:0f:93:d2:56:2f:72:87:e4:33:c1:
                    fb:46:82:82:f4:e0:e8:27:b6:be:32:e0:8e:34:e0:
                    51:25:39:1b:f6:11:ab:e9:e6:3f:22:6a:15:0c:ea:
                    76:e8:1b:f1:64:78:a1:dd:af:f3:62:e3:e6:cb:13:
                    c6:5b:58:9d:a8:e1:2d:a5:86:24:59:8a:db:ee:0d:
                    0b:0b:b4:f0:e7:4f:9a:eb:28:4d:2e:16:c7:08:57:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E2:18:BF:1C:69:7A:BC:BA:B0:44:FC:C5:08:E3:70:DB:F6:56:C4
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cb:ff:0d:a1:88:76:af:88:b2:54:22:74:3e:bd:35:3c:a6:
         c2:14:5c:f9:87:0f:e8:16:b2:91:aa:b4:cc:ce:a5:d3:8a:b2:
         1f:6e:0c:ea:33:2e:b5:c2:12:79:fa:64:0e:bb:37:c7:6b:08:
         f8:e6:2e:4d:da:29:cc:49:d8:4f:75:d1:bf:f4:f7:2e:73:84:
         c0:85:44:a4:b9:13:52:1b:7e:be:ea:f6:94:0f:8c:ee:e1:21:
         c9:15:8a:92:47:21:39:20:1b:02:e0:66:2f:81:27:64:a7:d8:
         33:13:0e:93:a0:66:d2:e0:8f:73:fa:c9:12:ad:bd:c1:26:89:
         b6:85:00:e4:f4:14:3f:9a:25:75:fa:a6:d1:da:11:30:1c:77:
         09:4e:46:3e:65:d8:2c:bb:9e:47:e5:3e:5d:e1:60:77:3f:62:
         3e:86:fe:42:17:b1:27:11:ae:80:e6:b9:f5:00:72:6e:2c:73:
         f8:1f:ac:eb:47:0c:f0:a5:67:f4:b4:3d:51:78:1e:fa:fa:20:
         78:a0:59:55:04:66:5c:90:3a:6f:bf:c3:4a:f7:02:d6:bb:84:
         78:60:45:0e:0e:14:17:d8:23:56:73:a1:bc:3b:9a:31:28:11:
         0e:38:1a:6b:8d:21:67:9c:4a:31:3d:f6:b8:c1:26:83:b8:49:
         3b:54:b2:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG
OUExNDJFRjkwHhcNMjUxMTA0MjM1NjQ2WhcNMjUxMTExMjM1NjQ2WjAYMRYwFAYD
VQQDEw02OTBhOTJiZS0xYTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3HBRX7ztRJ4vwFr0+n/UHB4+v3PHxtBx+UFRBczQIREXUAYbTa8F9tFZZvga
/XRquud6wu7FSsd5yrO32DPlRQLyGOILzbTbNLbXnvO66lQzd8Zl+ibTKM02Bkiu
Rv/wavRk83BV0v2uofMtWFEgeIaVgx3DMvwNeXsgsH5a5SjlDPdJOdO/FEpc8jqU
C+uPZG23QqaElIV3lmltO6KNRr5AQyP/52q1Hw+T0lYvcofkM8H7RoKC9ODoJ7a+
MuCONOBRJTkb9hGr6eY/ImoVDOp26BvxZHih3a/zYuPmyxPGW1idqOEtpYYkWYrb
7g0LC7Tw50+a6yhNLhbHCFeI4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXiGL8c
aXq8urBE/MUI43Db9lbEMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2
OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2
Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsy/8NoYh2r4iyVCJ0Pr01PKbCFFz5hw/oFrKRqrTMzqXTirIfbgzq
My61whJ5+mQOuzfHawj45i5N2inMSdhPddG/9Pcuc4TAhUSkuRNSG36+6vaUD4zu
4SHJFYqSRyE5IBsC4GYvgSdkp9gzEw6ToGbS4I9z+skSrb3BJom2hQDk9BQ/miV1
+qbR2hEwHHcJTkY+Zdgsu55H5T5d4WB3P2I+hv5CF7EnEa6A5rn1AHJuLHP4H6zr
RwzwpWf0tD1ReB76+iB4oFlVBGZckDpvv8NK9wLWu4R4YEUODhQX2CNWc6G8O5ox
KBEOOBprjSFnnEoxPfa4wSaDuEk7VLLh
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:54 2025 by rpki-client