Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
File:                     qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json)
Hash identifier:          IaN1K9x94Mhu3s/EBGAz8euQ2pW0hJbsWX53owtHarw=
Subject key identifier:   4E:9A:67:80:4F:2D:5F:2F:98:E2:09:E3:0B:34:F2:E1:3D:AD:AB:B1
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Certificate issuer:       /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
Manifest number:          0102
Signing time:             Wed 05 Nov 2025 05:15:22 +0000
Manifest this update:     Wed 05 Nov 2025 05:15:21 +0000
Manifest next update:     Wed 12 Nov 2025 05:15:21 +0000
Files and hashes:         1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: MyGwixfocc5zFkPfpBywX+Zo3e6rPM1OC1Y8XvEUF1w=)
                          2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: V+nudqfqbNoV97hl4ZZQ3M1A1LzH6OKD9ocfKTUUibo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
                          rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
        Validity
            Not Before: Nov  5 05:15:21 2025 GMT
            Not After : Nov 12 05:15:21 2025 GMT
        Subject: CN=690add6a-6ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:ce:d8:fd:ab:f8:e9:fb:a8:1d:a2:fb:b3:
                    e1:03:f0:37:89:c7:90:21:f3:3b:9b:aa:22:aa:7a:
                    35:b8:e7:d5:27:90:b2:81:11:31:8c:fb:39:23:61:
                    7a:9a:71:5c:90:11:7c:1e:40:0d:6a:ad:b6:dc:7d:
                    d1:66:63:72:bd:66:db:7f:e8:23:d3:56:c8:59:c7:
                    ae:01:4f:04:eb:57:38:0b:3e:d6:09:ee:09:87:c0:
                    56:15:bc:ff:91:7c:90:9c:4a:d7:be:e8:4b:60:2a:
                    99:33:08:d7:b6:e7:16:74:bb:cb:00:52:2b:79:41:
                    b5:9e:45:63:f5:32:42:6d:42:ee:54:84:ec:db:6a:
                    2e:40:9b:33:64:e0:4b:c8:c4:26:c2:76:8c:15:d4:
                    d8:5c:05:22:e3:60:3b:2a:e1:f5:5f:01:fe:e1:78:
                    68:47:d8:c9:0f:90:ab:6e:76:b2:cd:cb:0a:bc:d1:
                    18:58:08:d9:86:00:f1:18:af:0d:ca:4d:46:e9:c3:
                    67:63:ab:d4:ac:81:e8:f4:e8:e3:9f:2a:4d:d9:38:
                    bf:73:d0:6c:99:71:01:2a:a7:64:ca:a6:4f:25:8b:
                    a5:ed:55:3d:fd:94:8f:59:2f:de:ee:36:dd:57:55:
                    8a:3c:38:13:1b:5f:12:ef:e5:36:33:77:4d:94:9c:
                    31:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9A:67:80:4F:2D:5F:2F:98:E2:09:E3:0B:34:F2:E1:3D:AD:AB:B1
            X509v3 Authority Key Identifier:
                keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:2f:35:66:d2:bb:5a:af:62:af:cf:cb:31:ce:f6:55:4b:
         07:80:92:5e:89:0f:96:e2:6f:6d:76:f1:dc:cc:39:79:49:84:
         79:3b:7a:24:94:8d:d2:00:9a:60:39:28:21:98:50:85:aa:e8:
         ed:35:eb:5d:58:ed:64:2e:98:1f:3e:5d:6c:94:ce:f8:35:9f:
         3c:a6:2a:af:0b:36:0a:ec:a3:3b:fd:a3:23:d7:ca:d7:19:a3:
         af:40:0a:78:f1:6d:af:1e:98:07:97:21:d7:a3:c4:b0:54:f5:
         54:d1:7c:50:cb:f0:58:49:cb:6e:07:77:fb:7b:33:ff:ef:21:
         dc:71:56:ce:ca:cd:a9:85:aa:60:c6:ee:63:b5:26:60:86:f2:
         fe:29:3f:89:ec:44:f3:e5:3b:7f:06:38:26:ec:a9:68:b7:91:
         95:49:34:11:1a:c1:2b:0b:41:fa:ed:7f:80:14:af:17:0e:18:
         92:af:79:da:e3:88:78:42:75:53:d5:8a:69:8a:c6:93:61:b7:
         f8:77:48:84:ad:61:98:f0:25:e7:7f:e4:3e:9a:76:a3:e5:ab:
         63:9a:60:e9:99:a5:05:20:67:4e:80:27:5f:e9:21:22:e9:59:
         9d:c3:f7:41:e3:be:34:e2:b8:66:d1:eb:ff:79:50:a0:3c:07:
         1a:6d:d9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:22:47 2025 by rpki-client