Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
File:                     qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json)
Hash identifier:          rBqcvUeUTCwnZ7Drh4aKp4dBXyZ74OJG8EEGrWCGq5Q=
Subject key identifier:   2D:E5:5D:7C:52:00:F6:DD:4A:14:DC:69:E9:83:E8:41:4C:60:A8:1E
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Certificate issuer:       /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial:       0EEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
Manifest number:          0EC8
Signing time:             Tue 04 Nov 2025 17:44:42 +0000
Manifest this update:     Tue 04 Nov 2025 17:44:41 +0000
Manifest next update:     Tue 11 Nov 2025 17:44:41 +0000
Files and hashes:         1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: L5npQ2ui+2+ofe00IhLAUR5AHBAr+btKQI/4btK4ZAc=)
                          2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=)
                          3: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=)
                          4: FA9D67D07C5711F0AD80C25CC4F9AE02.roa (hash: IfHyorIOQ7bueAyQaemWspNEc+/bGan7gB84RC3Kv/Y=)
                          5: 3FCD146C97D911F080901462C4F9AE02.roa (hash: zFjZk2S9ws5t5ZdI9szHa+nHw5gtdNKIsc6poD8Md0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
                          rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 17:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3820 (0xeec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
        Validity
            Not Before: Nov  4 17:44:41 2025 GMT
            Not After : Nov 11 17:44:41 2025 GMT
        Subject: CN=690a3b8a-02b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:23:ba:ad:5e:6c:79:13:2e:c7:0f:8c:06:
                    53:f1:0b:11:c6:3c:af:06:7e:b1:b7:ba:35:48:31:
                    e7:ba:33:68:7b:20:db:1a:96:ec:f0:56:ee:22:2c:
                    25:8c:4e:c4:e1:fa:c8:05:44:69:c0:d7:d3:f9:50:
                    af:a7:c6:3b:ea:eb:12:d0:a3:c1:92:1a:67:c5:21:
                    3a:a5:fa:db:d6:79:d2:62:09:87:0b:39:20:e6:b3:
                    8e:36:dd:e9:72:0c:3a:89:3f:8e:bd:0a:90:9d:cf:
                    39:2b:59:8a:93:78:09:80:b2:39:78:92:66:02:98:
                    17:b8:a6:7f:38:67:09:30:be:7d:0e:32:67:72:11:
                    47:86:2c:23:fb:aa:0e:2f:fc:19:58:04:ba:0c:ab:
                    81:ff:ad:f4:dd:b3:f5:0b:4a:01:af:49:14:d3:8b:
                    c6:cc:3f:af:8a:66:67:24:0e:d4:1f:16:1a:e1:03:
                    d4:2f:46:0f:4a:91:b2:7e:04:92:58:43:4d:2e:7e:
                    04:12:a4:b4:7a:b2:9b:26:c2:dd:fd:ba:a4:6f:07:
                    d9:2d:9d:b4:5c:ed:bc:24:78:42:16:40:6c:45:84:
                    2c:01:fd:f7:39:23:4a:5d:f4:af:75:2e:42:57:0c:
                    e7:9b:5a:de:12:70:67:74:b7:54:97:30:f8:80:72:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E5:5D:7C:52:00:F6:DD:4A:14:DC:69:E9:83:E8:41:4C:60:A8:1E
            X509v3 Authority Key Identifier:
                keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:61:b4:79:1d:54:fb:34:d8:8b:5c:45:30:72:83:43:ed:d1:
         ce:bc:c7:bc:8f:c6:b4:e0:79:43:ea:d8:a1:8c:3f:9d:9e:29:
         37:cc:bd:76:9b:ac:24:f2:ad:81:09:ee:ea:a9:1e:f3:17:aa:
         85:be:4e:8b:88:70:24:0a:4a:75:a5:f1:54:1c:47:bf:49:91:
         d5:4b:a9:d2:ea:1d:bf:d0:75:16:c5:d6:62:b1:c7:07:7c:96:
         8d:d6:46:c5:8b:f4:d8:a0:18:2e:a1:59:88:d1:95:a2:e0:a2:
         78:ff:db:65:38:37:cf:a6:06:b0:15:0a:28:84:79:d0:6b:fa:
         71:64:b1:1f:49:98:c0:55:eb:a8:73:18:a9:bf:f1:81:f5:6c:
         4c:d6:bd:93:6d:33:10:aa:92:c1:d8:26:0e:5c:95:47:c3:9b:
         f0:89:35:59:57:c3:d1:39:e8:bd:bb:65:9a:c7:53:72:25:85:
         59:6d:50:dd:a2:b2:ad:ab:72:e7:f3:8b:45:9c:29:c2:f3:31:
         0d:3c:be:51:f2:c5:b7:ba:8b:de:9b:2c:fc:b5:f5:85:85:5d:
         69:3c:83:a6:11:b6:aa:12:21:ef:20:4b:fe:2d:91:e6:6c:97:
         06:f4:0d:61:94:10:23:fc:45:9f:6e:8f:f3:3c:10:b9:32:19:
         d9:c5:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:07:54 2025 by rpki-client