Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File:                     QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier:          Qn3srkLwUIO1k856i4fGuDwtm7+NtBeCcfaMc6l7cCY=
Subject key identifier:   D9:32:01:7E:3D:A5:BB:83:FE:E3:B4:53:59:02:E0:B1:F8:DA:AF:DC
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer:       /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number:          0130
Signing time:             Wed 05 Nov 2025 04:48:06 +0000
Manifest this update:     Wed 05 Nov 2025 04:48:05 +0000
Manifest next update:     Wed 12 Nov 2025 04:48:05 +0000
Files and hashes:         1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: sMdA9ejbHc5RxrdAmak8ugDCxQjFgQAPFBviz6dvmWQ=)
                          2: 47142068221311EFB680F113C4F9AE02.roa (hash: eOIRibnSZ7zb8zXpiC5OYpXytGwFP6zwa+/fbeAxOO4=)
                          3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: k3OjV98AN2SowkZ89FdDV3rmcUlNd8FyOaF8PHB5wqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
        Validity
            Not Before: Nov  5 04:48:05 2025 GMT
            Not After : Nov 12 04:48:05 2025 GMT
        Subject: CN=690ad706-2727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:79:09:4d:0e:4e:1c:29:04:ed:94:4c:dc:
                    15:3b:1f:02:6f:52:c4:c6:3d:60:b6:6a:a0:86:5d:
                    80:ca:c1:54:60:e5:20:17:3c:95:6e:f5:11:28:d3:
                    68:da:11:5a:5e:83:dd:12:a9:89:82:e4:df:79:f1:
                    c7:3e:a4:31:36:91:63:b3:79:42:93:67:d5:00:ac:
                    8f:e6:14:3c:f0:59:58:fd:f9:45:48:21:e8:da:cc:
                    4b:b1:d8:31:01:13:cc:1a:18:40:a6:f5:df:35:d3:
                    44:a7:3d:02:a3:8c:6c:53:cc:1f:3d:74:09:f8:bb:
                    bf:ee:59:0e:3b:73:3a:ed:34:9a:cb:f3:46:9b:13:
                    71:b8:24:a2:6d:b6:48:1f:c1:4c:a9:70:bc:e6:23:
                    1a:ef:9d:5d:72:3c:b8:db:cf:83:79:d7:4a:f4:1e:
                    6e:4c:6f:44:a0:68:a2:6f:31:f0:b9:6b:2d:3d:a0:
                    42:47:12:c1:f3:ed:a4:31:cf:7e:9f:73:a2:95:ea:
                    80:68:36:6e:66:d9:44:9b:73:9d:32:b8:ab:4f:1d:
                    21:39:1a:df:b3:fe:f4:80:c9:ef:6f:9c:24:61:71:
                    13:f0:8a:f2:f9:b9:99:91:16:69:36:1e:d2:94:f8:
                    0d:ce:ba:f7:9c:0f:5b:34:30:b1:60:c5:92:ba:d2:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:32:01:7E:3D:A5:BB:83:FE:E3:B4:53:59:02:E0:B1:F8:DA:AF:DC
            X509v3 Authority Key Identifier:
                keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:13:91:09:74:c9:7b:98:d9:76:57:11:14:c2:09:9f:24:
         ad:06:2a:48:0d:23:f0:c2:c2:e5:69:05:dd:39:ca:fa:37:59:
         21:b4:e1:77:85:81:12:bf:41:ac:49:eb:89:0a:59:1c:82:63:
         77:3c:41:b9:57:ab:bf:33:05:07:ef:7f:8f:e8:58:e9:c5:0b:
         10:f7:c6:5c:5b:4d:a4:0c:72:40:3d:33:b0:55:87:3d:fb:db:
         7b:54:a8:c8:db:d6:b3:3a:8b:78:11:f3:74:2d:0c:a6:68:45:
         00:85:09:74:ef:71:bf:d3:79:0a:c5:09:e9:79:ff:26:12:94:
         5b:8b:66:0f:56:26:18:08:df:08:df:69:12:56:36:7d:b1:d1:
         0a:6c:4e:cd:88:bb:66:c8:d5:9d:52:c4:6a:b9:ed:26:b8:8f:
         3a:71:b6:53:49:b4:29:e7:a3:f6:8b:97:a7:bf:af:50:75:b6:
         1c:6d:55:51:23:dd:a1:07:e0:81:90:90:0e:ab:03:29:53:f2:
         0e:09:62:23:ef:90:1f:bb:88:e9:f0:89:39:4f:0c:5a:41:90:
         bc:57:13:bb:4f:f6:47:5d:43:80:d3:cf:c3:b5:f5:04:99:fa:
         89:dd:bd:76:75:f0:ce:59:dd:e3:fb:26:40:1e:cd:f8:11:fc:
         89:e4:57:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:08:05 2025 by rpki-client