Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
File:                     q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft (raw, json)
Hash identifier:          zhw9t0RftBT3NyWCJRa3TznMABHlplKzhcVn3+ZXeKQ=
Subject key identifier:   23:00:E9:AA:6E:FF:90:5E:1E:FF:26:EA:7D:C1:4E:45:1C:94:84:21
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Certificate issuer:       /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
Manifest number:          058D
Signing time:             Sun 02 Nov 2025 23:12:31 +0000
Manifest this update:     Sun 02 Nov 2025 23:12:31 +0000
Manifest next update:     Sun 09 Nov 2025 23:12:31 +0000
Files and hashes:         1: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl (hash: cz5SaOnBZpxsfVywTxoGhjHmF+FlZCKfIn4OGEsbqQw=)
                          2: 012EAE068C1411EDA66E4F28C4F9AE02.roa (hash: bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
                          rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
        Validity
            Not Before: Nov  2 23:12:31 2025 GMT
            Not After : Nov  9 23:12:31 2025 GMT
        Subject: CN=6907e55f-1e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:2c:86:fa:ec:80:7a:bd:82:3d:c6:72:9d:
                    4a:2e:41:d8:78:19:1d:f6:c1:58:c3:a5:44:38:67:
                    bc:ed:f7:37:1d:67:ca:23:c7:0b:7d:05:04:37:00:
                    f0:c0:62:ac:5d:9a:1a:bb:16:24:3f:2c:c0:7a:a3:
                    13:9c:54:99:9e:64:db:e0:e2:d7:df:bd:95:1a:49:
                    80:74:30:67:d6:95:fe:6c:e1:50:a3:ac:8c:1b:88:
                    74:f9:ff:2b:c2:fb:19:b4:32:fa:bd:9d:61:f8:b3:
                    15:9b:31:be:2e:25:50:a7:47:c8:65:df:e1:97:4b:
                    fe:54:6d:e5:d5:f9:5f:82:03:6c:09:12:f4:a2:b5:
                    50:e7:c4:4c:17:90:f9:53:36:3d:6e:76:ba:3e:b0:
                    da:7b:63:b3:12:35:29:15:45:d0:ed:ef:67:c6:66:
                    31:91:18:3d:37:91:ad:cc:2d:26:6f:b1:47:3a:d1:
                    8c:22:0e:fe:49:66:97:18:82:ba:5c:1b:9a:ec:65:
                    3a:1d:e6:c4:60:2d:10:08:93:db:06:05:95:54:2e:
                    d9:b3:e3:e9:6f:cc:a9:c8:b1:dc:ef:30:12:ae:84:
                    52:aa:de:47:8f:1d:ad:ab:d1:6a:e5:92:2a:54:7a:
                    4a:ea:98:f9:d7:af:91:59:1f:53:19:bd:ea:f2:e5:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:00:E9:AA:6E:FF:90:5E:1E:FF:26:EA:7D:C1:4E:45:1C:94:84:21
            X509v3 Authority Key Identifier:
                keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f3:e2:67:20:81:b5:5c:4f:11:99:ad:37:aa:e2:65:1f:e2:
         db:43:36:a4:ca:76:41:85:f0:c1:b8:8e:52:d5:2a:34:06:b6:
         40:65:6d:1c:fd:1f:c9:eb:cf:20:21:4d:ed:c6:a3:0d:24:6a:
         01:7f:bc:26:96:b7:1c:2b:06:06:bf:e8:a7:8a:18:d6:3c:a8:
         fb:02:64:4a:41:14:18:6d:0e:ed:46:b8:a2:c3:f9:79:e6:29:
         e8:a1:f2:cb:6d:fe:b0:fd:03:0e:95:96:72:23:3a:79:6d:19:
         55:e2:30:f1:89:86:b2:1c:06:51:32:ee:7a:8f:ff:9a:4a:73:
         8d:e6:09:03:fb:34:8f:c3:5c:7a:46:c3:a5:e9:69:a5:6e:7f:
         19:c1:ee:0d:b5:db:e5:16:0e:d7:32:5f:b4:c9:b7:77:d4:b1:
         49:39:9b:29:9c:dc:75:d9:e4:4b:c6:05:7d:20:09:6f:c0:84:
         da:1f:3e:90:2b:d1:62:02:91:6d:a9:02:56:da:f6:73:a2:37:
         bb:6a:d1:5e:ea:50:bd:61:a5:17:3e:64:b3:4e:72:c7:94:c3:
         c6:46:ac:e1:f4:7f:db:1a:03:d5:20:e3:c9:c2:68:52:7f:dc:
         7e:93:9a:15:3e:21:8b:b6:13:3c:7a:ef:83:25:d1:9a:0f:e7:
         c7:70:d2:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM1QzgxMTAvBgNVBAUTKEFCOEE3NTE0MTdGRjY3RkM5OTQ4RTNENDI3Qjg0REQ2
NTkzRTkxODMwHhcNMjUxMTAyMjMxMjMxWhcNMjUxMTA5MjMxMjMxWjAYMRYwFAYD
VQQDEw02OTA3ZTU1Zi0xZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAynMshvrsgHq9gj3Gcp1KLkHYeBkd9sFYw6VEOGe87fc3HWfKI8cLfQUENwDw
wGKsXZoauxYkPyzAeqMTnFSZnmTb4OLX372VGkmAdDBn1pX+bOFQo6yMG4h0+f8r
wvsZtDL6vZ1h+LMVmzG+LiVQp0fIZd/hl0v+VG3l1flfggNsCRL0orVQ58RMF5D5
UzY9bna6PrDae2OzEjUpFUXQ7e9nxmYxkRg9N5GtzC0mb7FHOtGMIg7+SWaXGIK6
XBua7GU6HebEYC0QCJPbBgWVVC7Zs+Ppb8ypyLHc7zASroRSqt5Hjx2tq9Fq5ZIq
VHpK6pj516+RWR9TGb3q8uWhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMA6apu
/5BeHv8m6n3BTkUclIQhMB8GA1UdIwQYMBaAFKuKdRQX/2f8mUjj1Ce4TdZZPpGD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzVDOC8zREVGNDVDRUY1
RTUxMUVCQUU5NDY0MzdDNEY5QUUwMi9xNHAxRkJmX1pfeVpTT1BVSjdoTjFsay1r
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E0cDFGQmZfWl95WlNPUFVKN2hOMWxrLWtZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzVDOC8zREVGNDVDRUY1RTUxMUVCQUU5NDY0MzdDNEY5QUUwMi9xNHAxRkJmX1pf
eVpTT1BVSjdoTjFsay1rWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCP8+JnIIG1XE8Rma03quJlH+LbQzakynZBhfDBuI5S1So0BrZAZW0c
/R/J688gIU3txqMNJGoBf7wmlrccKwYGv+inihjWPKj7AmRKQRQYbQ7tRriiw/l5
5inoofLLbf6w/QMOlZZyIzp5bRlV4jDxiYayHAZRMu56j/+aSnON5gkD+zSPw1x6
RsOl6Wmlbn8Zwe4NtdvlFg7XMl+0ybd31LFJOZspnNx12eRLxgV9IAlvwITaHz6Q
K9FiApFtqQJW2vZzoje7atFe6lC9YaUXPmSzTnLHlMPGRqzh9H/bGgPVIOPJwmhS
f9x+k5oVPiGLthM8eu+DJdGaD+fHcNIn
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:19:31 2025 by rpki-client