Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
File:                     Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json)
Hash identifier:          9BWyrrOc0aGimcUqoRQzkP6Fg7dEG5TwPeOYV38BFk8=
Subject key identifier:   44:B6:22:37:C7:6B:5C:9F:1C:18:EA:01:12:67:FB:FC:60:A6:A9:53
Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
Certificate issuer:       /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
Manifest number:          A8
Signing time:             Mon 03 Nov 2025 06:15:34 +0000
Manifest this update:     Mon 03 Nov 2025 06:15:33 +0000
Manifest next update:     Mon 10 Nov 2025 06:15:33 +0000
Files and hashes:         1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: nb/uUKMDLZQoT45WWLOZYIjQ+86PHJzotpSdlwftlEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
        Validity
            Not Before: Nov  3 06:15:33 2025 GMT
            Not After : Nov 10 06:15:33 2025 GMT
        Subject: CN=69084886-4a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:f7:cc:41:c6:f5:98:02:f0:ab:b3:6f:37:
                    b1:79:35:75:1e:1e:7d:2d:70:12:f1:c7:a4:ad:bb:
                    fe:8a:b2:87:19:1a:81:34:eb:40:e3:e1:d6:2c:14:
                    73:c7:64:1a:15:69:f4:05:ca:7b:d4:6e:a2:ad:7e:
                    2f:4a:ba:7a:97:71:3c:63:aa:3f:10:63:a2:18:ca:
                    d7:e8:35:4b:0a:e5:1f:df:67:dc:46:78:d2:b7:ba:
                    b4:8a:35:85:18:cb:ec:10:3a:56:77:3d:7c:f6:37:
                    8f:26:40:c8:96:54:23:76:60:34:f2:51:88:b8:d2:
                    d6:35:17:01:20:5b:d1:1d:c1:6a:3e:f2:5e:8d:b0:
                    c4:c4:f6:fd:29:b6:85:6f:e5:c3:80:f5:3e:9b:87:
                    9e:1e:92:c0:70:c5:1a:c7:7c:ed:a2:f1:fb:07:a1:
                    14:58:9f:12:b0:77:36:7a:87:85:8e:3d:e4:89:bc:
                    e7:19:19:66:e9:00:74:71:1e:27:2a:93:25:e8:a2:
                    b4:0e:ab:6b:ce:14:d0:63:6f:8b:b5:6f:94:7c:ec:
                    8e:57:40:de:ff:9a:34:83:b9:61:41:75:28:f1:2f:
                    b9:2e:db:02:51:39:bd:e6:6a:7b:c2:cb:ad:77:b9:
                    55:31:31:78:11:d8:29:6c:5c:26:22:24:a5:96:04:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B6:22:37:C7:6B:5C:9F:1C:18:EA:01:12:67:FB:FC:60:A6:A9:53
            X509v3 Authority Key Identifier:
                keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:20:1a:0b:59:af:f3:c6:08:79:d8:01:d6:50:d1:f6:a5:76:
         60:c9:a1:5d:52:c0:86:2f:0b:95:16:13:74:29:a9:e2:ec:36:
         23:18:5d:d7:be:1b:52:72:be:dc:a5:5a:93:92:9d:82:a8:14:
         8d:a5:c1:1c:d0:92:e7:ca:9a:d5:76:a4:7d:e5:1b:96:3f:b7:
         78:d1:c0:b7:bf:54:f3:ab:19:a4:3b:37:ab:d8:2d:1e:6f:9f:
         9a:f0:17:95:04:ca:57:a1:ad:b6:1a:65:4f:84:38:6f:63:fd:
         fc:a9:e8:36:fa:5a:9e:60:d0:3f:f4:91:2b:3b:fd:bf:ec:c2:
         fd:08:dc:5a:7e:47:71:6c:8a:b7:f3:89:ab:49:ba:81:5e:28:
         bd:cb:60:65:60:3a:12:e5:31:e9:48:e8:50:a0:7a:11:16:6f:
         7c:60:83:2f:c9:54:a3:7c:7a:b6:93:7a:49:fd:64:b6:b9:04:
         96:05:d9:99:bd:c2:30:02:16:c4:42:5c:7a:be:1d:89:29:16:
         71:a1:56:04:08:e8:ab:6f:f4:49:36:ae:ac:ea:48:64:14:00:
         ea:75:c8:9c:d8:14:33:5c:e6:7f:16:23:0d:7d:b9:5f:d2:34:
         95:8b:ef:e3:d6:84:2c:9e:83:b8:34:1f:7c:58:a0:6d:6d:69:
         44:00:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:39 2025 by rpki-client