Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File:                     QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier:          T3IKxtW9olgjbJWOheVXxZ8J9jNsjM1LIX6O5kqhHpk=
Subject key identifier:   B9:1B:C5:DD:BD:E1:61:23:C7:CC:4B:06:F7:22:A8:1B:A5:1A:FC:E5
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer:       /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number:          0204
Signing time:             Wed 05 Nov 2025 02:26:35 +0000
Manifest this update:     Wed 05 Nov 2025 02:26:35 +0000
Manifest next update:     Wed 12 Nov 2025 02:26:35 +0000
Files and hashes:         1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: cIsKrSLQ/HFkxaMzOWNOcdTLaT/6uLy0N/LE9PJt7m8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
                          rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
        Validity
            Not Before: Nov  5 02:26:35 2025 GMT
            Not After : Nov 12 02:26:35 2025 GMT
        Subject: CN=690ab5db-4374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:c1:7c:ad:b6:ce:59:32:d5:56:e4:fd:eb:
                    19:33:1e:27:27:9f:c4:9c:77:7c:4a:18:63:62:37:
                    87:33:3c:1d:8a:72:f6:02:79:ff:93:b6:0a:09:b2:
                    de:f6:c6:b7:4f:15:68:11:01:ee:b2:ea:6b:ff:84:
                    e2:99:93:4f:ed:4a:bc:ad:0a:49:af:ca:07:55:99:
                    cb:c7:49:e0:bd:0a:01:b4:f1:02:c3:ed:55:ea:85:
                    f4:6a:37:7e:19:a3:4d:f1:ed:43:72:04:a9:d2:2f:
                    14:e2:c6:96:21:3e:cc:0e:7e:3f:0a:a4:fe:ce:e8:
                    da:d5:b4:b3:c9:f9:89:03:e2:40:27:d4:24:4c:b1:
                    5b:72:a5:1e:d0:bd:76:cf:fa:b6:6f:69:6f:24:2f:
                    f1:0f:7d:f7:b9:a1:cc:87:7d:64:c0:60:30:97:b1:
                    8d:ea:1b:66:20:4b:a2:6b:86:52:e9:f6:54:1a:cf:
                    a1:52:b3:99:bc:12:d9:39:83:7d:7a:dd:08:31:c2:
                    c5:f6:7c:89:c2:ea:80:06:33:ea:c5:73:ef:97:ef:
                    23:38:8a:cc:df:fa:e6:2a:18:1c:3a:2d:e6:22:2f:
                    ea:f0:e4:aa:56:90:10:8b:af:1b:ff:92:0b:4c:3a:
                    7f:94:62:07:00:a6:fe:0a:3e:15:8e:10:dc:a8:f8:
                    89:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1B:C5:DD:BD:E1:61:23:C7:CC:4B:06:F7:22:A8:1B:A5:1A:FC:E5
            X509v3 Authority Key Identifier:
                keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:9f:0d:3b:77:de:ab:31:0e:14:51:50:80:4f:5e:8f:84:
         f1:64:d4:7e:71:2a:b1:6e:a0:99:31:76:e9:56:c6:1a:c7:3e:
         5f:5b:d9:2e:be:71:7a:af:23:38:d4:e1:51:a7:81:2f:37:77:
         48:ee:f8:9d:82:63:a4:22:df:29:ad:af:80:ea:c1:06:be:84:
         37:85:c6:60:c5:74:84:30:36:f7:dd:57:2f:76:25:87:4b:85:
         03:b8:82:a7:91:eb:18:05:15:78:20:82:52:99:4c:4e:03:1c:
         58:06:49:e4:fc:8e:03:28:2b:80:7e:a2:1d:45:08:7f:15:12:
         d3:70:db:bc:bc:25:97:63:be:71:6c:85:20:39:98:22:86:43:
         f1:00:11:11:a2:17:0f:ca:65:ca:f0:43:dd:63:a7:ce:ee:21:
         07:14:2e:89:ba:00:29:73:38:be:be:6f:d3:0a:c8:62:3a:19:
         ae:05:ea:77:86:5a:32:a4:6d:7d:3d:dd:55:33:eb:61:5e:4f:
         24:1e:7a:7e:95:c7:89:c6:99:a2:9d:6e:bf:31:2c:b6:16:83:
         f9:0d:9d:3b:b1:21:03:e1:26:80:a2:c8:8f:94:41:5d:6f:6e:
         15:0f:36:7b:f0:2b:45:72:53:ac:bf:3e:aa:ce:35:ba:78:a2:
         5f:a8:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:54 2025 by rpki-client