Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
File:                     _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json)
Hash identifier:          z2woEfTsPiWcDj2Y/6qZcgnwWHBRDoAt/mDqnr7yqoU=
Subject key identifier:   C3:75:B9:50:08:A4:CA:88:BF:59:06:75:C6:4B:8C:88:81:BD:C9:9F
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Certificate issuer:       /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial:       08D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
Manifest number:          08BA
Signing time:             Sun 02 Nov 2025 20:31:00 +0000
Manifest this update:     Sun 02 Nov 2025 20:31:00 +0000
Manifest next update:     Sun 09 Nov 2025 20:31:00 +0000
Files and hashes:         1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: efLEH76qqkL5iHl6U88LFC2sCLhsYiHjv/TJVVyceB4=)
                          2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: /p1nc+7VxWl9wJcQ4iUMoK6PHm48jxAJkzvga1eMyM8=)
                          3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: yiCrf2CBs1DTx9LePbZGWl/avup1Zfij9Oz3lNKWDkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
        Validity
            Not Before: Nov  2 20:31:00 2025 GMT
            Not After : Nov  9 20:31:00 2025 GMT
        Subject: CN=6907bf84-9238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:91:07:20:6d:fc:63:9e:93:41:5b:94:5f:
                    77:01:e9:24:61:97:bb:d6:f0:db:92:19:01:93:a9:
                    33:79:fc:78:c2:dd:bd:ba:9b:e9:be:2b:fb:f7:72:
                    4b:e0:22:d7:d0:bd:ad:28:03:f4:51:1a:d1:f3:49:
                    a2:36:51:02:45:79:b2:9e:23:12:c9:74:27:ef:17:
                    30:b8:d7:a8:d5:e1:e1:08:ed:1d:54:5b:be:83:2d:
                    74:0d:6d:e1:2a:8a:3f:04:de:58:81:6f:43:83:2d:
                    33:71:8f:32:43:82:02:ba:5f:84:53:df:f5:02:4d:
                    73:07:63:9c:68:be:20:8b:b1:32:ce:8e:a1:e7:8e:
                    26:04:d1:25:43:63:30:d3:67:51:6d:5a:14:c8:8f:
                    96:e1:e9:7b:ec:c3:96:cf:e2:e0:db:15:7d:32:29:
                    66:aa:ff:b4:f0:aa:8f:26:23:a4:6c:71:ba:60:11:
                    d8:e8:67:08:3b:b5:ee:fb:28:0f:6a:c4:0c:f8:92:
                    7a:63:76:d9:34:8c:7b:35:56:f0:97:4c:d3:77:98:
                    da:1a:4c:5c:4a:a4:6b:62:52:72:5c:2d:b7:53:6f:
                    71:e2:d8:12:9e:4c:7a:7f:e1:d8:0a:e5:21:cd:d3:
                    c0:53:68:6c:a8:a9:ef:66:f7:c4:59:18:f4:16:34:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:75:B9:50:08:A4:CA:88:BF:59:06:75:C6:4B:8C:88:81:BD:C9:9F
            X509v3 Authority Key Identifier:
                keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:d0:83:78:46:fa:f9:bb:46:cb:ed:9b:dc:d9:ad:81:8d:
         37:7f:dc:38:8a:77:c3:69:0e:b7:4b:2d:8a:1a:6d:8d:a9:38:
         59:1c:02:22:d7:96:8c:07:1e:a5:fc:a4:ce:34:0f:47:ad:10:
         34:32:5c:21:b6:9d:78:04:52:ba:ce:9d:50:a2:4d:f1:fc:47:
         f1:53:bf:4d:d5:f8:e6:4a:3c:1a:c0:32:d4:42:b3:f9:36:fe:
         17:a3:cc:4f:45:25:a3:04:61:14:34:b0:99:09:cb:c7:62:ed:
         f1:f8:99:c9:10:57:20:ce:8a:55:85:d7:b6:dd:2d:08:ca:da:
         e0:e3:14:c3:26:d5:39:44:37:14:d9:b5:fb:08:ae:80:ee:a0:
         dd:48:b0:bc:7f:d3:1d:8a:fa:4e:8f:2e:c6:9e:f9:1a:1e:35:
         62:8d:ac:73:93:eb:c5:c2:f9:d2:21:c4:85:38:e2:4c:4a:a7:
         36:98:07:2e:6b:1a:58:29:0f:ca:65:c5:8b:f0:2c:35:86:45:
         c5:fa:16:84:22:4c:27:2b:dc:a3:09:1d:92:05:67:e9:da:07:
         f3:f6:e4:c8:11:93:5f:94:41:c0:61:90:8c:a8:c8:08:c8:7a:
         91:76:83:d7:f3:ae:bf:63:d4:03:2b:06:cd:f7:9b:57:f3:25:
         b8:77:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:31:47 2025 by rpki-client