Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
File:                     qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json)
Hash identifier:          GsyjXz+i4nApsoSGJJ61GgqA71QyPxV3EpPGm2oaWoU=
Subject key identifier:   10:C1:FF:9C:6A:D5:CA:FF:CD:58:AD:E2:36:92:D4:09:F1:77:90:B0
Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
Certificate issuer:       /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Certificate serial:       0B4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
Manifest number:          0B4F
Signing time:             Tue 04 Nov 2025 19:17:24 +0000
Manifest this update:     Tue 04 Nov 2025 19:17:24 +0000
Manifest next update:     Tue 11 Nov 2025 19:17:24 +0000
Files and hashes:         1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: 2Egj4GKp4sgzf5nR1VkEc+Buid7TaYH6pul4Hkauiho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2895 (0xb4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
        Validity
            Not Before: Nov  4 19:17:24 2025 GMT
            Not After : Nov 11 19:17:24 2025 GMT
        Subject: CN=690a5144-418d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:45:59:4b:4e:10:26:3e:e8:10:f1:fd:34:
                    b1:d5:15:6b:81:3b:e0:fa:c3:85:6f:af:ab:2e:e3:
                    7d:31:62:be:a7:37:af:c1:b2:d4:3f:95:cc:43:78:
                    86:8a:27:24:c9:8d:20:75:cb:cd:ea:4f:71:76:df:
                    6c:e8:1a:65:18:bc:41:ab:63:c2:c4:59:44:85:59:
                    a4:9c:cc:14:e8:8f:b2:19:de:ae:2e:7f:a5:e5:44:
                    e5:df:00:c4:9f:d7:32:8a:65:98:86:29:87:e0:08:
                    e6:86:e6:2c:d5:d9:6a:c3:d5:23:a7:d8:70:cc:2d:
                    85:25:a5:0c:5a:d1:17:fc:8b:37:72:08:5d:1d:84:
                    5c:6c:9b:54:66:9d:de:56:b8:81:a2:3b:5b:2b:d0:
                    ab:51:3d:99:9f:ff:0f:98:b1:5e:b5:77:4c:e5:db:
                    2c:a4:d4:13:20:4f:05:91:2f:aa:09:3f:8a:cd:36:
                    99:cc:eb:6c:19:ad:70:98:ab:e6:90:b5:79:64:2d:
                    3e:68:d0:38:9a:43:0d:e8:86:71:da:03:7f:70:a5:
                    8e:e8:67:f6:35:28:e6:dd:34:7b:5d:b2:ae:e8:0d:
                    8b:9f:35:dc:c8:e0:9f:33:c3:3d:d9:45:78:a6:d1:
                    37:a9:e8:e0:89:d5:e6:08:73:b2:8b:c7:ef:15:36:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C1:FF:9C:6A:D5:CA:FF:CD:58:AD:E2:36:92:D4:09:F1:77:90:B0
            X509v3 Authority Key Identifier:
                keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:00:88:40:f5:01:33:14:f6:d3:d2:c3:3f:15:9b:a9:8d:c3:
         c7:33:17:12:76:1e:8c:bd:6b:5d:44:68:61:fb:6a:3b:36:ac:
         df:6f:be:40:a0:71:a4:1d:0a:35:ff:e4:44:f3:8f:b6:d9:85:
         e1:9c:76:10:41:5b:2a:bb:32:3d:81:0b:7a:45:33:7a:f3:cf:
         83:e7:63:9d:89:60:61:df:18:55:6e:50:a3:a8:62:c2:22:db:
         a0:aa:62:b3:95:ac:72:b2:be:5e:25:35:ec:64:e4:97:f3:51:
         7f:af:52:99:2a:07:6b:2b:be:fa:71:6d:18:65:47:24:87:be:
         8f:46:b2:d0:b3:9a:d8:18:cb:d2:4c:fc:4f:7c:bc:33:24:cb:
         1f:98:1f:35:23:d7:97:30:b0:89:61:0b:e1:29:f7:92:b0:e8:
         bf:d2:44:1f:8d:c8:c5:32:f0:26:95:c5:42:11:13:84:75:1c:
         c6:8e:a9:b4:fb:17:f9:b6:03:97:57:d8:c0:c2:60:27:48:64:
         7b:1a:90:df:c0:8d:f1:36:dd:db:a1:14:f0:07:45:cb:75:00:
         5b:68:f4:ca:bb:23:c8:f8:e0:4b:c3:6f:ca:0c:97:29:19:a4:
         7e:c1:a5:44:9e:91:5c:1e:24:82:71:f4:1d:98:11:9a:8c:6f:
         4f:74:6f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:00:09 2025 by rpki-client