Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          6A4PHDo+MPGpSpDr9eFstVJUR9S+BVF75bBkqW/9U44=
Subject key identifier:   1C:70:E8:89:A8:07:22:25:40:BC:F1:09:14:E4:C4:9A:61:9B:4B:C9
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0A0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          0A06
Signing time:             Sun 02 Nov 2025 19:48:16 +0000
Manifest this update:     Sun 02 Nov 2025 19:48:15 +0000
Manifest next update:     Sun 09 Nov 2025 19:48:15 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: FUQ/d/d+FasyVZz1UaH9hJ+KQjM55fUT/yrEJu8iFvs=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2574 (0xa0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Nov  2 19:48:15 2025 GMT
            Not After : Nov  9 19:48:15 2025 GMT
        Subject: CN=6907b580-4b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:a0:6f:6b:21:be:2b:0d:61:8d:ce:11:f7:
                    d9:89:80:6b:2b:49:6e:25:c3:d1:36:a5:37:2e:78:
                    13:45:a7:56:00:8b:e1:f5:cc:8e:30:9b:8d:a0:63:
                    e9:7c:da:b5:f3:69:ea:6c:23:12:18:fd:71:45:ec:
                    de:61:67:c2:c3:2f:5f:14:ee:b0:00:59:14:7c:33:
                    dd:72:de:1a:db:10:85:64:8e:c8:22:97:38:5c:d4:
                    e3:59:3f:ed:11:f5:6b:f3:7c:0c:d4:e3:1a:2a:a3:
                    79:4a:d5:8d:64:af:25:fe:dc:d2:ae:12:0b:f6:b3:
                    61:67:6a:6f:27:5a:4b:8b:a4:ab:d5:c7:84:67:98:
                    ad:92:b6:a4:71:00:72:f1:13:3b:04:56:51:1b:e7:
                    a9:33:d8:17:d5:5a:58:3e:93:3b:86:93:b2:3f:85:
                    18:58:01:94:77:c7:ca:95:ef:f9:06:6b:ff:cd:d6:
                    47:e3:4a:96:ba:78:02:83:91:45:5f:e2:db:18:73:
                    39:f3:42:e9:1c:48:ee:0e:c2:6f:09:e5:2a:f3:19:
                    71:f3:48:3a:97:2e:49:e3:9a:6d:18:b6:5e:38:ed:
                    81:41:fb:9f:66:48:b4:41:71:0d:14:a9:c1:79:6f:
                    2a:c4:d9:04:11:a6:02:6b:55:25:64:fb:09:73:ad:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:70:E8:89:A8:07:22:25:40:BC:F1:09:14:E4:C4:9A:61:9B:4B:C9
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:65:82:d0:bb:bc:3e:5e:4f:d8:ab:ed:03:aa:b1:4c:8b:6b:
         6a:9e:36:de:8a:ba:83:1a:42:5f:fe:06:ac:ce:19:59:3c:a9:
         93:1e:2c:43:77:65:ac:61:61:29:b9:65:17:b5:6c:ef:61:56:
         b2:01:fe:d9:c1:03:f8:58:82:88:89:af:38:7e:5d:49:0e:c8:
         5a:7b:f9:80:2d:e3:78:ea:42:64:d5:34:0c:16:c8:72:6f:16:
         9f:fa:9b:d8:a4:f0:b4:1a:58:57:a1:5c:8f:47:73:a3:b2:d0:
         87:02:ce:fd:50:ec:a5:6d:66:9f:32:a3:86:59:38:65:42:85:
         c5:41:52:b6:54:08:e2:8c:a2:45:97:4c:d1:9a:ce:6a:a6:69:
         48:13:00:9a:37:77:bd:e9:7d:3a:ec:fe:88:bb:e1:4a:60:49:
         68:8b:81:a0:ff:fe:37:16:ea:a4:e1:4d:dc:54:b6:4f:bd:06:
         74:7a:8b:30:3f:b7:b1:85:97:4d:b1:28:3f:5b:71:66:a5:a2:
         f8:d6:a1:71:f7:26:45:59:30:8e:c8:fa:54:11:15:a2:de:af:
         8a:50:4e:db:b5:12:7c:9d:2e:80:bb:a1:a6:d0:c4:c1:9f:1c:
         f0:0a:8f:77:50:94:16:92:07:ca:e8:98:08:7e:f0:44:40:6b:
         61:0a:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:32 2025 by rpki-client