Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
File:                     QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft (raw, json)
Hash identifier:          T1hX0W4w1inFiRZ7+CMcyZ5hgP/ghgX8R6WB8JoTeC4=
Subject key identifier:   33:EB:B7:46:6D:A3:75:27:77:CC:0B:A7:FF:7F:A1:1A:E6:9A:87:54
Authority key identifier: 41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90
Certificate issuer:       /CN=A9113B62/serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
Manifest number:          86
Signing time:             Wed 17 Sep 2025 07:17:20 +0000
Manifest this update:     Wed 17 Sep 2025 07:17:19 +0000
Manifest next update:     Wed 24 Sep 2025 07:17:19 +0000
Files and hashes:         1: QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl (hash: WJKThaQbHttqHNLkR+ySFmJz8TNt0rY9A2FLDWeMJVw=)
                          2: B8EBF604C6E911EFA1D4BA2BC4F9AE02.roa (hash: WSip5oZr/nzKqOFRarIzVKDUM0vv09DRdF9A4kj+F5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=41A75E057E25055F14A89F530C78E223B1F0F590
        Validity
            Not Before: Sep 17 07:17:19 2025 GMT
            Not After : Sep 24 07:17:19 2025 GMT
        Subject: CN=68ca607f-1841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7b:55:a9:96:d7:4d:f7:d8:42:e9:ea:5e:36:
                    53:8c:4c:c8:dc:18:0b:33:f3:08:41:ea:c1:45:ee:
                    ab:f8:8f:cb:a8:84:4c:61:65:8c:80:ad:0b:f9:e0:
                    da:26:af:a5:f8:d7:e2:01:5c:d3:4d:f9:b9:9d:fb:
                    ce:e6:c3:ba:d4:32:c3:27:86:90:fe:8d:6e:b3:23:
                    6e:90:18:4e:15:04:c1:91:41:83:47:bd:2c:13:4b:
                    63:9b:87:f9:54:a9:5b:94:78:c0:55:d6:31:89:10:
                    77:16:43:3f:2f:21:63:e5:86:26:91:6e:6d:44:95:
                    14:7c:a4:90:a2:a4:a1:b2:5e:4c:93:18:d7:8b:0f:
                    fc:d2:02:1b:12:0c:ac:bd:08:3a:76:d7:57:96:ed:
                    72:27:21:2a:3b:d5:c2:06:e3:81:ad:03:ee:09:2e:
                    7f:13:11:f0:f3:ea:be:04:a8:01:f2:ef:85:c5:2c:
                    c9:5a:9e:1a:43:6b:04:fd:d4:5a:e5:d2:e7:78:15:
                    bb:4c:af:dc:a7:4f:06:88:e8:ff:5a:c0:28:9a:9f:
                    ae:9d:5e:84:a4:44:c6:83:e3:2d:0d:a4:78:57:46:
                    11:f9:88:e1:48:13:8e:7d:d6:57:fb:86:c3:40:b9:
                    66:26:6d:e2:2e:4d:bf:60:93:96:11:6c:35:d6:c0:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EB:B7:46:6D:A3:75:27:77:CC:0B:A7:FF:7F:A1:1A:E6:9A:87:54
            X509v3 Authority Key Identifier:
                keyid:41:A7:5E:05:7E:25:05:5F:14:A8:9F:53:0C:78:E2:23:B1:F0:F5:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/2E8A754AC6E811EFBB520B0DC4F9AE02/QadeBX4lBV8UqJ9TDHjiI7Hw9ZA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f8:48:4a:01:41:46:20:87:b3:b1:11:48:1b:f2:e0:35:8b:
         f4:d6:0e:f8:6a:8f:fb:85:c4:af:53:47:05:c9:c7:c4:64:43:
         55:20:97:3f:a6:49:49:06:2d:09:4f:e1:5a:6b:fd:fc:30:c0:
         84:3b:28:72:b5:37:fe:a1:dd:3a:38:ca:26:9c:fd:30:10:62:
         a8:4a:d8:9b:60:ab:71:bd:6b:81:17:f2:0e:6e:3b:5c:95:3c:
         79:4c:a5:3e:4e:43:91:a7:98:97:60:a2:4f:b9:24:84:92:54:
         b2:d2:c2:63:ce:4d:40:81:b9:5b:b9:1a:81:56:b7:79:02:8c:
         46:a2:23:8a:aa:bd:9e:3d:5c:03:24:fb:a6:ef:47:81:0e:01:
         ed:d5:d7:fc:11:4c:4c:08:e3:a7:86:86:47:0d:a5:79:99:41:
         4f:51:96:9a:af:e0:51:5b:b0:0a:d7:2f:0e:59:5b:96:8a:db:
         00:69:63:00:e8:27:eb:93:3f:8f:70:df:91:9a:3a:22:37:b0:
         84:05:eb:1a:6d:27:e8:e6:39:2e:58:72:40:d0:c8:8f:50:74:
         b8:da:c4:e7:e0:a9:8d:4e:e4:5e:da:2e:9d:76:fd:b1:cc:6d:
         0f:f2:08:0c:57:55:14:0d:8a:7a:a2:f4:38:5a:66:87:7b:e1:
         b1:8c:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:42:26 2025 by rpki-client