Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File:                     q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier:          hEMQHvu/eMigyHr0xYMckic1iUXplycjohuBW8K0pNI=
Subject key identifier:   13:70:AD:91:F5:0D:5D:50:EF:30:1F:65:3F:0F:12:3F:19:0D:67:89
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       0788
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number:          0773
Signing time:             Mon 27 Oct 2025 01:12:09 +0000
Manifest this update:     Mon 27 Oct 2025 01:12:08 +0000
Manifest next update:     Mon 03 Nov 2025 01:12:08 +0000
Files and hashes:         1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: 8ScIwjofLmO1j88E6w6ClGuNlBR+S01i9ybBn55rehI=)
                          2: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: TlDhnldYuakAwxJhMCiNbVx6zqDuO+DOexXHVfVHcu4=)
                          3: 56D3C71687AB11F095613811C4F9AE02.roa (hash: aD2CLMizmkDNhBVFcvaNkcRkyod1i+1AjvAvs5tf+7Q=)
                          4: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: R7FrPdkL1ySrHNC5nrqzQKSqKbGci3RcVPsSdrI/vVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 01:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: Oct 27 01:12:08 2025 GMT
            Not After : Nov  3 01:12:08 2025 GMT
        Subject: CN=68fec6e9-8f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:b0:69:f7:b2:6c:91:b9:e8:61:cc:c4:b9:
                    7d:17:38:81:1e:65:01:4b:33:51:b1:68:fb:46:7a:
                    5c:07:49:28:38:72:bb:a7:b9:57:c2:00:9a:34:c8:
                    29:dc:88:51:00:cf:62:a1:70:a6:11:ff:aa:b6:b1:
                    a5:d0:f2:45:8e:65:2e:c5:a8:7a:a0:62:ed:08:d5:
                    74:19:01:17:f3:06:53:8f:c5:c7:36:a3:96:bb:49:
                    1b:d1:d5:9e:d8:57:fe:9c:4c:be:a5:86:de:1e:f5:
                    5d:aa:2d:4f:d9:31:6a:a0:b6:bd:2f:1e:1f:c6:64:
                    00:05:27:42:a6:0e:e5:a8:17:28:a1:9d:0f:3a:61:
                    eb:10:d0:f3:9e:ec:11:ce:7d:d0:9b:f2:06:03:56:
                    7c:bf:ae:eb:8d:79:38:ef:0e:0e:92:39:ea:a2:f6:
                    de:4c:4b:21:74:bc:9a:12:8c:2b:41:de:7d:7a:89:
                    8f:ef:19:ad:ee:68:52:37:1e:7c:1c:2b:49:0e:35:
                    72:0f:37:ec:b1:40:27:9e:af:ec:59:68:76:0a:79:
                    c0:43:ae:d3:22:a7:4c:5b:e9:ab:a9:45:4a:20:69:
                    bb:c6:82:8f:dc:1f:5b:7c:29:37:4a:65:cd:05:3a:
                    3e:e5:e3:7d:f8:13:37:8b:ef:4c:d5:9e:24:07:b4:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:70:AD:91:F5:0D:5D:50:EF:30:1F:65:3F:0F:12:3F:19:0D:67:89
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:8b:8f:9b:97:a0:1c:d0:d8:4c:57:62:01:8f:7a:39:fb:
         52:a2:dc:4f:d5:0b:ba:79:51:44:c3:93:f6:cf:ca:cc:8e:31:
         cd:01:7d:4f:b8:8f:ea:51:4f:bf:70:b8:b2:4f:a8:fd:64:16:
         af:03:73:1b:e0:01:21:1f:d9:ab:69:2c:7b:a2:e4:92:87:b2:
         c1:16:d8:1d:bf:78:a7:af:48:0f:24:e7:62:04:ef:6d:29:8b:
         02:1a:c1:01:a2:ee:09:53:ce:6c:5c:fb:b5:54:44:c2:be:3d:
         90:e6:25:13:e6:06:b7:a0:f1:95:c7:e4:42:24:aa:a5:ef:56:
         73:d1:ee:6b:62:5b:48:f5:0c:a2:45:00:a3:8e:1a:fb:de:11:
         87:ed:a8:4e:db:c1:93:63:77:8f:bf:54:3f:14:e3:d1:e1:c5:
         6c:2b:87:98:08:e4:bb:5b:0f:81:e9:16:0a:52:14:82:f6:7d:
         75:37:49:de:1d:e6:54:a1:ee:77:cd:f1:40:ac:31:81:8d:ce:
         13:96:56:97:33:36:47:da:67:bb:4d:76:a8:68:c6:48:ea:7f:
         e1:11:13:c3:98:4e:22:1d:fe:87:78:91:58:94:e2:e0:68:9d:
         d9:f8:51:ff:71:2d:8d:3a:b0:5e:9e:a7:61:ce:99:d1:29:db:
         6b:df:4e:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVGMTUxMTAvBgNVBAUTKEFCNTM1RTEzMjg4NEJDQTM0NUY3QUY2OTEzQUIwQTM5
Nzc2NUU3QTkwHhcNMjUxMDI3MDExMjA4WhcNMjUxMTAzMDExMjA4WjAYMRYwFAYD
VQQDEw02OGZlYzZlOS04ZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxVOwafeybJG56GHMxLl9FziBHmUBSzNRsWj7RnpcB0koOHK7p7lXwgCaNMgp
3IhRAM9ioXCmEf+qtrGl0PJFjmUuxah6oGLtCNV0GQEX8wZTj8XHNqOWu0kb0dWe
2Ff+nEy+pYbeHvVdqi1P2TFqoLa9Lx4fxmQABSdCpg7lqBcooZ0POmHrENDznuwR
zn3Qm/IGA1Z8v67rjXk47w4OkjnqovbeTEshdLyaEowrQd59eomP7xmt7mhSNx58
HCtJDjVyDzfssUAnnq/sWWh2CnnAQ67TIqdMW+mrqUVKIGm7xoKP3B9bfCk3SmXN
BTo+5eN9+BM3i+9M1Z4kB7SWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNwrZH1
DV1Q7zAfZT8PEj8ZDWeJMB8GA1UdIwQYMBaAFKtTXhMohLyjRfevaROrCjl3Zeep
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYxNS9GRkVEMjc5NDNB
OTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZLTkY5NjlwRTZzS09YZGw1
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ExTmVFeWlFdktORjk2OXBFNnNLT1hkbDU2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NUYxNS9GRkVEMjc5NDNBOTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZL
TkY5NjlwRTZzS09YZGw1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGfouPm5egHNDYTFdiAY96OftSotxP1Qu6eVFEw5P2z8rMjjHNAX1P
uI/qUU+/cLiyT6j9ZBavA3Mb4AEhH9mraSx7ouSSh7LBFtgdv3inr0gPJOdiBO9t
KYsCGsEBou4JU85sXPu1VETCvj2Q5iUT5ga3oPGVx+RCJKql71Zz0e5rYltI9Qyi
RQCjjhr73hGH7ahO28GTY3ePv1Q/FOPR4cVsK4eYCOS7Ww+B6RYKUhSC9n11N0ne
HeZUoe53zfFArDGBjc4TllaXMzZH2me7TXaoaMZI6n/hERPDmE4iHf6HeJFYlOLg
aJ3Z+FH/cS2NOrBenqdhzpnRKdtr306x
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:50:11 2025 by rpki-client