Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File:                     qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier:          9mawQahS3ujbK4K8wGdYx69ysCgx7XOccFMh41/L9no=
Subject key identifier:   32:96:6E:87:8D:B2:50:0C:BB:6C:38:85:11:03:8A:CB:AD:92:78:5F
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       08EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number:          08D3
Signing time:             Mon 20 Oct 2025 21:17:58 +0000
Manifest this update:     Mon 20 Oct 2025 21:17:58 +0000
Manifest next update:     Mon 27 Oct 2025 21:17:58 +0000
Files and hashes:         1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: qpsvlfaw+7gjSGn2y4wy9xrySVzp/rOitwyCOgggcYw=)
                          2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: gExqM4aUKrBllmPpMCtcVSZCHfPpzfLPu3nuxUT8Qqs=)
                          3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: dLzX51Se2cwYVIN8Vmr+uVPw3hseY/U8FombHRxTBaQ=)
                          4: EFE689283FDE11EE8EC3E546C4F9AE02.roa (hash: ggS/okJOXO20WJl9u64hoMFD/RxIwy0K1iG0hR/vSB4=)
                          5: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: mKgGrrGBQwDLJBId/uOdKFjLBgmwhREF0Lpo0O+T3TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
        Validity
            Not Before: Oct 20 21:17:58 2025 GMT
            Not After : Oct 27 21:17:58 2025 GMT
        Subject: CN=68f6a706-b547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:fb:81:39:86:c5:36:2c:f9:39:39:66:bc:
                    9d:62:b4:1b:eb:f1:65:38:4d:5e:ae:2b:00:3e:96:
                    5c:d1:73:7f:63:4b:55:19:0c:32:ac:5a:a7:2e:ef:
                    61:e4:07:6e:ad:e7:f8:cc:59:66:83:ef:d9:af:19:
                    d5:1c:33:58:69:c8:a2:1a:9e:4f:62:69:47:6b:94:
                    66:20:6c:04:ab:40:25:9d:30:ad:db:1a:66:7c:53:
                    84:e8:72:02:63:e4:4e:41:7b:40:0c:28:71:2d:3b:
                    94:23:a0:ec:76:ee:13:04:aa:fc:d3:6a:3d:12:90:
                    44:67:9b:f6:c3:c3:af:26:12:92:be:81:80:89:17:
                    65:f9:62:23:f5:86:b4:dc:36:84:be:df:6e:1f:a6:
                    db:83:14:19:f3:17:a6:a1:87:1e:20:c6:6a:76:52:
                    44:bc:8b:ff:9b:40:ce:36:9f:bb:e4:ae:db:f9:1b:
                    00:3e:04:0d:aa:54:ce:cc:2c:4a:d5:46:a9:3a:20:
                    e8:2b:fc:5f:26:cf:f6:00:fc:69:19:99:eb:f3:85:
                    57:fd:0b:dc:4b:40:0b:e9:6e:7f:7b:ba:60:b1:a3:
                    0c:77:c7:05:1f:ee:56:c5:b4:d8:57:4b:1f:3d:dc:
                    12:39:b6:a8:f0:2b:71:82:7c:eb:2c:38:32:08:e8:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:96:6E:87:8D:B2:50:0C:BB:6C:38:85:11:03:8A:CB:AD:92:78:5F
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0b:09:fd:a8:6c:48:b7:3e:c4:9d:96:b0:8e:4b:19:16:5b:
         68:f0:c3:2e:1a:d5:03:b6:7c:04:0d:91:ec:89:57:19:f1:8b:
         ce:ed:14:f3:0a:9d:84:9b:b5:06:8e:81:70:3d:9e:d4:2d:d5:
         5c:86:88:35:1b:ec:26:f4:c3:b2:a7:84:29:6f:a3:76:4c:d1:
         0c:df:cb:ac:79:59:84:b9:b8:95:b0:3c:31:d3:36:24:5f:66:
         5b:c9:fb:aa:8a:bf:5b:9e:ec:ab:e8:3f:af:be:00:96:8a:21:
         95:2e:9e:a8:dc:50:11:83:04:8c:15:b0:06:0e:9a:18:fe:a0:
         10:ff:66:7a:a7:18:ac:96:61:59:a9:20:7a:0f:03:49:c2:8e:
         1b:eb:b3:3a:78:79:24:64:44:f4:56:4f:21:3f:50:64:62:ee:
         4a:ad:da:d4:bd:5b:42:a8:b0:af:69:53:95:82:04:43:04:b5:
         57:00:c2:05:ba:3e:03:b3:2e:61:89:30:cd:b1:9d:2e:8d:01:
         f1:2b:67:c6:e0:7e:f0:c4:29:cd:51:73:3b:57:8f:df:bd:80:
         84:fd:10:04:8e:6d:cd:67:bc:a0:33:06:39:59:79:7f:f5:a0:
         3b:f8:2c:d9:a4:c7:f8:da:ab:cb:dd:22:03:be:af:95:8d:af:
         81:1b:71:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:11:47 2025 by rpki-client