Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
File:                     QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft (raw, json)
Hash identifier:          jzVgFpD6Z2vr1USjW15iGNspF1tukZ55IkvBY8/1Bv4=
Subject key identifier:   25:9E:61:D5:E1:76:E7:81:58:08:11:7C:86:83:B1:A0:29:5C:3A:7E
Authority key identifier: 41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03
Certificate issuer:       /CN=A914740F/serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
Certificate serial:       0892
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
Manifest number:          0881
Signing time:             Thu 18 Sep 2025 20:52:07 +0000
Manifest this update:     Thu 18 Sep 2025 20:52:07 +0000
Manifest next update:     Thu 25 Sep 2025 20:52:07 +0000
Files and hashes:         1: QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl (hash: G462TJ/skcLJQaCCD+VoilqKqlfFigTtTe0gTecXkgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl
                          rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 20:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914740F, serialNumber=415CDFC3E6CE653306EA95AD167D2E8975C5E403
        Validity
            Not Before: Sep 18 20:52:07 2025 GMT
            Not After : Sep 25 20:52:07 2025 GMT
        Subject: CN=68cc70f7-6f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:73:18:c4:0a:ee:42:0a:4b:30:3a:21:5e:
                    8a:de:b9:d2:f4:75:b1:17:80:07:45:ee:36:b4:cd:
                    56:e3:6c:1e:5c:33:fa:7f:10:60:0b:cb:c3:5e:f0:
                    e8:51:e9:c4:b9:17:52:f4:f1:21:f0:df:a7:cd:76:
                    c1:97:5f:4b:92:4a:6c:0b:d0:a0:7d:f8:7c:82:db:
                    ae:06:84:ab:d3:6e:d9:77:92:38:27:f7:03:b6:eb:
                    06:e4:7f:9a:a1:a3:e6:af:8f:77:3a:d2:36:a7:ec:
                    95:13:0e:ba:c1:96:91:f9:39:2a:57:93:1e:bf:69:
                    65:05:db:04:f4:da:5c:b5:69:0e:63:02:6b:67:3f:
                    4a:ae:d3:de:30:3e:e1:0d:48:cd:35:4a:b3:d8:15:
                    13:b2:0c:e1:6a:39:80:45:ee:52:16:1f:28:28:fd:
                    72:85:8a:38:71:32:1a:dc:be:35:ee:a6:22:f9:85:
                    65:d3:7d:41:c7:61:60:cd:a8:bc:81:43:95:8e:c4:
                    d4:84:c6:05:2c:32:64:87:1e:1d:8b:bd:ae:9d:7d:
                    ac:50:33:56:69:49:5e:63:52:af:4f:2d:cd:30:08:
                    f8:3d:23:07:bc:a4:85:9c:d9:39:86:45:d3:b9:32:
                    ff:89:db:a8:33:f9:ce:af:08:64:39:fc:5d:c2:c6:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9E:61:D5:E1:76:E7:81:58:08:11:7C:86:83:B1:A0:29:5C:3A:7E
            X509v3 Authority Key Identifier:
                keyid:41:5C:DF:C3:E6:CE:65:33:06:EA:95:AD:16:7D:2E:89:75:C5:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVzfw-bOZTMG6pWtFn0uiXXF5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914740F/4142D50ECC9411EA9B2DF753C4F9AE02/QVzfw-bOZTMG6pWtFn0uiXXF5AM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5c:aa:98:3f:74:0b:84:68:8b:eb:d9:bd:6f:00:81:a5:6c:
         fb:42:cf:f6:a0:28:33:df:11:f7:a4:22:13:93:a0:2c:dc:ab:
         5a:5f:06:87:f9:57:b0:15:8f:d7:9f:44:40:31:50:0b:a7:6b:
         5e:00:c0:41:b3:6a:eb:eb:8b:3a:ab:8f:6e:94:5b:6a:f5:c4:
         4f:7e:9a:d2:b1:cb:ca:4e:cc:9c:44:7a:44:56:30:fb:ab:9b:
         e7:2e:a5:a3:45:35:ac:a4:73:7a:41:e4:b5:fa:39:89:92:1e:
         22:ff:20:d3:5c:03:80:6d:c1:c0:83:de:61:a0:bc:95:af:39:
         e1:ff:ef:0e:43:01:e6:56:68:a6:2a:39:f3:07:b1:80:7c:9d:
         38:dd:ee:2f:a6:e3:d3:7d:d4:fd:6e:0f:31:65:02:49:ea:a6:
         b3:8e:74:9c:41:19:b8:de:2d:1b:68:58:26:4c:2e:2a:f6:b2:
         bd:19:64:53:1c:a4:2b:eb:1e:b7:1e:29:91:05:ac:d6:e2:ae:
         c6:05:a2:45:97:95:d3:b2:8b:fc:97:29:49:48:ea:4f:29:93:
         e3:75:1a:03:e8:a6:b6:e3:de:b1:d4:ad:53:df:7b:b1:ca:3e:
         8d:4d:97:e4:27:e2:76:51:d0:c8:8e:26:35:7c:35:22:96:d7:
         cf:1d:87:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:31:16 2025 by rpki-client