Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
File:                     quimiBHXcVavSOB4FMqP1mI9mL4.mft (raw, json)
Hash identifier:          XEPaboP+e61PaP0b62TAkrvd5gZ00aUKEP7d826DV1A=
Subject key identifier:   6D:EE:04:5B:9A:B9:A3:85:85:2F:1E:39:54:7A:D8:03:06:B2:1F:C9
Authority key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE
Certificate issuer:       /CN=A914CDF9/serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
Manifest number:          5C
Signing time:             Mon 03 Nov 2025 07:06:23 +0000
Manifest this update:     Mon 03 Nov 2025 07:06:23 +0000
Manifest next update:     Mon 10 Nov 2025 07:06:23 +0000
Files and hashes:         1: quimiBHXcVavSOB4FMqP1mI9mL4.crl (hash: vN8gujLb6gKtxh7r8uEaoUpgyi3FQA++DlqwrWLqnVw=)
                          2: E45745342AC411F0B2B1822CC4F9AE02.roa (hash: vV4viCWjAxoxyHSeBD7Bmq6t4EgnYb1F/xaDHHxFuCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl
                          rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE
        Validity
            Not Before: Nov  3 07:06:23 2025 GMT
            Not After : Nov 10 07:06:23 2025 GMT
        Subject: CN=6908546f-0714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:49:35:b8:7e:f0:72:04:85:bc:3e:29:11:
                    78:0e:f8:5b:94:ba:40:14:a1:ec:95:a0:4f:9f:53:
                    be:2b:1f:e5:72:0e:08:b7:12:9b:7a:f1:f4:c8:68:
                    72:f8:0a:bc:66:a5:b9:93:0f:60:f5:e7:ac:e1:97:
                    80:3d:20:5a:35:5f:8b:55:04:09:1a:f9:98:72:2e:
                    c6:28:a6:5c:a9:c3:af:dd:dc:96:fe:04:af:4d:c7:
                    b0:02:3b:09:c0:2d:b9:eb:e8:18:89:c0:41:fa:67:
                    b4:64:4d:9b:ce:c5:34:a3:f3:b9:1e:50:1d:c4:df:
                    b3:3a:74:06:95:5d:48:ea:8d:3a:cf:1a:71:86:98:
                    b9:ef:b6:66:0b:c3:ec:e5:0e:fd:d3:d7:4d:86:4f:
                    35:5b:9a:0c:9a:be:3e:6b:b9:81:0f:a9:22:16:93:
                    aa:78:f3:73:99:1a:ec:7c:b8:9c:d8:bb:bf:06:bf:
                    9f:0b:c4:9f:30:c6:28:a1:0d:26:68:b4:19:8f:86:
                    34:02:7d:03:99:3e:da:ac:2f:d3:bd:8f:42:38:6f:
                    3d:1e:61:c2:17:66:f1:fa:05:6c:f0:e2:a8:a3:5b:
                    5d:a0:36:b4:84:e8:dc:6e:23:9f:69:85:6b:e2:8b:
                    b5:2e:4a:2f:e5:ab:a8:5b:fe:b3:95:6b:cc:d8:99:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EE:04:5B:9A:B9:A3:85:85:2F:1E:39:54:7A:D8:03:06:B2:1F:C9
            X509v3 Authority Key Identifier:
                keyid:AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:b6:a2:c6:54:53:be:36:71:61:09:02:45:53:08:0b:48:
         ed:97:a9:c2:c3:00:f9:a1:0a:7a:ec:f4:61:c8:ad:df:40:38:
         d2:49:c2:32:66:ba:74:9d:44:73:16:57:e2:89:1b:a7:7e:1f:
         ef:7b:7d:99:30:77:72:a0:7c:fd:d1:18:d4:e1:eb:3b:a2:f2:
         0a:72:46:80:0d:58:5c:5c:c5:a3:31:f4:79:fa:f4:e8:e1:20:
         78:86:4d:c2:e9:46:b7:16:0b:5a:85:b6:05:4b:58:51:a8:4c:
         47:5b:1b:c7:aa:10:9c:9b:32:0e:af:70:f7:51:d7:61:ad:45:
         5c:44:e3:5d:00:1e:1e:54:be:30:6e:27:48:6b:d9:24:c0:1b:
         c1:66:f7:d9:2a:a1:5b:87:a1:8b:7a:e9:14:3a:42:f6:47:9c:
         41:9d:2e:c0:42:5e:09:a8:cb:5e:47:85:d5:d2:e4:e5:e9:e7:
         8a:04:5b:c5:7b:bc:9b:d3:e6:82:a3:82:1f:31:be:17:61:82:
         57:88:93:d1:66:13:4e:4e:bc:f1:ab:99:37:30:10:66:5f:ce:
         be:fe:30:70:ba:c4:77:39:a4:97:10:17:ed:cb:77:e0:7b:b2:
         13:ab:b8:1e:5d:41:5e:ff:a4:17:49:a3:41:98:69:89:5f:30:
         42:91:86:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:02:52 2025 by rpki-client