Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File:                     qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier:          Pm1bU6WEjqv+buww94FUH894voaaHoLESr0w2rrKBZw=
Subject key identifier:   AC:EE:6F:BD:20:70:0C:52:71:10:91:7B:1E:08:8E:4C:BE:08:5D:28
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       1AF0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number:          1ADB
Signing time:             Wed 22 Oct 2025 15:48:03 +0000
Manifest this update:     Wed 22 Oct 2025 15:48:02 +0000
Manifest next update:     Wed 29 Oct 2025 15:48:02 +0000
Files and hashes:         1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: Bq7543oe7HNAR4o0Jm1l3WvB8vdztf/juzzLCGKLAYU=)
                          2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=)
                          3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: OAplGjEOMAWR+zChRVlz8SiE1O7bb/QPXcg3VkFMFkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 15:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6896 (0x1af0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: Oct 22 15:48:02 2025 GMT
            Not After : Oct 29 15:48:02 2025 GMT
        Subject: CN=68f8fcb3-1e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:37:ce:b8:92:c4:1f:5b:6c:71:4c:14:77:8e:
                    77:52:a3:a2:71:b8:eb:87:91:0a:d8:68:43:22:e6:
                    1e:82:a1:d8:61:d1:c9:2c:0c:29:47:c5:bc:4d:7b:
                    70:bb:fa:34:c9:01:0d:35:65:30:ba:2c:4a:cb:7c:
                    06:f8:0f:e1:76:4f:02:4b:1f:32:fb:25:82:ef:54:
                    15:ed:32:f0:36:c9:c0:95:25:32:40:ae:e3:dd:c1:
                    1c:c1:82:1f:61:26:e1:db:5b:b5:4f:14:6f:de:f4:
                    83:3d:3c:46:0d:ee:98:cf:f2:c7:0d:5f:df:cd:b7:
                    61:29:87:86:2f:46:f6:73:48:2d:40:39:24:d1:b1:
                    60:93:5d:ae:85:d2:e0:ec:8d:e3:f8:a8:32:f0:70:
                    3a:18:2d:30:31:09:e1:c5:de:5a:86:4d:4f:e3:a7:
                    e0:e4:22:7f:94:44:67:d3:32:5f:06:b4:a7:6f:82:
                    c1:ac:75:2d:33:47:5d:a8:67:d4:32:0d:03:60:48:
                    28:ba:78:56:5c:09:4a:32:dc:5f:1a:e5:18:2b:fd:
                    ca:d4:b3:3b:85:47:d2:03:8f:8e:50:f5:a1:7e:a3:
                    ae:34:9d:e5:15:51:15:33:2f:66:17:87:44:92:68:
                    7c:d6:ba:94:74:32:61:f2:82:9f:ad:39:5c:b4:d0:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EE:6F:BD:20:70:0C:52:71:10:91:7B:1E:08:8E:4C:BE:08:5D:28
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f3:75:3d:92:64:1f:e7:d1:76:5e:2e:2d:35:6a:dc:90:4d:
         07:e3:ea:47:b9:71:4f:7d:0e:fe:bb:21:56:1a:bc:34:ef:95:
         66:70:7a:3d:1b:25:8f:d6:ae:95:61:dc:58:98:f1:f8:ac:7f:
         30:48:ac:c3:1f:b1:34:a9:db:9a:c6:07:10:83:69:b8:b7:04:
         63:b5:d5:aa:3e:7d:b8:27:05:fe:79:6a:a4:bc:20:79:f9:d8:
         02:53:c0:c1:2e:42:55:7d:6d:4e:bb:a4:d8:f0:78:d1:2a:b4:
         26:36:3a:8b:81:9a:2e:91:92:aa:d6:d8:33:e3:7d:80:75:4c:
         07:19:9f:2a:91:59:f6:1a:93:78:ee:47:d8:a8:1e:81:b1:9c:
         ad:dd:df:a5:62:e3:b5:9d:9e:ca:1f:57:c8:f3:14:6d:c2:3e:
         e3:b7:ac:5c:c4:7c:f1:bc:37:96:91:03:e1:90:32:80:33:28:
         75:3d:38:cc:ad:b1:e2:81:06:a3:ac:9e:05:9d:3e:81:dd:1a:
         54:5d:d3:20:7c:fc:d4:29:cd:f8:e1:3c:61:d6:98:b2:9c:f2:
         90:3f:b0:cd:ad:97:e2:0c:d0:a7:cd:c7:30:c0:b8:29:7e:e8:
         80:59:9d:c1:0e:c1:ac:a6:e6:74:ee:bc:1c:ea:a1:0c:10:2a:
         7f:4f:26:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:10:35 2025 by rpki-client