Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
File:                     qDxuziIztsuMwOthPwqVLIM8A6E.mft (raw, json)
Hash identifier:          k3gZ7UNDhODvQQX9YSpfvqqjtI0+3M/XqondLWLrBJs=
Subject key identifier:   D5:E7:FB:FF:EE:66:3D:61:80:37:B6:39:46:24:5A:A1:3B:0C:97:28
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Certificate issuer:       /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial:       3261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
Manifest number:          3258
Signing time:             Sun 02 Nov 2025 15:25:04 +0000
Manifest this update:     Sun 02 Nov 2025 15:25:04 +0000
Manifest next update:     Sun 09 Nov 2025 15:25:04 +0000
Files and hashes:         1: qDxuziIztsuMwOthPwqVLIM8A6E.crl (hash: NysFE4wUj0ptEdyFRey/ka+5IGQnFaLAzjkE5J8uAq8=)
                          2: 3A6CB168758811EA93AADD3FC4F9AE02.roa (hash: TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
                          rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12897 (0x3261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
        Validity
            Not Before: Nov  2 15:25:04 2025 GMT
            Not After : Nov  9 15:25:04 2025 GMT
        Subject: CN=690777d0-b57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:2c:38:99:1f:d9:ee:a9:78:e4:15:35:0d:
                    f6:66:4e:12:ae:e2:8b:49:80:08:80:43:e8:da:a4:
                    78:a3:b2:54:8e:b4:1d:e8:7d:63:20:59:fb:9d:81:
                    77:02:83:6c:a9:ea:5d:b4:ca:d0:5a:ab:e3:a0:3a:
                    0f:58:49:b1:a2:7f:20:41:fa:13:6b:fc:95:09:52:
                    0f:88:5a:a1:76:bf:cd:ea:05:9e:ca:4c:38:64:18:
                    46:d7:d0:5f:69:60:83:6a:7b:fe:1c:c7:c7:89:46:
                    e0:1f:0e:a2:36:ac:63:d5:db:0a:52:88:b6:ac:b6:
                    a4:d1:7b:a0:af:2b:aa:e5:d4:2f:a0:0c:a9:7b:ad:
                    05:ca:0d:b8:3d:c8:2c:02:96:6f:70:06:51:41:0c:
                    31:2b:56:61:62:8a:99:ce:a9:bd:49:c7:39:e4:65:
                    ae:31:89:d7:92:04:76:b4:63:be:64:83:93:cd:8c:
                    a2:a1:bb:ab:45:04:51:a2:de:b2:a7:5c:e7:a6:a2:
                    e6:5f:d8:21:96:35:2f:70:cb:1f:33:29:80:ff:a9:
                    e8:39:c1:05:da:0f:54:f4:8b:7b:d1:a9:ac:f4:65:
                    ee:8f:b5:22:57:12:ab:fe:ca:f0:d9:ee:d6:83:af:
                    b6:a7:2d:3a:be:4d:20:36:69:04:99:d6:f4:ad:e5:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E7:FB:FF:EE:66:3D:61:80:37:B6:39:46:24:5A:A1:3B:0C:97:28
            X509v3 Authority Key Identifier:
                keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:34:a4:81:d1:ad:31:a8:60:77:e4:ce:24:a6:05:02:c1:df:
         67:a2:4c:a1:2c:62:45:2d:fd:3d:c7:e6:15:ef:1f:ae:81:a2:
         e5:41:46:7e:ce:5c:05:6b:93:39:09:80:ad:bb:c4:9d:49:1c:
         2b:85:e6:c6:a7:6a:80:67:68:8c:1c:ea:b9:d1:15:5e:cf:3e:
         f2:cc:ea:26:24:32:85:a0:13:fc:e7:0d:03:2b:74:18:4e:6f:
         4b:6c:26:db:af:0b:22:b3:30:56:22:14:69:3d:7e:95:93:a5:
         80:da:ae:53:ae:1e:2f:05:36:9b:24:fd:ec:8a:9e:06:14:a7:
         7d:7d:fd:25:ee:cc:9c:a7:fb:d7:fa:e2:61:75:3a:19:1e:2a:
         04:d5:21:e6:7a:d8:9d:e6:a1:42:fa:8b:1a:7b:6b:db:ea:6b:
         bb:e7:e4:93:5f:ab:8e:d6:62:9b:89:5b:55:21:7f:a7:89:f3:
         95:ae:75:96:1f:64:f4:c5:2d:7c:1c:7d:1e:93:f3:bf:7c:bf:
         8f:73:40:a0:00:21:54:7e:61:2d:b3:7d:c5:3a:0b:1c:f5:b4:
         8b:3f:45:fb:8e:84:27:3b:4f:52:5c:12:14:70:7a:e2:ea:ef:
         97:10:42:ed:7c:f3:89:4c:8d:4d:90:39:97:6a:e4:0a:53:58:
         61:88:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:19:29 2025 by rpki-client