Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
File:                     qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft (raw, json)
Hash identifier:          gYo5DpY8FobkD44CJE2Wunx0+jXFd3ChgYplaafdZbA=
Subject key identifier:   36:53:01:65:B4:03:D5:38:D0:36:F7:3F:3C:D1:60:F7:6C:A4:91:2E
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
Manifest number:          01E1
Signing time:             Wed 05 Nov 2025 03:06:05 +0000
Manifest this update:     Wed 05 Nov 2025 03:06:05 +0000
Manifest next update:     Wed 12 Nov 2025 03:06:05 +0000
Files and hashes:         1: qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl (hash: SxITcQ3UMbCBFkP7Lg0KUwAWWlJDPYuOjBvL6a7xeyY=)
                          2: 2F40B3CA8D5B11F0A0B1D010C4F9AE02.roa (hash: CzMLFIUNm7dOfDIi9ZbjKORBmJQ30TYeGId3t6USAqg=)
                          3: C9DBA6A666A211EE8C285556C4F9AE02.roa (hash: r7MoQr3dXrf0T5yV0rt7SwJ3dYQT9NnjnIFvWPF1B7o=)
                          4: 8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (hash: 3+A/zZ2nI6uBIIm2F4XRnIuGc+RZ2gQ3mx4iS5OMfsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Nov  5 03:06:05 2025 GMT
            Not After : Nov 12 03:06:05 2025 GMT
        Subject: CN=690abf1d-635e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b2:69:19:68:1b:a1:9c:ed:f6:c5:02:18:55:
                    28:8b:b1:cd:43:e8:0f:7a:bc:f4:68:e1:2b:56:6f:
                    62:44:7f:9e:df:1c:66:3b:7d:31:2c:67:cf:ba:92:
                    34:d7:d1:c3:0f:7a:e8:ee:2a:ee:3e:78:7f:f8:ff:
                    8b:8f:46:b8:4a:13:90:4e:15:78:9e:71:28:2a:ef:
                    cc:9d:d1:9c:69:f7:72:40:3e:31:98:f8:62:20:9c:
                    71:2f:2e:c9:36:b0:f2:c0:4d:11:cb:59:06:2a:61:
                    8d:80:98:de:67:8d:5d:d8:73:99:a6:ca:84:77:b8:
                    f4:96:a9:a9:98:22:37:95:11:6e:4d:27:36:32:f3:
                    fe:e1:5b:52:ab:9a:9a:83:5d:f0:29:e8:d0:ee:d9:
                    2c:9f:d4:86:f4:96:79:63:3c:51:1e:d3:22:59:9c:
                    6f:72:87:73:87:7e:5f:a3:b1:48:eb:96:8d:bf:c8:
                    c4:08:ff:79:c6:14:f2:61:76:07:61:ba:87:15:60:
                    5a:0b:a3:8c:52:51:42:09:7e:8e:0e:7a:7e:09:18:
                    47:6b:22:52:77:93:c7:e5:cd:80:e2:03:22:42:84:
                    ef:95:8c:dd:a9:70:6b:9f:91:b7:56:f8:08:f2:d0:
                    6d:e3:60:03:4e:47:05:a3:c4:cc:97:be:b6:c7:9f:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:53:01:65:B4:03:D5:38:D0:36:F7:3F:3C:D1:60:F7:6C:A4:91:2E
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:d5:44:a1:0e:40:f4:d3:36:59:61:bd:c6:ee:12:c4:2a:
         14:c8:a4:21:ce:dc:07:96:75:78:1a:f3:d6:51:9f:e7:2c:76:
         76:88:8e:73:1a:4f:ff:15:b8:cb:3c:c4:2d:dd:89:31:18:0b:
         a5:b5:0e:8f:ce:19:15:cc:3f:cd:d2:41:98:b9:d4:03:6f:92:
         7f:a7:29:20:11:0c:73:98:76:90:98:c4:07:06:c3:a0:61:66:
         b9:9b:a0:ca:39:5d:c1:92:c6:d8:87:30:f0:4f:27:bc:54:0e:
         e2:a5:39:1f:f0:d3:c1:cb:17:9a:19:be:5f:25:31:c7:91:95:
         45:7a:b4:c6:a8:dd:9f:0b:93:20:17:4e:29:52:2d:20:7f:8e:
         60:0c:0b:02:1c:a4:18:71:a5:8b:d4:88:ba:f2:28:d6:27:78:
         fe:d7:0e:8d:90:46:ce:14:57:83:b3:d4:bc:ff:08:9a:af:77:
         40:c0:2e:88:4f:cf:de:3b:89:89:6b:69:c0:89:f0:4e:29:4c:
         cd:c4:73:ad:8e:39:22:8f:e7:83:cb:fa:8e:cc:1a:ca:30:71:
         97:7a:23:b6:cf:0c:9d:80:48:a8:30:96:81:35:66:05:b3:f0:
         66:28:ea:ca:de:70:b9:05:b4:40:79:c8:66:92:bd:f7:f7:5e:
         94:7b:d2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:21 2025 by rpki-client