Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
File:                     QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json)
Hash identifier:          49SXmxwn13sI7FZYDjxCXAAlkub/7lHymaW3EujAVyQ=
Subject key identifier:   39:31:46:6C:87:3C:80:AB:77:F4:A7:04:5C:B9:A6:2A:55:C8:F0:F1
Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
Certificate issuer:       /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
Manifest number:          5B
Signing time:             Mon 03 Nov 2025 07:07:17 +0000
Manifest this update:     Mon 03 Nov 2025 07:07:17 +0000
Manifest next update:     Mon 10 Nov 2025 07:07:17 +0000
Files and hashes:         1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: R/qiIkkyl+tkaUTqG+TCALGRzQa+foyMw4/drowyVvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
        Validity
            Not Before: Nov  3 07:07:17 2025 GMT
            Not After : Nov 10 07:07:17 2025 GMT
        Subject: CN=690854a5-5e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:83:04:bc:7d:5b:f8:46:02:7f:7b:75:49:
                    c6:75:2a:b3:c0:b9:86:08:59:23:73:39:ea:77:73:
                    62:89:db:c4:24:57:64:ee:ec:e4:2e:44:53:b7:93:
                    9c:f0:d5:df:c8:72:a9:b2:a4:88:d2:3a:93:60:c7:
                    9d:a1:db:1d:ab:0b:88:e6:9e:73:c1:7b:ca:cd:fc:
                    c7:b0:2d:a3:92:6c:c1:7b:44:33:7c:8f:2e:e0:14:
                    94:18:a9:2c:ed:bc:2e:f3:f2:0a:f1:c0:83:7b:b4:
                    2c:a3:0c:e6:9d:d5:c1:4a:3a:f4:cf:e4:79:48:f5:
                    0d:60:49:e0:15:f9:e8:ce:1a:56:2d:e8:d7:0c:6a:
                    1b:d7:5e:ab:de:48:e0:e5:f6:f7:dc:88:66:bb:c7:
                    cb:ec:01:ca:32:f5:64:3c:3e:6b:12:14:a7:82:15:
                    11:69:5d:1f:35:0f:b3:9c:1c:56:5a:20:40:0b:e7:
                    9f:2e:96:a6:05:11:c8:f7:e2:7a:fb:a7:b1:69:9f:
                    e0:ad:de:7c:f0:c6:e0:3f:38:a5:d8:10:69:fb:34:
                    f4:fe:58:16:9c:2a:8d:02:44:25:da:4c:e3:ac:7a:
                    18:fe:f6:e5:3f:a6:fc:ea:67:57:b5:4c:06:ab:af:
                    32:f7:d8:99:e2:b9:54:8e:f1:7f:04:8a:89:15:98:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:31:46:6C:87:3C:80:AB:77:F4:A7:04:5C:B9:A6:2A:55:C8:F0:F1
            X509v3 Authority Key Identifier:
                keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:56:e3:d5:f1:a6:08:ed:26:40:9e:61:a8:70:ec:82:51:3b:
         cb:84:47:53:0d:5d:0e:c3:26:2f:b5:aa:52:9c:df:fd:e0:ee:
         08:71:d8:4c:9a:f1:44:73:c9:48:2d:be:83:3b:2e:55:1c:16:
         0e:b5:22:5b:7b:a4:e7:26:04:cb:f3:37:93:4e:25:41:bf:7b:
         0f:af:d3:1b:8a:39:da:12:29:59:ac:3b:71:c6:9d:42:4b:33:
         20:63:35:23:fd:7e:46:6a:15:39:5b:29:78:d8:9c:b2:e3:fc:
         68:d8:e3:de:8a:75:86:4b:c6:ce:10:8a:af:6f:66:08:43:27:
         3d:00:cf:10:67:ad:48:e2:a5:0c:85:af:8f:41:4a:91:05:4f:
         37:ee:81:05:af:2b:1d:15:e2:da:22:70:da:80:4a:00:d3:09:
         21:9a:7e:72:15:a8:66:27:cf:b8:e5:04:01:2c:cc:43:1e:e4:
         90:8c:26:c5:bb:4b:e3:20:06:ba:e8:b3:7d:6c:10:0e:b2:18:
         97:6b:52:97:4e:9f:f3:fa:3a:45:6b:08:38:2b:5c:e0:d0:b0:
         8a:8f:7d:12:29:76:e2:ba:02:07:8f:62:a9:d1:1e:04:6c:11:
         45:3f:8f:a1:c1:cd:e4:c0:4e:9f:f6:5c:83:85:43:da:00:8a:
         e9:4d:67:91
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MUE5NTExMC8GA1UEBRMoNDExMDYxQkU1QzlEMjRDNTI5QkM3RDU2OTg5QjRBRDJD
MTM4RDEyMzAeFw0yNTExMDMwNzA3MTdaFw0yNTExMTAwNzA3MTdaMBgxFjAUBgNV
BAMTDTY5MDg1NGE1LTVlMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDlFoMEvH1b+EYCf3t1ScZ1KrPAuYYIWSNzOep3c2KJ28QkV2Tu7OQuRFO3k5zw
1d/IcqmypIjSOpNgx52h2x2rC4jmnnPBe8rN/MewLaOSbMF7RDN8jy7gFJQYqSzt
vC7z8grxwIN7tCyjDOad1cFKOvTP5HlI9Q1gSeAV+ejOGlYt6NcMahvXXqveSODl
9vfciGa7x8vsAcoy9WQ8PmsSFKeCFRFpXR81D7OcHFZaIEAL558ulqYFEcj34nr7
p7Fpn+Ct3nzwxuA/OKXYEGn7NPT+WBacKo0CRCXaTOOsehj+9uU/pvzqZ1e1TAar
rzL32JniuVSO8X8EiokVmPiXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOTFGbIc8
gKt39KcEXLmmKlXI8PEwHwYDVR0jBBgwFoAUQRBhvlydJMUpvH1WmJtK0sE40SMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1Lzk0NzYxODg2MkJE
OTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1VcHZIMVdtSnRLMHNFNDBT
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUVJCaHZseWRKTVVwdkgxV21KdEswc0U0MFNNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx
QTk1Lzk0NzYxODg2MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1V
cHZIMVdtSnRLMHNFNDBTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABRW49XxpgjtJkCeYahw7IJRO8uER1MNXQ7DJi+1qlKc3/3g7ghx2Eya
8URzyUgtvoM7LlUcFg61Ilt7pOcmBMvzN5NOJUG/ew+v0xuKOdoSKVmsO3HGnUJL
MyBjNSP9fkZqFTlbKXjYnLLj/GjY496KdYZLxs4Qiq9vZghDJz0AzxBnrUjipQyF
r49BSpEFTzfugQWvKx0V4toicNqASgDTCSGafnIVqGYnz7jlBAEszEMe5JCMJsW7
S+MgBrros31sEA6yGJdrUpdOn/P6OkVrCDgrXODQsIqPfRIpduK6AgePYqnRHgRs
EUU/j6HBzeTATp/2XIOFQ9oAiulNZ5E=
-----END CERTIFICATE-----
Generated at Mon Nov 3 18:18:33 2025 by rpki-client