Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft
File:                     qHs26y4WaoD40fwBFc6ZGwoBh50.mft (raw, json)
Hash identifier:          nq/x53ELkupTKrL/2k4oxujqCAYcxCP7QQ3v734gzwY=
Subject key identifier:   86:82:82:7E:3D:B6:B0:2C:80:75:55:6B:47:B8:65:D3:A0:07:8C:BF
Authority key identifier: A8:7B:36:EB:2E:16:6A:80:F8:D1:FC:01:15:CE:99:1B:0A:01:87:9D
Certificate issuer:       /CN=A9166279/serialNumber=A87B36EB2E166A80F8D1FC0115CE991B0A01879D
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHs26y4WaoD40fwBFc6ZGwoBh50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft
Manifest number:          41
Signing time:             Wed 05 Nov 2025 07:37:38 +0000
Manifest this update:     Wed 05 Nov 2025 07:37:37 +0000
Manifest next update:     Wed 12 Nov 2025 07:37:37 +0000
Files and hashes:         1: qHs26y4WaoD40fwBFc6ZGwoBh50.crl (hash: iDJd3ictTyy2BkTNrxHCTWJnoIjsNIAsYol8cJJszT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.crl
                          rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHs26y4WaoD40fwBFc6ZGwoBh50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 07:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166279, serialNumber=A87B36EB2E166A80F8D1FC0115CE991B0A01879D
        Validity
            Not Before: Nov  5 07:37:37 2025 GMT
            Not After : Nov 12 07:37:37 2025 GMT
        Subject: CN=690afec2-4963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:09:ea:50:94:14:99:b1:45:27:22:44:13:
                    5c:4e:b3:cb:93:b0:0e:84:59:31:de:38:88:42:b8:
                    2e:06:27:be:b6:7d:4c:4f:da:dd:7f:2c:fa:39:07:
                    9d:64:76:55:04:99:c6:c7:8c:e0:54:ae:7b:90:25:
                    90:51:10:50:1d:33:05:23:ec:aa:3f:5b:a6:8c:6b:
                    b3:00:7c:f9:1f:0b:25:e7:e1:24:c6:36:ae:27:46:
                    a1:2a:bb:fc:6c:dc:f0:1b:ce:f6:d7:96:1a:9a:e6:
                    64:c5:dc:8a:b1:7c:1f:12:f1:86:04:43:0d:f4:af:
                    08:3b:b9:f1:19:a9:77:c0:96:17:b4:08:1e:70:c6:
                    cd:ba:b2:28:df:32:3b:62:e8:16:35:5f:fa:bb:a7:
                    b2:9a:f7:b2:06:bc:b8:92:80:ca:7d:6b:46:d5:3d:
                    1d:5a:38:e0:49:f5:d4:e9:a2:83:aa:c3:8e:e3:4e:
                    0f:67:a8:bd:8f:22:e8:f1:cb:86:48:91:08:04:24:
                    01:5d:b5:7a:27:1e:20:4e:dc:7f:a7:3e:51:04:50:
                    e6:3a:b5:33:a9:15:48:04:6c:f0:1b:68:33:56:9d:
                    44:78:d5:dc:86:3d:fe:4b:ec:1f:b0:f7:99:24:00:
                    ad:43:10:b9:b2:90:8b:89:d6:f0:f8:44:c0:9f:e2:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:82:82:7E:3D:B6:B0:2C:80:75:55:6B:47:B8:65:D3:A0:07:8C:BF
            X509v3 Authority Key Identifier:
                keyid:A8:7B:36:EB:2E:16:6A:80:F8:D1:FC:01:15:CE:99:1B:0A:01:87:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHs26y4WaoD40fwBFc6ZGwoBh50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/4181C4CE58CD11F0AD100877C4F9AE02/qHs26y4WaoD40fwBFc6ZGwoBh50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4b:c0:4d:6b:d9:a1:f4:db:37:d0:8e:70:7e:36:ed:b0:6f:
         b0:fc:2f:c7:e6:99:f8:6c:74:1d:20:eb:0f:bb:3e:48:1b:88:
         f7:a9:dd:b8:51:6f:6b:aa:4a:5b:42:f2:5e:5e:e3:ae:63:45:
         5f:04:31:c3:23:18:03:c6:67:13:96:53:06:e7:a4:03:94:b2:
         47:0f:98:93:0a:18:29:2d:7f:90:c1:a6:5c:4a:b0:dd:e9:a5:
         90:94:a3:8e:1d:ed:ab:b6:2d:d4:7f:dd:9b:bc:7a:19:2b:d8:
         76:eb:bc:21:52:0b:b6:69:95:d7:e2:8e:17:89:bf:ce:7f:6c:
         36:e5:de:b8:96:d4:01:b8:94:51:86:c5:d8:4c:9f:20:c4:0f:
         03:f5:87:87:34:92:24:74:5d:aa:26:d7:8c:cb:eb:e4:7f:1f:
         92:b0:88:aa:d0:ed:90:af:65:13:66:61:41:d4:24:8d:ec:07:
         a1:13:37:71:74:46:aa:c5:5b:56:52:8d:fb:e2:07:a2:41:84:
         a4:99:73:a2:51:13:43:f4:c5:98:5d:7c:aa:ea:01:5f:fb:7a:
         8c:0d:f6:fe:db:57:42:dc:3f:71:cf:1a:3d:2e:7f:cb:bd:4c:
         30:cd:dc:a1:20:05:4b:24:a8:22:e0:eb:6e:c3:57:1e:a0:aa:
         67:4a:ed:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:52:00 2025 by rpki-client