Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File:                     qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier:          Skv2s73BSh2dvHkitL3V+120u8BnOaqtMwh5XEzRm7c=
Subject key identifier:   A5:36:29:8B:95:DC:BE:6E:2B:82:65:39:6D:CB:C0:FE:ED:C5:85:F4
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer:       /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial:       0883
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number:          086C
Signing time:             Sun 26 Oct 2025 21:18:28 +0000
Manifest this update:     Sun 26 Oct 2025 21:18:27 +0000
Manifest next update:     Sun 02 Nov 2025 21:18:27 +0000
Files and hashes:         1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: fMCGC2RN8E1HTbPw/BV29JjySni12nGywQm9LV5BvJw=)
                          2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: QEmg34gYMLcRImmZXOGPqukjodjpiHJ4l1SGgXAsmiI=)
                          3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: d2hFjD7xeVN3cyOnjASfx1gXiQEjM5kCyEH2NHogTpU=)
                          4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: eAvchTE2mjoaLizoiap/tIEL3DGgf3r4bWQpO2iGLTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 21:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Validity
            Not Before: Oct 26 21:18:27 2025 GMT
            Not After : Nov  2 21:18:27 2025 GMT
        Subject: CN=68fe9023-f682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c2:95:47:2a:14:57:e4:e3:f0:41:19:05:33:
                    af:dd:03:62:a0:9c:38:44:94:24:4b:79:63:d2:33:
                    3f:6e:50:1e:56:53:2b:76:6f:a8:1b:62:a1:f9:b9:
                    14:c8:a1:eb:f6:39:a6:66:9c:ac:df:18:51:12:e5:
                    54:a6:d9:24:ed:ff:56:83:69:12:dc:05:09:47:a5:
                    41:be:1e:a9:b7:dc:13:91:e7:01:aa:79:75:3f:97:
                    69:ac:bd:04:8a:67:c3:69:22:96:bc:15:4e:36:74:
                    d3:5d:f4:ee:5f:bf:87:9f:3a:f9:a7:f0:87:86:78:
                    fd:79:67:92:8f:80:ce:63:5b:df:62:e7:78:28:26:
                    94:01:1e:d4:9a:20:7b:a5:ef:50:20:84:cc:b7:5f:
                    98:73:a6:59:f9:cc:c2:fd:ea:ec:e8:2b:0c:fd:be:
                    28:a2:07:7f:02:b3:e6:84:3d:ec:62:47:da:39:1b:
                    d8:93:69:1e:ee:33:02:de:af:8d:b6:52:c7:57:3c:
                    5f:63:b8:6b:e1:ea:80:b7:86:3f:4c:a9:74:9d:4a:
                    5b:d0:5f:f6:92:0f:c9:6c:f8:b0:40:dc:4a:96:18:
                    8f:f3:60:33:9d:0c:f8:44:81:81:71:4b:8c:c9:70:
                    78:89:29:eb:42:f5:5d:62:10:90:55:d8:b5:0b:b4:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:36:29:8B:95:DC:BE:6E:2B:82:65:39:6D:CB:C0:FE:ED:C5:85:F4
            X509v3 Authority Key Identifier:
                keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:19:8d:30:72:e3:e9:3b:ae:3f:ac:09:68:62:4a:26:84:38:
         f9:14:6e:71:69:ac:03:d5:74:c2:e8:04:17:05:9a:79:88:0b:
         07:9d:49:70:a3:58:5f:39:8c:b2:d0:04:f3:c3:b2:21:b5:39:
         a8:07:2b:76:2a:89:b7:65:fb:18:62:20:a1:2c:1e:f0:39:e3:
         80:56:8b:c1:3c:fd:18:16:ac:26:4c:b5:4c:2f:a2:4e:6c:68:
         50:3b:48:3a:a3:1f:9a:08:25:e1:b3:14:84:93:7f:c7:db:37:
         8d:df:66:71:6c:26:30:16:32:3d:fe:9a:cc:95:d6:8d:9f:f9:
         19:a8:88:48:9a:43:51:f4:87:d4:5d:0c:38:f2:48:5d:4c:9d:
         39:36:d9:b3:bf:3f:c2:71:64:9d:6c:78:e8:59:72:77:4c:03:
         0b:74:bc:bf:ba:04:a6:de:9d:4b:3f:f4:a6:ff:c3:0e:e8:41:
         ee:7f:50:21:ca:39:6a:af:13:a9:12:47:44:f8:92:d2:22:e2:
         ac:34:fe:d4:82:41:74:ee:b5:fa:0c:76:0a:ec:14:9c:23:6e:
         83:ab:95:ec:b0:33:54:44:50:68:7c:7e:79:3c:8a:b6:c2:e2:
         90:0f:2f:3a:55:c8:a2:3b:2b:f7:a3:26:0f:27:aa:3b:96:5b:
         1b:32:82:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:57:48 2025 by rpki-client