Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
File:                     qpCd6zVb4xTwVTIZQw0JrOLY53E.mft (raw, json)
Hash identifier:          jqpGQQfVK89AJrkBoeij+Qc5mhU0Qpy8aOL9NdTeLEs=
Subject key identifier:   2F:11:17:CF:1A:07:9B:A9:6A:68:2D:90:3F:F9:F4:54:69:6F:FF:E0
Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
Certificate issuer:       /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
Manifest number:          71
Signing time:             Mon 27 Oct 2025 09:21:28 +0000
Manifest this update:     Mon 27 Oct 2025 09:21:27 +0000
Manifest next update:     Mon 03 Nov 2025 09:21:27 +0000
Files and hashes:         1: qpCd6zVb4xTwVTIZQw0JrOLY53E.crl (hash: rDVzqQwgGBeD9WLXygomHrwD/FmMwpHCX6LRTaEiCLc=)
                          2: CDD9D46EA82511F0A1B4386EC4F9AE02.roa (hash: +2ndLjbvJ/FC5QVpNRaE7vUXuw0EK/JBW1SNXfBSkkw=)
                          3: DC02E120A82511F0919E5F6EC4F9AE02.roa (hash: 7FVEC/IFa+cdZewBKkcb0e2EOdOIv+6jM+tdnsCxhjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
                          rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 09:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
        Validity
            Not Before: Oct 27 09:21:27 2025 GMT
            Not After : Nov  3 09:21:27 2025 GMT
        Subject: CN=68ff3997-3a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:89:56:f5:19:24:b9:04:43:ea:47:5a:a3:87:
                    82:7b:ae:ca:5e:50:15:f8:3b:a8:0d:f3:09:46:d6:
                    6f:07:17:d5:e7:49:4f:91:c7:cf:ae:2d:49:df:74:
                    66:8d:26:5f:8e:1c:e1:f5:09:3d:76:22:7a:db:09:
                    72:f3:fd:04:e9:e0:ab:5a:82:d8:46:93:fb:f3:d4:
                    42:c2:ab:e1:13:01:04:43:1a:10:1a:fc:dd:6d:b4:
                    0c:e6:5e:67:5d:52:1f:82:f4:73:a9:b3:63:87:4e:
                    24:77:17:9d:1a:d3:b5:05:31:7c:8f:b7:cf:bc:ca:
                    7b:a1:21:55:aa:fc:3e:a4:93:2b:35:83:cf:2c:20:
                    84:7a:fd:3d:ab:27:f3:43:8d:82:39:88:c3:44:68:
                    ae:f6:b4:d5:07:fd:9f:4b:e1:52:1a:62:07:5a:67:
                    91:86:c8:63:8f:0a:d9:39:af:33:56:76:4f:ce:13:
                    79:b1:e4:e0:f5:31:da:24:e4:e2:0c:b2:d0:1c:fa:
                    23:5c:67:91:02:0f:31:80:c4:d9:92:a0:b4:d9:1e:
                    4c:65:2a:44:3f:1e:43:af:47:15:c1:9d:35:3e:2a:
                    fd:21:05:94:cc:5c:0d:e3:a9:2e:05:42:44:26:03:
                    a9:2a:27:5c:7b:7a:85:c1:b4:5c:1a:be:17:d8:4a:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:11:17:CF:1A:07:9B:A9:6A:68:2D:90:3F:F9:F4:54:69:6F:FF:E0
            X509v3 Authority Key Identifier:
                keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:3f:ff:94:e8:1e:34:cf:e1:cd:60:1b:49:ec:ad:a0:47:
         f7:a6:33:c5:13:cf:cf:71:91:ff:b6:b5:f8:3c:25:f4:62:f5:
         fd:81:1b:dc:09:79:79:ff:7f:6d:23:da:ca:5e:05:4d:33:09:
         31:45:51:77:aa:50:76:fd:fa:d6:59:ad:45:6d:e5:fd:3e:e8:
         30:89:f3:e9:74:1f:74:b0:ce:9a:d3:8b:6c:a2:f4:ad:dc:35:
         4a:b9:4a:5b:ca:38:be:69:83:2a:d8:19:6b:84:38:2d:fd:84:
         e1:1a:4a:da:2d:7c:81:82:45:34:4d:7e:6e:f4:e9:30:c8:41:
         bf:3f:7b:db:e2:ba:78:a9:18:92:8d:4c:8a:42:c5:28:18:58:
         03:9a:69:ec:b1:84:e4:b5:75:03:23:d6:f1:11:92:26:a0:f9:
         80:ed:36:45:5e:02:9e:cf:f9:5a:a4:6c:45:66:56:f0:f2:ff:
         19:38:ef:58:94:e3:6f:3f:ff:2d:10:a4:ff:9f:01:c9:41:17:
         71:96:7d:57:ab:14:e7:ce:8b:aa:2e:7a:ee:99:d4:3d:fd:21:
         53:63:6e:b5:3e:50:fb:6e:a0:09:c6:69:39:31:5a:d0:46:75:
         9c:6f:b4:bf:a7:c5:ee:4b:20:df:a3:f0:1a:d3:2c:3a:40:5a:
         3a:0e:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:20:57 2025 by rpki-client