Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
File:                     qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json)
Hash identifier:          /QvyRilKsKRSoSr5ddLpb2D95SxALzg/ApmvhkISyVY=
Subject key identifier:   4D:20:43:D0:89:9A:96:AF:F6:D0:A9:EC:DA:2C:C5:C5:91:64:BC:F8
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
Manifest number:          90
Signing time:             Wed 17 Sep 2025 07:13:28 +0000
Manifest this update:     Wed 17 Sep 2025 07:13:28 +0000
Manifest next update:     Wed 24 Sep 2025 07:13:28 +0000
Files and hashes:         1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: CjIAyCaqPnj0V4eBALTBaR9b4h+mZnoTRQdqT5DeSKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
        Validity
            Not Before: Sep 17 07:13:28 2025 GMT
            Not After : Sep 24 07:13:28 2025 GMT
        Subject: CN=68ca5f98-9993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:c7:23:2a:5c:41:36:d5:8a:9b:f1:d9:ea:
                    18:20:2e:7e:75:d2:b8:30:31:fd:f2:c7:80:c8:7e:
                    b1:2f:56:51:e5:3b:64:b1:10:1d:1b:03:f6:32:a0:
                    8c:71:bc:53:4e:1b:3f:35:b1:a9:a3:3c:35:33:db:
                    24:5b:6b:11:91:c9:13:de:27:4b:eb:fd:fd:14:f2:
                    aa:34:c5:50:94:bb:d9:6a:3d:b9:36:5d:0f:e4:73:
                    ec:83:80:78:a0:4a:01:13:24:5e:fe:88:89:d6:b2:
                    39:ed:9e:06:aa:5b:e9:73:81:b2:9d:f4:95:db:04:
                    62:19:76:b6:e7:52:24:7b:4d:d4:09:2d:7a:87:4a:
                    43:48:86:63:b4:5e:4d:4c:c2:df:89:51:53:68:62:
                    b4:9e:61:b4:97:f1:cd:0c:f4:f0:3a:ab:b0:7c:89:
                    39:09:9f:1d:cd:3d:d2:f1:96:05:4e:b4:88:62:9e:
                    a1:70:28:6d:71:12:90:72:ef:c1:55:f5:62:d6:bc:
                    4b:8e:39:55:03:df:bd:97:3d:19:7c:e3:98:1e:1d:
                    0d:41:7f:0d:af:e4:8e:31:dd:42:35:85:27:c9:8a:
                    a8:35:2c:ee:aa:2a:21:fa:79:0d:31:7c:b0:85:df:
                    5f:b1:c0:24:63:96:36:d1:55:46:0f:33:3f:40:d6:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:20:43:D0:89:9A:96:AF:F6:D0:A9:EC:DA:2C:C5:C5:91:64:BC:F8
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bc:aa:dd:0f:e0:17:ac:c4:42:68:cf:50:7b:bb:c8:57:bb:
         3a:61:68:4f:3a:62:9e:ce:51:bf:7f:56:54:67:44:11:73:39:
         11:51:9a:cf:90:2c:75:d9:49:52:19:37:a8:f9:75:d3:95:70:
         92:29:65:93:7b:34:75:f7:02:56:cc:5c:5a:78:47:db:32:8e:
         a8:3b:d4:84:05:26:b9:33:2a:4f:7b:43:06:15:a5:e3:d3:87:
         4c:e4:5c:2f:4b:94:d9:e2:84:42:69:9e:6a:1c:93:be:e4:05:
         d0:5c:d4:1c:e3:b2:6f:4c:f2:14:2b:2c:cd:fc:e0:64:07:7a:
         42:75:7d:ab:63:57:5c:1a:9f:f1:bd:d0:55:c9:a0:1f:42:d3:
         3d:e7:77:8a:97:79:64:51:b8:a3:a3:21:d6:65:32:5d:d7:98:
         de:1f:9d:d0:f8:95:ad:da:c3:a5:23:7d:30:fa:4f:b3:54:e2:
         c6:c9:39:2c:8a:a4:70:8b:f9:cc:92:2a:da:ce:6a:56:4b:22:
         2a:f7:99:13:fb:28:2b:a5:7c:9c:ac:45:6c:2a:da:f3:ff:7e:
         d4:2d:c5:55:24:e9:4a:85:33:bc:e3:b5:d1:e9:08:f6:f5:82:
         d3:a1:7f:6a:4c:ba:97:02:e8:7d:df:d4:20:22:3a:6c:fb:da:
         98:3c:2b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:39:12 2025 by rpki-client