Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
File:                     qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json)
Hash identifier:          96MiXDMbZ7f6yL/HRV9zR5ivysqy1luKsLGJBtTvPPc=
Subject key identifier:   7F:70:74:2C:52:78:68:A9:7F:12:21:3F:A7:AD:1F:A0:30:52:68:44
Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B
Certificate issuer:       /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
Certificate serial:       0467
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
Manifest number:          0460
Signing time:             Wed 17 Sep 2025 00:38:27 +0000
Manifest this update:     Wed 17 Sep 2025 00:38:27 +0000
Manifest next update:     Wed 24 Sep 2025 00:38:27 +0000
Files and hashes:         1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: ZbqdhL8lq69Xh8oDaXdIg/qBFqtwcL2XzEq9T7y6Q4g=)
                          2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: jsVFzS1V8/4nPs0LiSJz70mLYAraQYwRrwx0A1zMdZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl
                          rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 00:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127 (0x467)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
        Validity
            Not Before: Sep 17 00:38:27 2025 GMT
            Not After : Sep 24 00:38:27 2025 GMT
        Subject: CN=68ca0303-d5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:c4:fc:18:93:57:23:1f:fc:30:9d:ae:76:
                    73:9d:c8:74:74:c5:4e:d4:29:b8:71:b1:da:0d:66:
                    ac:54:6a:be:a5:8f:ff:8c:4e:1d:f9:40:02:4a:21:
                    75:e6:29:23:fa:df:69:08:52:5b:81:56:5e:a4:2a:
                    a6:c6:ea:9d:67:ab:e1:85:cc:0c:a0:7a:f8:8f:7a:
                    70:f8:27:35:3d:42:f4:0d:16:68:c5:17:8c:72:98:
                    fc:4c:d3:16:b8:2f:f5:c5:76:fa:b6:08:ee:d9:c1:
                    38:3e:74:6f:d8:79:c8:6d:22:bc:73:41:13:bb:3e:
                    83:7c:d4:63:d3:4a:3d:e6:45:2a:82:b4:2f:7a:ab:
                    69:5c:ad:4f:88:94:a2:9f:b5:db:29:38:53:34:1c:
                    6d:44:9d:28:b4:ee:b9:ae:bb:b0:90:98:22:29:14:
                    35:29:c9:7a:be:da:d2:0d:fa:65:a2:1a:59:c2:d1:
                    63:52:39:e9:f2:f4:3c:c0:be:30:ca:95:9f:64:9c:
                    06:bb:57:07:d0:6f:e2:3a:01:8d:2c:90:b4:09:cf:
                    22:f5:48:5a:07:e8:c1:85:e3:79:d9:2c:de:af:b1:
                    e0:e4:85:a9:a3:dd:b0:48:c8:72:82:7e:62:3b:b8:
                    06:67:31:c1:7e:3b:c5:22:0f:9f:65:e2:55:cc:91:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:70:74:2C:52:78:68:A9:7F:12:21:3F:A7:AD:1F:A0:30:52:68:44
            X509v3 Authority Key Identifier:
                keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:63:b3:9e:7d:e7:78:75:53:da:1e:ba:0c:48:91:d0:ab:3b:
         a2:c7:73:bc:41:76:60:8c:79:ca:58:04:39:6c:f0:b8:61:e7:
         a6:2d:70:ec:5e:fa:b3:62:cd:75:fd:cb:bc:99:4e:8e:f8:67:
         53:aa:e2:8f:ec:db:c5:71:8d:01:0c:d4:fa:dd:da:62:21:2d:
         db:5d:8f:20:95:60:fb:70:b2:33:1b:69:fa:1f:d3:04:c8:39:
         f5:44:85:9c:00:34:9b:61:94:94:f3:81:d3:ce:64:83:60:89:
         d1:7b:88:4b:85:6f:bf:e3:bc:7e:76:68:7f:f0:3a:cf:f9:e6:
         48:93:e0:85:1a:54:8c:8c:2d:d9:5a:53:6e:5e:2c:ff:54:ae:
         18:bd:4f:9b:a6:69:38:2a:64:1c:08:6a:c1:2c:8e:fd:fc:29:
         b7:2c:fa:a0:d1:9b:81:b7:0d:2b:ff:83:72:7d:0d:c1:34:bd:
         ce:ea:bd:a5:05:10:1e:ff:9e:ce:67:f4:87:60:61:18:f7:17:
         cb:9e:20:5d:ad:42:05:4d:36:00:88:92:8a:32:c3:f6:79:af:
         58:b9:f7:ad:4c:1c:12:fa:21:9b:25:70:6b:51:fa:25:cd:63:
         df:d1:cb:0b:df:d4:b9:c9:a6:d8:bc:f0:cc:51:1f:62:54:b0:
         8d:50:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:55:28 2025 by rpki-client