Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File:                     QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier:          swcneLqMSANlmhlztThvMT/skU1uqihFXGRFq8cSpsM=
Subject key identifier:   BE:DE:A6:06:EF:51:7D:20:30:43:15:04:20:1D:2B:2D:AA:75:45:D7
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer:       /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number:          01EC
Signing time:             Wed 17 Sep 2025 03:01:24 +0000
Manifest this update:     Wed 17 Sep 2025 03:01:24 +0000
Manifest next update:     Wed 24 Sep 2025 03:01:24 +0000
Files and hashes:         1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: IlhFlzogVl2lFSflOHmSMjTAyXqu5fmuODIYubRm7pg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
                          rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 03:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
        Validity
            Not Before: Sep 17 03:01:24 2025 GMT
            Not After : Sep 24 03:01:24 2025 GMT
        Subject: CN=68ca2484-9901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:e7:61:4f:a2:e9:e3:c3:44:3b:ed:63:a0:
                    48:22:ea:75:66:c6:e5:34:bb:53:bf:a4:db:54:5c:
                    ad:cc:b6:96:0c:12:fb:50:d1:b1:91:fd:19:97:b3:
                    f3:49:95:69:d5:11:98:d5:b4:f0:a4:53:57:95:ba:
                    a4:4a:58:c5:df:71:10:4b:14:6c:61:17:e9:ec:79:
                    98:c6:b7:cb:65:6a:bd:96:ed:74:81:46:32:6b:3a:
                    b8:85:b5:85:70:06:61:df:b1:9b:b7:4c:0f:07:4c:
                    ce:fe:58:2b:2c:5b:3d:89:c6:15:a1:13:63:6b:01:
                    f4:5c:41:25:18:71:52:cd:1b:e5:68:f6:c2:b8:3f:
                    3e:a5:06:44:9b:f9:2b:2f:fb:7a:a2:c4:41:06:06:
                    5e:da:32:0a:da:66:81:8f:4c:2f:a8:8c:07:56:e9:
                    6d:71:74:51:41:a8:c0:80:ef:2b:4a:88:96:a7:18:
                    0f:c5:9f:9f:d9:86:4f:6e:dd:e3:d4:8e:62:19:ac:
                    91:8b:e6:81:50:65:4b:bb:70:07:5b:1f:dd:fe:f7:
                    e2:05:d3:5b:dc:32:59:83:f4:23:eb:61:aa:20:e4:
                    5e:64:51:cf:c9:f7:92:a5:2f:e1:ac:12:7e:40:0c:
                    ad:55:39:a7:f5:5f:2f:a9:0e:cb:5e:ef:bc:b2:61:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DE:A6:06:EF:51:7D:20:30:43:15:04:20:1D:2B:2D:AA:75:45:D7
            X509v3 Authority Key Identifier:
                keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ab:5e:04:4b:ab:e6:02:3e:78:2d:0f:c0:3e:90:e7:b3:89:
         97:75:3e:8d:c8:6f:c4:cc:3e:7c:0d:70:4d:93:8c:f0:cd:30:
         82:82:02:d1:28:1c:eb:dd:97:1d:a5:6d:90:f0:b4:55:b1:66:
         b5:63:61:80:dc:23:e4:bc:de:85:b3:9b:53:72:f5:97:6d:7b:
         57:ba:14:96:c9:2a:3b:72:f6:4b:ae:1a:df:3f:fd:1e:df:29:
         10:81:07:5f:42:9a:a3:22:f8:61:69:82:03:2c:26:2b:cb:b6:
         db:cb:b5:da:00:8c:11:22:2a:fb:63:e3:05:fb:93:94:a5:ad:
         d8:74:78:7f:1c:26:6d:ed:14:ad:81:99:ba:8b:6a:1f:fd:52:
         16:08:ce:d8:3d:54:1f:63:5d:40:f5:b0:8a:5c:98:48:b2:d7:
         38:25:3e:2a:cd:82:88:34:6d:8d:33:21:ee:31:47:38:fb:bf:
         b5:5b:8c:61:d7:21:b8:bd:02:03:26:0b:7d:65:4b:85:30:43:
         10:50:d9:24:43:8f:73:9a:94:17:bf:14:24:bc:0f:27:fc:9e:
         c1:b1:7f:d7:74:96:5e:78:99:83:0b:cf:f4:3b:5b:d9:60:c2:
         c2:84:08:22:f0:85:e8:4d:b5:a3:90:04:55:8b:16:e2:04:3f:
         19:28:6c:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD
RDI4QTRBRUYwHhcNMjUwOTE3MDMwMTI0WhcNMjUwOTI0MDMwMTI0WjAYMRYwFAYD
VQQDEw02OGNhMjQ4NC05OTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNnnYU+i6ePDRDvtY6BIIup1ZsblNLtTv6TbVFytzLaWDBL7UNGxkf0Zl7Pz
SZVp1RGY1bTwpFNXlbqkSljF33EQSxRsYRfp7HmYxrfLZWq9lu10gUYyazq4hbWF
cAZh37Gbt0wPB0zO/lgrLFs9icYVoRNjawH0XEElGHFSzRvlaPbCuD8+pQZEm/kr
L/t6osRBBgZe2jIK2maBj0wvqIwHVultcXRRQajAgO8rSoiWpxgPxZ+f2YZPbt3j
1I5iGayRi+aBUGVLu3AHWx/d/vfiBdNb3DJZg/Qj62GqIOReZFHPyfeSpS/hrBJ+
QAytVTmn9V8vqQ7LXu+8smEcCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7epgbv
UX0gMEMVBCAdKy2qdUXXMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC
QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011
QjZGVlRWNmJvTFROS0tTdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNq14ES6vmAj54LQ/APpDns4mXdT6NyG/EzD58DXBNk4zwzTCCggLR
KBzr3ZcdpW2Q8LRVsWa1Y2GA3CPkvN6Fs5tTcvWXbXtXuhSWySo7cvZLrhrfP/0e
3ykQgQdfQpqjIvhhaYIDLCYry7bby7XaAIwRIir7Y+MF+5OUpa3YdHh/HCZt7RSt
gZm6i2of/VIWCM7YPVQfY11A9bCKXJhIstc4JT4qzYKING2NMyHuMUc4+7+1W4xh
1yG4vQIDJgt9ZUuFMEMQUNkkQ49zmpQXvxQkvA8n/J7BsX/XdJZeeJmDC8/0O1vZ
YMLChAgi8IXoTbWjkARVixbiBD8ZKGzv
-----END CERTIFICATE-----
Generated at Thu Sep 18 19:04:26 2025 by rpki-client