Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          awbtNc2tT2wqZE6uXdAhhoctwIfoWFCi7Osw03EYsQ8=
Subject key identifier:   28:6A:CD:FF:5F:46:13:19:03:61:0A:0D:D8:8A:5A:95:32:77:10:14
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       0556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0CF0
Signing time:             Sun 26 Oct 2025 22:05:52 +0000
Manifest this update:     Sun 26 Oct 2025 22:05:51 +0000
Manifest next update:     Sun 02 Nov 2025 22:05:51 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: WLcZP6lH37Ewun8uToCB3YpKIJVY0MoCISOONOX5Qgc=)
                          2: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: OzR5m76bC5p8Qn4iW9ZQqG9vOQByfBzOqdZe3AXXfw4=)
                          3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: DQKnkPiyi5yFhInT8cazQ0WWqMZZ/NRSyMH4kCN4yVg=)
                          4: A291634816B711ECBD752D47C4F9AE02.roa (hash: V08dtQEG7kMtP+yJo1aJfEkwIclQOyk17r+rjbxf9Vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Nov 2025 22:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Oct 26 22:05:51 2025 GMT
            Not After : Nov  2 22:05:51 2025 GMT
        Subject: CN=68fe9b3f-0488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:cf:1d:e2:9a:2e:13:cd:97:66:cd:fb:fd:
                    a0:5b:58:8e:0a:55:bc:17:0d:e7:8c:0e:32:ce:de:
                    90:b9:22:4d:b0:85:35:a7:73:52:a8:32:5d:a1:1c:
                    7b:95:3d:a6:d3:d7:1a:46:08:3e:b6:02:8f:55:ec:
                    a3:14:56:ef:f1:3c:78:27:18:2e:a4:89:02:ef:01:
                    70:fa:05:d0:e9:30:66:92:a2:d7:1b:97:da:15:f3:
                    f1:d4:11:69:82:b9:e8:78:b5:9e:db:4b:b6:49:01:
                    67:2e:15:37:c5:d7:67:17:9b:c2:f3:4b:aa:04:33:
                    07:22:f4:d7:69:44:d4:21:c1:32:f5:0d:e3:c2:e4:
                    e9:9d:e3:96:20:dd:24:45:f4:8e:e1:0c:dd:fe:b0:
                    0a:76:c0:31:d7:b2:0b:db:f8:02:99:f1:26:a4:f8:
                    f3:78:f6:ae:12:89:1d:f9:7b:93:35:63:b4:4e:8e:
                    ba:99:59:6b:52:ca:9d:54:9c:8a:e5:b4:2d:11:72:
                    13:91:6b:4c:81:5d:b3:83:f6:e6:f4:e6:51:fc:00:
                    32:4c:64:36:31:2d:2f:03:8f:e0:b4:15:65:48:b3:
                    25:be:32:d0:db:0c:0e:d5:3a:9a:a5:f2:06:8a:31:
                    48:32:c7:0a:76:99:68:77:b8:4c:f8:f3:f6:4c:1d:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6A:CD:FF:5F:46:13:19:03:61:0A:0D:D8:8A:5A:95:32:77:10:14
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:72:40:67:a9:28:27:46:f5:f0:2b:1d:a1:d7:e8:63:3e:
         ba:09:1d:47:73:7a:7e:81:78:31:11:93:51:f3:2e:2d:84:06:
         67:38:95:f3:d4:89:b8:0a:04:01:cf:a9:a0:04:49:40:59:a4:
         a8:7c:16:5c:70:5b:1e:3e:9b:59:6b:dc:d9:88:b0:4e:0a:51:
         08:6b:1e:db:da:fc:6b:de:2b:39:94:f1:26:b1:31:11:2e:41:
         ea:e8:26:e5:71:84:d7:9a:21:22:f4:72:b0:31:10:be:ef:f3:
         ca:de:36:fb:e5:ad:cd:fb:ec:db:98:1f:4d:16:45:60:52:95:
         bd:25:95:d8:e8:b1:f1:06:f1:20:e1:37:bc:09:92:c5:c8:e6:
         bf:0a:ba:e5:b6:66:66:3e:cb:cd:d5:ed:52:ee:23:06:b4:fa:
         ad:e0:94:26:8c:61:b8:a8:0e:04:04:3f:07:10:21:c7:71:4e:
         99:a7:06:1e:3c:6a:9e:09:9f:a9:0b:04:1c:c2:b8:87:c4:fa:
         c9:4d:ff:41:67:f3:e8:d2:0a:28:a7:f7:b6:28:73:c0:a9:d3:
         46:ab:18:e9:16:91:ba:6b:39:e4:09:45:9d:96:d2:64:54:ef:
         88:1a:1f:d3:5a:53:99:22:b8:e7:3f:c9:eb:bf:f2:51:1b:98:
         e7:ef:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:12:08 2025 by rpki-client