Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
File:                     QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json)
Hash identifier:          rZ/JW8q50ecy5HxDJ+oiOHM5icsVf4yKSKbCQ0oovjQ=
Subject key identifier:   1C:AB:E3:39:93:A4:91:A7:A7:42:AD:8A:29:8F:B6:A1:A9:B2:5F:38
Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
Certificate issuer:       /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Certificate serial:       0CBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
Manifest number:          0CB8
Signing time:             Thu 24 Sep 2026 18:32:05 +0000
Manifest this update:     Thu 24 Sep 2026 18:32:05 +0000
Manifest next update:     Thu 01 Oct 2026 18:32:05 +0000
Files and hashes:         1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: AouYbN06uDxqJ6YkT7sqf3b4094wqFmeg3SPeqWdBls=)
                          2: 4B953CCCA52311F1BF257A553D11F970.roa (hash: 0ImBywBjvGucOTmDCrSxY7e6CfnTVMVfaWd4EW4f3f0=)
                          3: AB9730AAA7DD11F1B8E3669D5C11F970.roa (hash: V0nf8R/JXTCmLmr3evrsoWZqErfhyc7Me8vH9L8neaE=)
                          4: DCA4F74AA77E11F1AC50A9373F11F970.roa (hash: U5B6BD+AQVgGNRiCjakEnvUVRqkWyd49kgo+EJ246as=)
                          5: 4C3E706CA52311F1BF257A553D11F970.roa (hash: gX6kPHPqmwsZXWiQP0ngQzAC81Vp3pbcU0fPRnXm1tk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3261 (0xcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
        Validity
            Not Before: Sep 24 18:32:05 2026 GMT
            Not After : Oct  1 18:32:05 2026 GMT
        Subject: CN=6ab56ca5-fac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:96:ed:f7:05:64:e8:9f:a1:4a:b6:8a:cc:
                    62:aa:65:75:1b:4c:11:21:eb:cf:0b:32:39:d2:b3:
                    35:36:c3:87:a2:62:fd:f0:d2:2d:58:fe:53:60:44:
                    22:04:58:11:6c:7b:14:a6:44:d5:f5:54:4d:ed:89:
                    7d:04:60:4f:43:be:c2:70:eb:e4:8f:d0:c2:91:d0:
                    d8:cb:65:5f:f4:45:dd:7a:8a:39:7e:f4:35:7b:8d:
                    78:94:45:ab:cf:49:3e:63:e9:8f:1a:f5:84:19:b3:
                    d9:48:c9:1c:f8:e8:63:86:cb:d8:2c:a9:71:5c:d4:
                    bd:ee:65:03:f0:5d:1c:fe:3b:a4:c6:4c:f3:49:4d:
                    cf:b2:7c:d9:ce:77:e2:39:db:ce:95:18:a2:70:83:
                    b9:52:4e:6c:48:e9:82:47:84:0c:9a:86:c7:0d:bf:
                    bc:0d:21:cc:09:4a:f8:71:54:dc:f2:39:28:d1:da:
                    cd:73:aa:51:78:f5:70:20:46:c8:2d:4f:13:b4:57:
                    9e:3e:a6:7d:8e:40:64:d6:9c:c4:68:fd:b7:3e:9f:
                    13:4f:ff:fd:ac:73:72:b5:a3:0e:10:17:60:b4:5f:
                    f5:68:eb:e3:50:6e:e1:a1:64:e9:be:30:90:e9:9e:
                    69:52:1d:65:2d:a2:bc:1c:6e:ff:97:b4:be:4a:4a:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AB:E3:39:93:A4:91:A7:A7:42:AD:8A:29:8F:B6:A1:A9:B2:5F:38
            X509v3 Authority Key Identifier:
                keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2f:8b:8b:ac:78:e1:54:6e:45:5c:40:9a:82:0b:5c:d1:e1:
         19:bf:08:aa:b2:ee:b5:a5:77:00:ab:99:0c:35:a0:86:19:10:
         2c:b5:3f:28:ff:d8:7f:06:c4:28:e8:78:33:97:d1:b6:7f:4e:
         29:81:83:d5:2b:d7:af:20:a7:05:c2:5a:b8:9c:aa:76:df:48:
         7b:f6:05:24:a2:b5:dd:69:70:58:2e:da:6d:f3:f9:9b:6b:da:
         37:51:99:d9:8d:2b:cc:07:a4:1b:3b:71:6e:e2:2c:2d:bd:a9:
         7c:f4:c3:70:6f:e5:61:bb:b1:61:9e:ba:cb:7f:18:78:8e:87:
         5d:41:5a:b0:b9:70:39:6a:8c:00:0d:b2:71:98:f3:55:54:46:
         5a:db:d9:d0:e4:80:fa:cb:c8:dc:99:c9:5c:89:51:0d:53:8f:
         5d:a3:74:ee:b0:c8:67:3f:45:bb:6f:72:de:d8:7b:4f:09:31:
         0f:2f:14:1f:cf:39:68:d3:a3:c3:06:18:94:ac:76:c4:48:77:
         fd:3e:f2:8a:2f:dd:55:35:f4:b2:bc:d8:e4:07:98:d3:b2:92:
         d6:fd:fe:d9:51:a3:aa:c9:4d:82:a0:12:3c:f0:f7:87:ab:43:
         10:c8:53:0c:85:14:c4:04:04:c3:8f:28:75:f8:db:f1:62:1a:
         17:c9:2d:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4RjQxMTAvBgNVBAUTKDQyRjYzOTQzNTM1MzRGQjA5NzVFQ0MxRTBCOEY1QjY1
MjNBRkFGQzUwHhcNMjYwOTI0MTgzMjA1WhcNMjYxMDAxMTgzMjA1WjAYMRYwFAYD
VQQDEw02YWI1NmNhNS1mYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5cmW7fcFZOifoUq2isxiqmV1G0wRIevPCzI50rM1NsOHomL98NItWP5TYEQi
BFgRbHsUpkTV9VRN7Yl9BGBPQ77CcOvkj9DCkdDYy2Vf9EXdeoo5fvQ1e414lEWr
z0k+Y+mPGvWEGbPZSMkc+OhjhsvYLKlxXNS97mUD8F0c/jukxkzzSU3PsnzZznfi
OdvOlRiicIO5Uk5sSOmCR4QMmobHDb+8DSHMCUr4cVTc8jko0drNc6pRePVwIEbI
LU8TtFeePqZ9jkBk1pzEaP23Pp8TT//9rHNytaMOEBdgtF/1aOvjUG7hoWTpvjCQ
6Z5pUh1lLaK8HG7/l7S+SkoKwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByr4zmT
pJGnp0KtiimPtqGpsl84MB8GA1UdIwQYMBaAFEL2OUNTU0+wl17MHguPW2Ujr6/F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9ENzA2NUUzNDIx
MzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3Q1hYc3dlQzQ5YlpTT3Zy
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F2WTVRMU5UVDdDWFhzd2VDNDliWlNPdnI4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzhGNC9ENzA2NUUzNDIxMzIxMUVBOUEwNUZGNDBDNEY5QUUwMi9Rdlk1UTFOVFQ3
Q1hYc3dlQzQ5YlpTT3ZyOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVy+Li6x44VRuRVxAmoILXNHhGb8IqrLutaV3AKuZDDWghhkQLLU/KP/YfwbE
KOh4M5fRtn9OKYGD1SvXryCnBcJauJyqdt9Ie/YFJKK13WlwWC7abfP5m2vaN1GZ
2Y0rzAekGztxbuIsLb2pfPTDcG/lYbuxYZ66y38YeI6HXUFasLlwOWqMAA2ycZjz
VVRGWtvZ0OSA+svI3JnJXIlRDVOPXaN07rDIZz9Fu29y3th7TwkxDy8UH885aNOj
wwYYlKx2xEh3/T7yii/dVTX0srzY5AeY07KS1v3+2VGjqslNgqASPPD3h6tDEMhT
DIUUxAQEw48odfjb8WIaF8ktug==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:29 2026 by rpki-client