Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File:                     qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier:          4W1mp99e2KSfU84n2feYKqUh2SwTwl33PeGUWcQ7bns=
Subject key identifier:   A1:FF:1A:76:E4:7C:1A:31:12:58:D7:D2:23:5B:08:3D:B8:89:61:7A
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer:       /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial:       02AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number:          029B
Signing time:             Mon 21 Sep 2026 01:53:14 +0000
Manifest this update:     Mon 21 Sep 2026 01:53:14 +0000
Manifest next update:     Mon 28 Sep 2026 01:53:14 +0000
Files and hashes:         1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: nJEmx7mj78lR/XiaT7kS7iChxiBz8HKQXnE+VUF7Vic=)
                          2: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=)
                          3: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=)
                          4: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
                          rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 687 (0x2af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
        Validity
            Not Before: Sep 21 01:53:14 2026 GMT
            Not After : Sep 28 01:53:14 2026 GMT
        Subject: CN=6ab08e0a-2ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:c7:bc:5a:a2:be:d9:06:14:5b:fc:9f:d0:
                    a2:3e:71:d5:d9:aa:bd:68:c8:c4:5f:79:55:8f:b7:
                    16:80:ec:74:35:1a:a5:48:b7:dd:05:17:83:fd:ea:
                    cd:58:83:1b:8d:67:3b:fb:c0:6b:69:e6:a7:78:00:
                    dd:e2:6c:c9:d6:48:df:b1:be:5c:1f:dd:28:c7:df:
                    11:1d:17:90:19:e9:41:e1:43:34:c4:97:09:4c:6d:
                    9c:d6:be:67:67:df:a2:20:b8:55:ed:4e:a1:da:ad:
                    6e:cf:11:5f:dc:7a:68:dc:4c:1c:eb:9d:49:a5:7f:
                    db:b8:e6:6b:50:78:e4:05:6c:ad:e6:a0:56:73:c4:
                    96:03:8d:3f:22:6d:05:62:c5:4a:39:70:f5:d4:8e:
                    ba:dc:1f:6f:26:e5:13:d0:20:6e:af:7e:a5:24:26:
                    f4:97:89:67:42:99:6c:08:e2:2c:34:17:19:78:84:
                    14:70:50:16:9c:74:c3:14:22:42:8a:ff:33:fc:0d:
                    6e:01:c4:05:89:ac:6a:f8:a7:cf:6f:10:56:89:04:
                    02:6e:4d:4b:ca:45:26:94:16:22:64:ab:0e:1d:eb:
                    6f:d2:e8:7d:2a:7d:16:da:9b:1f:0f:cc:d2:58:50:
                    86:52:20:b0:30:da:24:59:7c:24:d9:df:af:0d:84:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FF:1A:76:E4:7C:1A:31:12:58:D7:D2:23:5B:08:3D:B8:89:61:7A
            X509v3 Authority Key Identifier:
                keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:97:8e:5b:ab:5a:69:92:55:29:39:06:17:84:51:c6:16:
         4e:7c:46:38:4b:11:22:70:86:bf:7c:00:ea:6b:af:d7:5d:d6:
         b1:32:88:f7:96:c5:86:b5:8a:1b:8c:e6:dd:98:b8:7a:41:79:
         bd:3e:b2:3a:cf:12:e4:d9:39:49:2b:35:cf:6d:db:ce:c3:5f:
         3c:06:63:69:80:ea:c4:c8:bd:36:cf:45:05:4d:18:a8:56:a1:
         94:62:30:c3:06:55:f1:96:a1:53:36:d1:d1:60:25:46:3c:c9:
         f7:9a:e9:4a:a6:7a:2d:3e:80:b9:54:bb:45:31:2e:c3:e1:43:
         2b:cc:5e:4e:4f:46:f0:ac:84:2d:85:86:74:ab:b7:a5:01:fc:
         85:82:c9:82:24:de:2e:f2:26:49:1a:b6:d0:b2:2c:5a:b5:12:
         84:02:15:10:44:9d:62:3a:d1:3e:49:50:35:81:ff:c6:bd:a9:
         66:50:98:38:e0:39:ce:d2:ac:2e:e4:f1:e7:a1:5d:dd:48:ed:
         ae:75:96:c3:75:a1:c2:26:6c:a8:86:63:70:45:12:d2:3d:d7:
         45:74:3b:1f:98:7b:04:59:58:60:af:27:d6:cc:b0:83:a4:fb:
         b8:bb:17:f3:47:9d:5a:0d:42:5f:c7:95:1f:ac:93:c8:dc:4d:
         58:2a:f4:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIxMkIxMTAvBgNVBAUTKEE5OTg1Q0REMzc5MzJFMUQzNjRDNEM2RDc1REJBNTAz
QkY3MjY3N0MwHhcNMjYwOTIxMDE1MzE0WhcNMjYwOTI4MDE1MzE0WjAYMRYwFAYD
VQQDEw02YWIwOGUwYS0yZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsJnHvFqivtkGFFv8n9CiPnHV2aq9aMjEX3lVj7cWgOx0NRqlSLfdBReD/erN
WIMbjWc7+8BraeaneADd4mzJ1kjfsb5cH90ox98RHReQGelB4UM0xJcJTG2c1r5n
Z9+iILhV7U6h2q1uzxFf3Hpo3Ewc651JpX/buOZrUHjkBWyt5qBWc8SWA40/Im0F
YsVKOXD11I663B9vJuUT0CBur36lJCb0l4lnQplsCOIsNBcZeIQUcFAWnHTDFCJC
iv8z/A1uAcQFiaxq+KfPbxBWiQQCbk1LykUmlBYiZKsOHetv0uh9Kn0W2psfD8zS
WFCGUiCwMNokWXwk2d+vDYTY0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKH/Gnbk
fBoxEljX0iNbCD24iWF6MB8GA1UdIwQYMBaAFKmYXN03ky4dNkxMbXXbpQO/cmd8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjEyQi8wOEMyNzUzMkRC
NjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExoMDJURXh0ZGR1bEE3OXla
M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FaaGMzVGVUTGgwMlRFeHRkZHVsQTc5eVozdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjEyQi8wOEMyNzUzMkRCNjgxMUVEOTZDNDlDM0RDNEY5QUUwMi9xWmhjM1RlVExo
MDJURXh0ZGR1bEE3OXlaM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGoqXjlurWmmSVSk5BheEUcYWTnxGOEsRInCGv3wA6muv113WsTKI95bFhrWK
G4zm3Zi4ekF5vT6yOs8S5Nk5SSs1z23bzsNfPAZjaYDqxMi9Ns9FBU0YqFahlGIw
wwZV8ZahUzbR0WAlRjzJ95rpSqZ6LT6AuVS7RTEuw+FDK8xeTk9G8KyELYWGdKu3
pQH8hYLJgiTeLvImSRq20LIsWrUShAIVEESdYjrRPklQNYH/xr2pZlCYOOA5ztKs
LuTx56Fd3UjtrnWWw3WhwiZsqIZjcEUS0j3XRXQ7H5h7BFlYYK8n1sywg6T7uLsX
80edWg1CX8eVH6yTyNxNWCr0rg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:51:15 2026 by rpki-client