Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File:                     qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier:          3J49OseQQxe/ohlXdaEeuS/ebICmmlUwr4RGIo88G3Q=
Subject key identifier:   6F:71:AF:20:C4:B7:D7:33:C8:27:76:AA:25:3E:DC:E8:2F:20:52:9D
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer:       /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial:       02AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number:          02A5
Signing time:             Sun 27 Sep 2026 02:00:30 +0000
Manifest this update:     Sun 27 Sep 2026 02:00:30 +0000
Manifest next update:     Sun 04 Oct 2026 02:00:30 +0000
Files and hashes:         1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: sg5w/Lu7cOX6wWUSEjzZ6ttuXE7OoQ4b9ATaCn+LFqU=)
                          2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: WNoq4eZ5m1xTjCPoaGET2evoo26QhQfOggj/VQkre7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
                          rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
        Validity
            Not Before: Sep 27 02:00:30 2026 GMT
            Not After : Oct  4 02:00:30 2026 GMT
        Subject: CN=6ab878be-b96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:c6:e9:87:9f:08:1b:dc:e1:e4:d9:bc:d4:
                    cf:82:0a:f6:5e:6a:ab:52:40:8e:2a:c7:f1:65:52:
                    19:ac:1f:45:8a:5f:09:39:15:7b:36:01:b6:21:37:
                    07:b1:53:18:2a:bd:af:af:28:8e:50:71:7f:cf:10:
                    e3:5b:9d:36:2b:aa:6b:e9:3c:1e:96:a1:76:e2:c1:
                    ba:ad:20:f4:4c:3e:18:d6:e5:6b:80:63:21:4e:e2:
                    9f:fb:93:87:f3:10:f7:92:0b:89:31:7e:94:b8:d2:
                    12:b7:0a:ce:15:33:c8:a8:46:14:fc:3a:49:a4:fb:
                    af:d2:8f:1c:07:74:11:92:75:34:da:0f:25:a2:af:
                    27:6e:73:cc:3c:66:e9:1b:ce:9e:3b:d9:40:98:39:
                    e0:c7:d0:8e:4e:bc:ed:76:ff:5d:50:39:e9:42:36:
                    43:4a:48:fd:ee:81:4d:a9:90:a8:b9:4e:29:49:8c:
                    e4:12:73:06:b7:05:e0:f1:c0:56:bc:f3:e0:e9:70:
                    24:f2:04:af:05:58:d8:3e:83:d9:c9:33:a1:ac:03:
                    d7:c1:ae:a8:54:ca:78:e9:fe:8c:63:b1:92:b9:3e:
                    71:3b:0b:ac:8e:31:dd:70:dd:5f:1c:84:89:b4:89:
                    60:ea:2b:43:37:d8:6b:f3:5e:25:43:13:3f:26:fa:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:71:AF:20:C4:B7:D7:33:C8:27:76:AA:25:3E:DC:E8:2F:20:52:9D
            X509v3 Authority Key Identifier:
                keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:8d:96:81:f9:dd:8c:57:ce:c8:fb:ab:47:79:16:8a:48:81:
         1e:30:f6:0b:d3:57:dd:f6:09:20:11:20:ef:7f:71:73:db:f7:
         e4:a2:56:a1:1a:8e:34:56:e0:5b:72:94:b9:20:74:72:cb:7e:
         dd:33:a5:91:c7:4a:8c:ab:0f:07:8c:54:c8:0c:75:6e:27:76:
         61:e2:e0:8f:85:ef:74:6b:63:35:4b:77:0c:d4:11:e9:57:cd:
         1d:70:28:34:9d:9d:40:c7:ae:7d:d2:71:e3:a2:01:65:fd:fe:
         b3:40:8b:16:55:f6:9b:da:37:5d:ba:bd:29:4c:bb:3f:73:79:
         85:a8:52:32:e5:e0:39:51:43:89:70:09:7d:cb:b5:33:a1:3c:
         a0:90:46:76:08:35:49:fc:6b:5f:e4:48:16:88:a5:58:b9:ab:
         46:c7:db:60:d4:ba:5d:f0:2e:12:48:e0:dc:bf:be:21:9e:b1:
         b4:15:f7:f0:bb:ed:cc:4b:4e:71:f5:b9:4a:97:95:0b:3b:c6:
         61:eb:88:31:6d:74:95:e9:f7:cd:02:13:0f:a4:83:0c:52:05:
         07:94:79:a7:20:9a:46:0c:13:ba:1d:d8:af:f5:47:eb:4b:ab:
         bf:b2:b9:50:4a:71:49:a7:5a:36:1e:d8:28:fe:68:83:e1:0e:
         c0:a8:21:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:53:55 2026 by rpki-client