Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File:                     Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier:          cvf2uV1nEA0k+T2oi4pZOrg9uawd7ORY9gW8KKvzqOM=
Subject key identifier:   28:4E:20:7A:55:BB:32:C2:48:2B:90:09:70:9C:8C:65:E9:37:EF:14
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer:       /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial:       082C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number:          0820
Signing time:             Tue 22 Sep 2026 19:00:36 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:35 +0000
Manifest next update:     Tue 29 Sep 2026 19:00:35 +0000
Files and hashes:         1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: Mp0SYIbWd8IFhGtuQELM4HFaxWK/b9cmIaTANC+/4aE=)
                          2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: O/lTB0pDSB8sB0dRmgz1yxjauyhwEgNkjtUoJWKHyCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
                          rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092 (0x82c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
        Validity
            Not Before: Sep 22 19:00:35 2026 GMT
            Not After : Sep 29 19:00:35 2026 GMT
        Subject: CN=6ab2d053-95b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:d0:eb:c1:a5:e4:07:c2:d0:45:94:5f:fd:
                    c0:d0:dd:a4:98:5b:6d:7a:33:8c:9c:2e:e8:a5:50:
                    de:3b:55:d2:7f:ad:1d:bc:c9:11:50:b0:64:15:be:
                    2e:b3:29:3d:ae:b4:6e:a5:68:1a:af:45:08:5f:41:
                    00:94:03:13:dc:39:30:cc:9d:8a:05:d1:cf:23:c0:
                    9f:2a:45:72:5d:28:44:cb:a7:db:ff:da:4e:9f:a9:
                    ff:ee:bd:a4:49:09:ff:7f:47:c1:8b:35:f8:01:58:
                    3b:44:e8:9c:58:eb:73:fb:9d:79:07:36:5a:d1:ef:
                    7c:d5:fe:33:35:2b:d0:40:80:a9:af:f0:42:91:46:
                    b0:9f:54:f0:5f:48:13:8b:b6:04:03:47:05:91:4f:
                    b0:72:06:ae:bb:57:1d:93:6c:9c:d5:24:e9:ca:c3:
                    2b:71:35:4f:13:58:37:0f:8e:18:05:c4:d1:59:22:
                    3a:8c:9c:79:1f:96:af:87:44:e1:c4:f9:70:8a:0f:
                    ec:4a:b8:87:31:55:8a:62:74:7a:08:df:14:03:e4:
                    da:b6:9d:0f:87:d6:a5:1b:d5:24:e3:bc:4c:10:0e:
                    e5:2c:41:4d:79:70:9a:8d:aa:a5:0f:79:05:c3:a2:
                    7c:fc:63:8c:fb:d1:65:49:12:c5:2a:31:bd:8b:09:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4E:20:7A:55:BB:32:C2:48:2B:90:09:70:9C:8C:65:E9:37:EF:14
            X509v3 Authority Key Identifier:
                keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:94:00:9b:ed:5c:97:01:d0:d1:e6:78:23:33:aa:19:79:8f:
         ce:29:61:b5:c9:b4:98:fa:3f:8a:24:cf:8f:6f:a3:a5:9f:c2:
         15:23:f3:85:6f:10:5e:b4:ca:cf:04:cd:56:e5:09:82:c6:78:
         3d:11:bc:97:c5:26:17:b5:0a:96:16:5b:4f:e6:6d:89:95:81:
         69:1a:d3:c8:da:f3:cf:37:34:df:5a:48:41:06:ed:f1:bc:7b:
         d5:cc:78:ae:60:1e:37:96:76:59:cc:d0:e0:9c:a7:3d:3b:79:
         cd:f8:bf:06:cd:e5:d6:72:cd:24:9b:d6:df:75:a7:cf:72:20:
         1b:1c:df:6b:82:0b:1a:6c:7b:18:c0:88:60:56:5b:4f:2a:14:
         f2:90:6f:96:ef:58:58:a2:b8:5b:87:0f:45:e8:e2:92:91:d5:
         a0:45:aa:08:cb:4c:28:ed:0b:73:3d:ef:3f:4a:b0:46:de:a8:
         42:d8:61:64:15:2c:4c:a3:d2:28:a5:ad:20:c8:e3:8c:e8:9a:
         47:d2:f1:6b:84:72:2f:a7:35:00:b4:ad:1a:93:6d:96:69:06:
         b5:3b:3f:01:19:eb:00:f8:29:db:37:90:39:dc:ab:5e:83:a0:
         ae:61:d3:81:e7:f6:0d:9e:a5:bb:ad:f0:e7:b2:64:ee:f3:80:
         d7:52:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:33:31 2026 by rpki-client