Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
File:                     qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json)
Hash identifier:          wCU8gDh3kbhP/9n0Kq8BuRquvia+2AAFRdbXz2350Tc=
Subject key identifier:   26:18:4A:23:4A:E0:FA:60:13:EF:BD:6A:24:30:89:08:A4:F0:99:B4
Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
Certificate issuer:       /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
Manifest number:          BF
Signing time:             Mon 21 Sep 2026 06:51:41 +0000
Manifest this update:     Mon 21 Sep 2026 06:51:41 +0000
Manifest next update:     Mon 28 Sep 2026 06:51:41 +0000
Files and hashes:         1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: Yq2znQ0fkeIk0wXNHKmlTc6gRinIBtMzIDEyrIfa8L8=)
                          2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: +Obkn2kDVy3VtWSxRmw2o+KBF3RFJlPLni7LR/Uptdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
        Validity
            Not Before: Sep 21 06:51:41 2026 GMT
            Not After : Sep 28 06:51:41 2026 GMT
        Subject: CN=6ab0d3fd-dd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:7c:0e:7a:12:56:da:06:7a:4e:98:71:fd:
                    a6:1c:22:a3:c7:1b:58:e6:a4:c9:01:92:d3:8e:23:
                    a5:d7:f5:cb:26:5c:25:68:ca:e8:d7:a6:5c:3d:82:
                    c5:6a:b3:e4:11:cc:b5:bb:f1:c3:0c:e9:1d:d9:11:
                    76:2c:5f:ca:1b:a7:4d:a3:cc:40:48:11:e4:08:b3:
                    b4:13:03:bd:5e:bb:31:a0:00:c7:8f:52:fc:20:dd:
                    b2:4e:cc:7c:9b:b0:78:c3:0b:ff:74:b4:aa:ac:c3:
                    e0:88:0e:03:94:a9:f4:08:b3:7b:4d:c6:d1:91:36:
                    d1:ad:2b:cd:41:dc:27:c0:df:c9:07:ef:7f:63:5a:
                    8e:48:7b:7a:d8:59:5c:4c:85:a6:cb:34:0f:fd:f2:
                    6b:7f:a7:41:a7:2a:8b:83:e0:cd:63:31:1c:ad:d1:
                    6e:89:e6:ce:41:9e:08:93:e0:35:b6:1f:24:9a:ce:
                    ba:a8:3f:2a:c4:24:de:83:05:db:4d:23:09:15:62:
                    61:1b:44:92:2f:21:06:4d:e2:ce:97:1e:5d:54:97:
                    a4:69:7d:68:7f:d3:ea:35:3f:7d:0a:95:e2:00:49:
                    67:0a:f8:79:50:67:39:1f:33:4b:1f:b4:d0:e2:44:
                    97:5e:79:42:cd:26:00:d5:09:9a:a0:ca:64:e8:c3:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:18:4A:23:4A:E0:FA:60:13:EF:BD:6A:24:30:89:08:A4:F0:99:B4
            X509v3 Authority Key Identifier:
                keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:01:e8:42:e7:50:3d:2f:8d:b1:79:cb:91:61:ad:23:70:e9:
         54:08:07:26:cc:03:91:fe:bd:9e:d0:27:bc:10:b4:a0:f8:c2:
         b0:27:a3:27:f4:7f:2c:2e:61:01:c7:78:f2:2c:f3:0c:5a:e9:
         47:85:91:0e:86:21:38:8e:f8:3e:ce:2a:12:4c:14:a1:50:56:
         75:86:88:05:8c:58:d8:d6:fb:db:36:3d:ca:e6:97:2e:b3:4b:
         e1:d1:e4:75:86:89:d1:e2:8d:44:5b:77:b5:b2:b2:aa:00:4b:
         7c:fd:a1:72:7b:2e:ae:c1:e8:ee:91:a0:b5:3d:6d:28:97:cb:
         d8:f2:50:58:9c:54:78:44:a6:4a:ae:47:87:2d:c4:09:21:31:
         48:95:a1:e8:c2:aa:6f:c8:00:fb:66:40:8f:49:43:34:42:3c:
         f7:f3:57:e1:20:1c:b8:90:c7:46:56:38:ca:06:7f:d8:a1:e3:
         ef:76:38:f2:ec:5a:52:6c:a5:ac:52:9c:be:32:67:17:85:9b:
         bc:af:f6:54:bd:28:83:13:ba:b4:02:f1:bc:ca:cd:c7:20:c9:
         62:ac:04:3c:82:8a:22:eb:84:84:17:7e:e1:f9:75:b0:90:7c:
         c6:8f:83:b5:51:f0:54:e4:1f:76:95:a2:99:d4:97:de:15:24:
         5d:c4:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:35:18 2026 by rpki-client