Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
File:                     1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json)
Hash identifier:          2rZzT0I7Gla3LTVjHdeitIWuKg7jEWHBZjBwtRK4O4c=
Subject key identifier:   F0:2D:57:82:67:A4:A2:2A:58:8F:3F:16:5E:C6:08:9E:16:A0:E9:D5
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Certificate issuer:       /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial:       0966
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
Manifest number:          095C
Signing time:             Sat 26 Sep 2026 20:13:26 +0000
Manifest this update:     Sat 26 Sep 2026 20:13:25 +0000
Manifest next update:     Sat 03 Oct 2026 20:13:25 +0000
Files and hashes:         1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: AKb6/X9+/uj4B3dssljgsDspIWYSTUID81IKqsIo5Yk=)
                          2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: 2+qbZiryee/w2sIlZ9zRWy4A2NYBRXm5chsE8+52bvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
                          rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 20:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
        Validity
            Not Before: Sep 26 20:13:25 2026 GMT
            Not After : Oct  3 20:13:25 2026 GMT
        Subject: CN=6ab82766-639a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:ca:31:7a:88:20:1b:2e:18:8b:94:e7:fb:
                    4a:f5:59:45:46:66:e4:c7:7e:ca:18:ce:9f:ec:c2:
                    23:89:8f:9b:80:c3:a9:89:4a:92:f2:8b:73:df:1e:
                    09:f5:6f:01:55:f2:81:73:de:62:c9:78:a8:43:80:
                    01:df:c9:bb:99:89:8d:59:1d:66:7e:89:bc:d6:97:
                    d5:a6:68:c2:20:d2:58:9e:3b:13:3d:58:68:ec:c8:
                    6b:f5:88:3c:a3:28:aa:cb:a9:ef:c1:91:b6:42:11:
                    a5:b2:36:34:59:fd:aa:09:24:17:6a:7c:f9:d9:ae:
                    72:0d:92:33:a9:ad:97:ba:5d:26:1f:7a:f7:0b:57:
                    e6:ef:08:f1:22:84:4e:40:bc:33:ce:96:60:f5:fb:
                    4c:4c:e7:5e:80:07:fc:bc:9d:90:25:88:c4:8d:8e:
                    29:7e:34:12:5f:29:a6:51:35:41:56:df:09:3e:84:
                    d2:48:6c:aa:2e:41:ac:40:eb:eb:9b:a6:f8:9e:70:
                    e7:b8:c1:39:f8:23:2c:aa:21:77:f7:7d:f8:c2:59:
                    14:8e:e1:99:8c:67:d5:cb:e3:8e:1d:97:3f:04:34:
                    92:6c:d3:b2:b1:61:89:3e:45:52:47:55:b7:f0:c7:
                    5f:aa:1f:b5:26:ce:cd:de:40:59:01:41:06:a8:1f:
                    e4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:57:82:67:A4:A2:2A:58:8F:3F:16:5E:C6:08:9E:16:A0:E9:D5
            X509v3 Authority Key Identifier:
                keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:5c:95:5f:ab:63:b4:1a:f0:be:10:b6:d6:45:94:b6:b0:
         5b:ed:9f:67:83:b1:a8:6f:38:a8:17:a2:ea:6d:2d:25:7e:9f:
         92:77:bf:76:16:43:6e:a3:c3:9d:8b:35:a6:a2:e4:95:1d:31:
         cc:e2:4b:97:51:c8:66:27:90:68:dd:c9:ce:62:ca:76:de:2c:
         42:df:56:58:16:dc:16:f9:5b:81:e6:b3:bb:6c:59:8c:de:5d:
         f5:c3:af:13:aa:f8:fb:19:09:e5:8f:b7:16:93:16:5b:36:4f:
         5a:d2:f1:8b:96:85:37:10:00:15:83:b7:f5:2d:85:d3:82:3f:
         ac:f9:67:ec:81:60:7f:af:56:30:35:ea:cb:24:11:9f:53:2b:
         34:9e:0b:2c:e7:3b:fb:4b:6c:7f:bf:64:df:de:52:4e:98:2d:
         47:27:55:0a:b2:1e:77:0b:ef:4c:14:ba:f2:a6:c5:53:ab:a4:
         4e:d4:5c:f6:c9:84:0e:02:9c:3c:96:bc:17:29:73:07:35:43:
         ce:fd:23:3f:2b:54:c3:22:83:84:f3:71:4d:97:2e:20:54:0b:
         3b:0b:7a:88:2d:05:aa:54:e8:eb:71:c5:f6:40:74:72:00:55:
         41:15:31:c3:c8:b2:cc:5a:7a:93:14:d6:80:c4:88:7d:4a:e9:
         a2:03:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:11:11 2026 by rpki-client