Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft
File:                     Qg-DHM6albTzE1seVXeDqyAsa68.mft (raw, json)
Hash identifier:          ecDoy41/y09ck2mVYPIzFQB4FBI8sVCF3lDplwW4Qd8=
Subject key identifier:   96:46:34:44:13:01:B1:28:BA:47:5D:C4:9A:61:A8:73:63:6B:2D:91
Authority key identifier: 42:0F:83:1C:CE:9A:95:B4:F3:13:5B:1E:55:77:83:AB:20:2C:6B:AF
Certificate issuer:       /CN=A913E614/serialNumber=420F831CCE9A95B4F3135B1E557783AB202C6BAF
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft
Manifest number:          A0
Signing time:             Mon 21 Sep 2026 07:15:55 +0000
Manifest this update:     Mon 21 Sep 2026 07:15:55 +0000
Manifest next update:     Mon 28 Sep 2026 07:15:55 +0000
Files and hashes:         1: Qg-DHM6albTzE1seVXeDqyAsa68.crl (hash: MjTUJSWuOkmW+WT7FcHWThGCPmccwtF8KcHMbkhFHXE=)
                          2: CAFFD8E6C6D511F09C4D4F76C4F9AE02.roa (hash: AJp9crJkRdxKfaM9OAeWgFWXhY+vHbqNr4N+8nx8+8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.crl
                          rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E614, serialNumber=420F831CCE9A95B4F3135B1E557783AB202C6BAF
        Validity
            Not Before: Sep 21 07:15:55 2026 GMT
            Not After : Sep 28 07:15:55 2026 GMT
        Subject: CN=6ab0d9ab-3b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f4:44:0e:2f:1b:77:f9:7d:7e:3c:3f:bb:8c:
                    d2:d7:16:f7:f3:83:81:02:94:9b:4b:4e:ca:53:10:
                    bd:7f:28:e5:da:9c:3c:ce:39:89:f5:9e:1f:48:2a:
                    9e:4f:85:33:03:4b:2b:d4:01:21:2e:86:be:78:f1:
                    a2:aa:c7:17:88:ac:fe:8d:44:52:d4:e1:61:e0:8a:
                    0d:43:72:16:16:ed:03:05:fd:3f:53:46:32:b4:a5:
                    1a:81:71:91:fe:a0:54:98:f7:67:fd:4e:fd:be:7c:
                    4c:45:fe:4c:32:97:10:68:36:d5:0a:9f:2c:b6:f5:
                    ff:4f:3a:12:e6:41:db:b2:15:82:0b:99:63:75:e0:
                    3f:89:37:e2:28:39:7b:69:8c:78:66:47:7e:35:1f:
                    2f:7b:f6:57:49:df:b2:81:18:67:02:08:a8:45:bd:
                    50:0c:90:7e:d5:b9:22:7b:b2:5e:ca:8e:b4:b5:bd:
                    cb:44:76:3a:fb:98:fc:13:61:2a:b5:a2:26:57:7f:
                    74:51:87:d9:bc:ed:1d:09:9a:8c:5e:6f:a7:81:d9:
                    44:10:32:85:55:34:3e:d3:ae:ac:eb:4b:87:22:5a:
                    65:b2:9b:06:7b:34:cb:df:09:96:e7:6c:40:0d:57:
                    0d:09:49:65:5a:ec:56:18:8b:10:c3:33:31:e1:1d:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:34:44:13:01:B1:28:BA:47:5D:C4:9A:61:A8:73:63:6B:2D:91
            X509v3 Authority Key Identifier:
                keyid:42:0F:83:1C:CE:9A:95:B4:F3:13:5B:1E:55:77:83:AB:20:2C:6B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:06:66:de:c6:33:d8:9b:04:fb:89:bf:22:6a:9a:04:f6:32:
         6d:a3:96:5a:33:77:fc:23:b6:88:71:d7:e4:00:20:9f:77:09:
         04:aa:fb:db:b3:a0:5d:64:a4:e8:6e:61:f8:23:05:4b:6f:1a:
         20:cd:c1:1d:68:7b:9b:28:84:da:1a:bb:6b:96:aa:81:49:0f:
         09:6a:d8:24:88:20:1f:61:b1:1c:fc:df:4b:17:fb:07:31:5b:
         9c:bf:74:22:46:25:d5:7d:63:a6:a4:cd:c0:97:6e:78:ff:c3:
         10:53:49:67:52:f8:b7:20:73:ed:92:63:86:fd:81:21:a5:d4:
         10:07:75:d4:9e:91:cb:22:04:e8:f7:34:0e:0c:02:9a:40:b6:
         83:fd:9c:61:3a:66:e0:4b:9f:c6:0f:f5:83:8b:72:56:d8:c3:
         f0:c8:e1:f5:80:a2:1f:0a:3b:15:3d:77:f1:d7:d8:f9:2f:d2:
         df:d6:e4:35:26:5f:c0:27:e5:e5:a5:68:3c:44:b4:1c:b1:48:
         86:ba:8b:e4:3b:9a:92:e1:3a:27:96:75:2c:7a:dc:9c:13:d7:
         3d:93:73:db:29:6d:60:fb:48:f7:e1:e6:db:ad:6f:ef:22:81:
         d7:14:df:f8:93:24:7d:f2:65:36:db:8f:f2:c9:d3:a3:21:30:
         f5:1b:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:20:23 2026 by rpki-client