Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File:                     Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier:          RloPnKykeAGDHSH9TAb7MFjZ6zwOe7x5so+afDPXsuc=
Subject key identifier:   1E:F2:12:99:5D:7E:89:E3:CD:41:62:36:9F:73:CE:68:33:EF:AE:74
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer:       /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial:       1C0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number:          1C06
Signing time:             Sun 20 Sep 2026 16:12:02 +0000
Manifest this update:     Sun 20 Sep 2026 16:12:02 +0000
Manifest next update:     Sun 27 Sep 2026 16:12:02 +0000
Files and hashes:         1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: kG3orAKakp5mdZioFoLdlyjgtAGXtsY2VI+r+D1RgrY=)
                          2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: VUPltuoFww8hZ1Urrtv19HM0IQZ3a1bmc12QvfJk9Ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7181 (0x1c0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
        Validity
            Not Before: Sep 20 16:12:02 2026 GMT
            Not After : Sep 27 16:12:02 2026 GMT
        Subject: CN=6ab005d2-acb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b1:bf:b1:f5:f2:9a:86:f5:1c:25:41:0d:f6:
                    8d:f0:ab:2f:49:8f:89:8b:50:19:ec:47:cd:22:67:
                    22:60:d7:be:cc:c5:8c:e4:90:c9:22:b4:44:9f:a8:
                    c7:5c:35:da:95:2f:3e:88:e5:b4:c1:c8:9b:18:80:
                    7f:0f:a4:f8:47:80:47:96:37:ff:a5:f6:9b:a1:1a:
                    4b:79:11:8b:38:58:9d:fe:a3:eb:5b:85:cc:0f:af:
                    18:fd:cc:be:4d:17:3e:fb:db:c6:d9:25:63:04:ab:
                    be:da:c2:6b:00:e2:91:21:52:3e:47:9f:7e:d9:6c:
                    43:2e:1a:7b:36:5a:07:01:63:59:60:65:25:61:7b:
                    c1:77:37:e5:2a:aa:d9:f3:53:d7:32:13:5f:df:e1:
                    a4:23:83:2e:95:66:0b:81:47:6e:d1:45:65:43:b6:
                    f1:68:ab:23:3b:a0:a0:6e:b5:97:82:1c:31:eb:b0:
                    2f:8b:ff:f9:dc:80:71:71:4e:92:db:0f:96:f3:8c:
                    95:ef:6e:27:a6:96:1f:11:ca:ca:06:a7:e9:6c:06:
                    16:13:60:2b:6b:c9:70:29:d2:bb:29:82:db:6b:b9:
                    d9:1f:b3:95:5a:43:31:80:9c:56:1b:4c:87:f2:d4:
                    73:0b:51:59:dd:45:ab:87:26:b6:bc:cd:bb:36:c5:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F2:12:99:5D:7E:89:E3:CD:41:62:36:9F:73:CE:68:33:EF:AE:74
            X509v3 Authority Key Identifier:
                keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:46:e2:91:8c:74:7b:a3:7f:dc:ac:83:6d:84:e8:7a:3f:5c:
         3d:f0:32:a4:d0:09:1e:30:91:5f:62:9b:fa:c2:19:d2:06:a5:
         29:ea:16:11:cc:ce:4e:ee:2a:7b:ef:c6:6f:6d:13:35:74:ae:
         19:46:6c:ad:ce:e4:92:3e:6a:0f:a9:2e:ab:dd:c2:a7:42:17:
         28:45:21:14:cc:56:f7:47:60:86:00:fb:0d:bc:6e:37:59:5d:
         04:17:bf:df:b9:29:1d:b2:67:16:9b:bf:3a:11:73:b2:17:d6:
         68:e3:c7:a0:9a:9a:0d:37:c4:7e:6a:3e:32:f6:c2:f3:1d:0d:
         98:39:3a:53:19:2b:6e:6e:b4:c0:30:82:99:a8:ab:da:51:e5:
         02:da:4f:7d:c2:52:cc:3b:70:ef:79:af:e6:a6:15:da:10:12:
         92:c7:10:23:6a:d5:a9:19:a5:68:2d:89:e5:ed:00:b5:e5:0f:
         25:1a:77:4e:64:a7:d8:1f:3c:d9:6e:85:ae:50:4f:e0:a9:a5:
         05:b4:67:a2:93:dd:e5:69:6c:c2:72:75:7c:51:8a:7a:b2:1e:
         93:91:61:bb:0d:ab:75:1a:ce:07:db:bc:b1:64:84:77:b7:06:
         ac:7e:cd:e4:35:90:3f:7c:a5:db:34:79:b4:be:08:39:29:5b:
         24:75:f2:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2
NDg2MDIwMTgwHhcNMjYwOTIwMTYxMjAyWhcNMjYwOTI3MTYxMjAyWjAYMRYwFAYD
VQQDEw02YWIwMDVkMi1hY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5LG/sfXymob1HCVBDfaN8KsvSY+Ji1AZ7EfNImciYNe+zMWM5JDJIrREn6jH
XDXalS8+iOW0wcibGIB/D6T4R4BHljf/pfaboRpLeRGLOFid/qPrW4XMD68Y/cy+
TRc++9vG2SVjBKu+2sJrAOKRIVI+R59+2WxDLhp7NloHAWNZYGUlYXvBdzflKqrZ
81PXMhNf3+GkI4MulWYLgUdu0UVlQ7bxaKsjO6CgbrWXghwx67Avi//53IBxcU6S
2w+W84yV724nppYfEcrKBqfpbAYWE2Ara8lwKdK7KYLba7nZH7OVWkMxgJxWG0yH
8tRzC1FZ3UWrhya2vM27NsXapQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB7yEpld
fonjzUFiNp9zzmgz7650MB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT
U3hFUWxseWM5UGxraGdJQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD0bikYx0e6N/3KyDbYToej9cPfAypNAJHjCRX2Kb+sIZ0galKeoWEczOTu4q
e+/Gb20TNXSuGUZsrc7kkj5qD6kuq93Cp0IXKEUhFMxW90dghgD7DbxuN1ldBBe/
37kpHbJnFpu/OhFzshfWaOPHoJqaDTfEfmo+MvbC8x0NmDk6Uxkrbm60wDCCmair
2lHlAtpPfcJSzDtw73mv5qYV2hASkscQI2rVqRmlaC2J5e0AteUPJRp3TmSn2B88
2W6FrlBP4KmlBbRnopPd5WlswnJ1fFGKerIek5Fhuw2rdRrOB9u8sWSEd7cGrH7N
5DWQP3yl2zR5tL4IOSlbJHXy7g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:02 2026 by rpki-client