Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
File:                     qtP-OSFFYMILVrZr17neXikZTf4.mft (raw, json)
Hash identifier:          IeZ3/VXOoen+5oXwZKLX+K9XMuHwNwK5Vlsn1y54jc4=
Subject key identifier:   0E:B5:91:2E:44:78:33:42:2B:2C:A7:38:8E:CF:B8:45:02:3D:DB:E9
Authority key identifier: AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE
Certificate issuer:       /CN=A915273A/serialNumber=AAD3FE39214560C20B56B66BD7B9DE5E29194DFE
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
Manifest number:          5B
Signing time:             Fri 25 Sep 2026 08:18:48 +0000
Manifest this update:     Fri 25 Sep 2026 08:18:48 +0000
Manifest next update:     Fri 02 Oct 2026 08:18:48 +0000
Files and hashes:         1: qtP-OSFFYMILVrZr17neXikZTf4.crl (hash: MpL6bxmC5QgXGqrJk0yDo7rzP2k3f7D1XyZ+fonJdTA=)
                          2: 68C95B4044C811F1AF05867DBD833773.roa (hash: EgnYcd9zGGkBLRDkgrSpZMFzkZue4mGm6N7R+D7HArs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.crl
                          rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915273A, serialNumber=AAD3FE39214560C20B56B66BD7B9DE5E29194DFE
        Validity
            Not Before: Sep 25 08:18:48 2026 GMT
            Not After : Oct  2 08:18:48 2026 GMT
        Subject: CN=6ab62e68-1807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:ec:33:4e:45:30:5d:d0:fa:67:9c:02:06:
                    2c:a8:54:07:d7:de:63:d0:b3:86:fe:1a:8e:4f:50:
                    ee:3a:fc:ab:61:49:a8:84:a1:83:9c:2d:f4:13:c6:
                    65:d9:b2:74:83:af:33:bc:7d:73:e0:e9:1a:0a:15:
                    60:33:54:5d:3f:f6:5d:31:c2:26:0b:69:be:4e:ec:
                    fd:c8:e6:4c:4d:c0:1a:fa:3c:cf:47:e4:2c:d2:55:
                    47:a3:61:d4:95:2f:63:e5:21:47:d5:bd:3f:fe:a7:
                    c9:6a:bf:b2:21:f9:60:a7:4f:1a:f7:3c:4e:70:ba:
                    3f:80:cc:b3:1c:06:d9:af:04:74:ec:83:0e:d6:85:
                    87:d0:80:d4:02:d2:2a:2b:b9:a7:a2:dd:c0:47:18:
                    ab:9c:d7:83:5d:39:f1:cb:4f:21:67:a0:37:c1:b7:
                    a5:c4:67:4b:cc:10:0c:b9:16:e2:82:89:3f:6e:74:
                    20:d8:87:5a:de:d3:40:d3:60:91:2a:9a:62:1a:73:
                    05:43:4a:8a:72:c7:cd:24:21:42:e4:ff:48:b9:7d:
                    db:b7:c2:af:04:4d:35:47:e0:95:2d:d7:16:f5:58:
                    3a:02:17:67:81:cb:76:d5:07:b5:32:d3:22:f6:c3:
                    ce:36:9f:f2:e6:78:95:a2:9c:19:df:8d:aa:b6:81:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B5:91:2E:44:78:33:42:2B:2C:A7:38:8E:CF:B8:45:02:3D:DB:E9
            X509v3 Authority Key Identifier:
                keyid:AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b6:72:33:a8:37:5e:9e:6a:f8:0e:33:bf:14:aa:eb:0d:af:
         6f:6c:51:ad:8d:4b:34:8b:03:1a:6a:66:1d:a7:97:eb:74:bd:
         0a:ff:7f:9f:e3:50:4e:b2:43:6d:df:79:bb:1a:aa:9b:b5:f1:
         89:f2:91:8c:8d:58:63:bf:da:b0:86:2f:ee:50:1d:5b:b4:16:
         df:28:2c:bd:0b:1f:0e:86:53:09:af:b7:78:9a:6b:82:ba:5a:
         a4:eb:bd:2f:bb:6b:26:cb:f4:7b:b3:91:75:e1:9c:ee:d1:48:
         17:9c:ee:9a:bc:0e:d0:f9:5a:02:1d:7c:77:d6:82:e0:b2:2b:
         68:9a:1f:76:9e:5e:74:c5:0c:75:b5:95:75:de:79:e0:e5:bf:
         64:10:42:1e:85:fe:6d:34:60:71:0f:dd:28:cb:52:6c:25:b0:
         9b:f9:cc:f9:8a:be:2c:c2:02:85:6a:a4:19:a8:ae:77:8c:2b:
         45:f3:8a:33:0f:87:03:3c:9b:85:f2:5e:35:ab:fe:65:1c:8d:
         11:05:45:ed:cc:25:c9:9e:f8:b3:59:71:04:1b:e0:ed:a0:ed:
         c4:ea:5f:0a:82:6f:3a:2f:14:d6:2b:e9:fc:79:4d:31:e7:e0:
         3b:49:40:a9:48:55:de:ea:76:7c:a9:d5:18:73:7c:e2:67:b2:
         c1:bc:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:31:12 2026 by rpki-client