Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File:                     qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier:          MON+zAKVKXgsh2qMFZrZnIXGUM+zw+idfSUyBpP7dV0=
Subject key identifier:   8F:B6:D1:97:FF:F2:60:39:26:67:ED:43:19:A1:1F:62:AB:14:22:29
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       02FE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number:          02F1
Signing time:             Thu 24 Sep 2026 21:39:29 +0000
Manifest this update:     Thu 24 Sep 2026 21:39:29 +0000
Manifest next update:     Thu 01 Oct 2026 21:39:29 +0000
Files and hashes:         1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: ZBNcP4Sl3QlTkYCed5E7V8tNM+0jvgEpIuJbQCvV/rs=)
                          2: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
                          3: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Sep 24 21:39:29 2026 GMT
            Not After : Oct  1 21:39:29 2026 GMT
        Subject: CN=6ab59891-2743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:01:80:8d:6a:d5:5f:42:08:63:bd:e4:bb:
                    f1:a0:5e:c2:4c:4c:1c:21:bb:47:12:c6:59:ce:f0:
                    f8:fe:e1:b2:ff:41:ba:ce:00:21:0e:95:61:d0:ab:
                    08:1a:2c:2b:f7:07:6b:9f:87:7a:db:04:81:96:76:
                    0f:46:32:08:c6:e6:37:10:2e:9a:3d:c7:fa:a3:ab:
                    13:89:ff:59:79:2a:2f:73:68:cd:e3:fe:7b:bb:74:
                    61:dc:e4:0c:93:65:21:34:ed:d7:59:91:16:00:3c:
                    ea:fd:dc:de:56:76:2f:81:a7:25:ca:79:68:98:98:
                    93:38:2f:55:ca:41:8b:d8:74:a4:bc:62:52:e2:05:
                    39:74:b2:20:1b:9a:7e:8b:67:1e:62:bd:c0:8f:d0:
                    a0:e3:f8:2a:d2:1d:22:56:4e:8b:44:e4:ff:e9:70:
                    e0:f8:b4:c8:a0:68:9e:d5:3d:6f:16:71:13:a7:bc:
                    c0:01:07:91:00:a0:be:a5:97:32:12:de:ce:7d:f2:
                    19:5e:02:fb:d9:6c:67:f5:81:ad:70:0f:bd:0d:a8:
                    f1:c6:ae:6a:2c:99:dc:61:96:e8:f8:77:34:8a:8d:
                    c0:fc:f2:5f:f0:c4:d8:79:76:33:c7:65:5e:db:f3:
                    bd:69:cb:0f:36:89:6a:4e:50:69:36:26:95:aa:e4:
                    a0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:D1:97:FF:F2:60:39:26:67:ED:43:19:A1:1F:62:AB:14:22:29
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bc:05:12:31:bf:ee:e3:7c:f6:34:2d:7a:db:eb:61:f4:ba:
         ff:a8:c7:46:15:93:e5:31:7c:d2:40:26:4a:05:8b:cf:07:5f:
         e6:78:7a:90:62:c2:b3:72:5c:c2:51:1a:b8:31:ff:a7:4c:77:
         71:15:79:fa:e6:ac:90:a4:50:cd:1a:37:03:41:36:57:c9:f0:
         06:f2:3a:45:1c:ee:9f:ec:7e:43:e6:98:bd:76:e1:3b:6e:cb:
         73:06:c2:98:b1:c4:50:c6:fb:b9:50:fd:e4:0e:e1:1e:47:48:
         4d:95:a9:cc:35:28:4d:0c:cd:bd:d7:24:3e:56:1e:6f:6a:de:
         3a:50:70:f2:4f:d7:96:6d:2c:a4:8c:6a:0a:55:9e:61:15:66:
         2a:df:44:c3:e6:44:9a:91:79:9c:0a:63:10:fb:d4:7a:71:1b:
         4b:ff:68:d0:cf:47:43:e9:0b:e7:58:80:b1:e0:2f:bb:4a:68:
         90:6b:f0:cc:f2:a0:85:22:fa:74:c7:a9:5c:d5:a6:a3:4a:ca:
         eb:c4:6d:10:3e:6b:3a:e3:bb:f9:d9:49:af:7e:9c:fe:a2:df:
         90:0f:72:a4:7c:0d:49:ec:35:7a:fa:b2:33:b0:20:50:9a:d2:
         9d:7c:a3:50:f2:7e:1b:62:6b:ba:70:5a:78:18:06:51:32:b2:
         c5:00:f6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:14:37 2026 by rpki-client