Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
File:                     qvIbcGtV8TNNz2thfp4PMR1b9zM.mft (raw, json)
Hash identifier:          Jr8rxNUmaRUR0h7IO6OK8nRnzy0xU4kbHkkZvi0qrtg=
Subject key identifier:   6D:26:13:07:46:00:53:ED:76:0A:3B:87:FE:66:7A:46:E9:A2:F2:3D
Authority key identifier: AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33
Certificate issuer:       /CN=A91729D4/serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
Manifest number:          32
Signing time:             Mon 21 Sep 2026 08:41:29 +0000
Manifest this update:     Mon 21 Sep 2026 08:41:29 +0000
Manifest next update:     Mon 28 Sep 2026 08:41:29 +0000
Files and hashes:         1: qvIbcGtV8TNNz2thfp4PMR1b9zM.crl (hash: vhVpPq/VwPg1f6oHq4YiX1wx4uGrHJityqAgXtvV0Sg=)
                          2: 1CCC1F3C97F911F1A1B8040E6F11F970.roa (hash: nnpgZb8pphmld77O5HH0vZJrbo5b7MyF20Uu/zQGu1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl
                          rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91729D4, serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
        Validity
            Not Before: Sep 21 08:41:29 2026 GMT
            Not After : Sep 28 08:41:29 2026 GMT
        Subject: CN=6ab0edb9-024a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:b5:e0:d4:bd:d5:88:39:6b:21:8b:f9:a5:
                    83:9d:8e:92:06:62:d4:32:4e:25:c0:ae:73:57:72:
                    57:45:d3:25:b8:6c:e4:9a:ce:84:ed:a8:5a:ce:20:
                    64:2b:d0:c3:72:85:b8:a6:13:06:06:f8:96:31:34:
                    66:72:9b:f8:c6:a3:26:c0:76:b9:74:69:bf:80:39:
                    62:73:10:31:fc:a4:86:5b:4d:70:72:9b:4c:f4:d8:
                    44:da:3d:78:23:f6:4b:73:39:de:b1:d4:d1:41:2a:
                    2c:96:5d:04:40:63:cb:1c:dd:30:18:7f:43:77:35:
                    92:1f:f6:cf:36:75:32:f0:21:e4:4f:95:66:5c:be:
                    29:48:27:e3:d3:6d:6d:7c:35:f2:dd:e4:a6:bd:59:
                    ad:e5:75:f4:75:e9:24:f5:7d:42:f6:6e:0b:f5:5c:
                    7f:3f:2b:e0:7e:46:b8:3a:f8:9f:36:e1:f5:de:79:
                    2d:4d:da:a6:d4:66:cd:96:38:ab:72:74:0c:e9:60:
                    6d:40:72:0c:dc:20:20:65:b4:ba:89:ac:93:d1:71:
                    e8:08:ed:c4:74:41:f4:3a:01:40:9a:bb:98:52:43:
                    e7:b5:e8:fe:75:05:a1:9f:ec:7e:14:7c:bd:65:32:
                    38:ae:b3:80:13:ab:61:d4:aa:a0:1f:fe:70:57:bf:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:26:13:07:46:00:53:ED:76:0A:3B:87:FE:66:7A:46:E9:A2:F2:3D
            X509v3 Authority Key Identifier:
                keyid:AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:90:f4:2d:ec:e5:a1:6f:87:75:fd:4a:b8:e4:e6:95:4e:ca:
         3c:c1:b2:f9:7e:c5:2d:c5:a6:29:6d:fd:61:b2:85:5b:38:9c:
         5f:4f:9d:99:68:61:1b:bb:2e:89:92:c3:50:eb:d0:21:de:b0:
         e7:f8:78:b4:bd:84:86:8e:cc:06:2a:86:c1:03:6d:97:a5:ff:
         de:4c:70:a0:ad:52:96:d0:65:a6:7a:f0:be:2d:dd:80:9e:c2:
         e2:38:e7:3b:40:3c:a6:0d:30:6b:94:11:12:cf:61:b0:53:8b:
         f2:76:ec:b2:f9:da:9a:0d:17:ba:9b:fe:c9:63:24:5f:d2:d6:
         76:29:65:2e:bf:08:8d:e4:e3:61:25:fd:c9:23:98:b3:ce:50:
         9f:d8:87:f5:0e:37:4d:57:2e:15:fa:75:c1:11:b1:6f:88:95:
         41:97:dc:ef:71:33:90:fa:2a:6c:e5:77:de:53:01:81:18:bb:
         71:7c:8c:5d:ff:90:08:cb:12:7f:36:e5:f7:eb:ae:b0:36:1b:
         c5:91:08:b6:9b:50:61:c2:4b:4a:e9:29:6b:c9:a3:f3:dd:98:
         66:ab:92:47:27:f3:f6:e1:cd:d1:60:51:65:f2:3e:39:40:2f:
         a0:2b:5e:34:1b:20:6c:96:81:eb:9f:cb:59:a7:fb:22:82:30:
         7e:b9:d8:da
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MjlENDExMC8GA1UEBRMoQUFGMjFCNzA2QjU1RjEzMzREQ0Y2QjYxN0U5RTBGMzEx
RDVCRjczMzAeFw0yNjA5MjEwODQxMjlaFw0yNjA5MjgwODQxMjlaMBgxFjAUBgNV
BAMTDTZhYjBlZGI5LTAyNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8T7Xg1L3ViDlrIYv5pYOdjpIGYtQyTiXArnNXcldF0yW4bOSazoTtqFrOIGQr
0MNyhbimEwYG+JYxNGZym/jGoybAdrl0ab+AOWJzEDH8pIZbTXBym0z02ETaPXgj
9ktzOd6x1NFBKiyWXQRAY8sc3TAYf0N3NZIf9s82dTLwIeRPlWZcvilIJ+PTbW18
NfLd5Ka9Wa3ldfR16ST1fUL2bgv1XH8/K+B+Rrg6+J824fXeeS1N2qbUZs2WOKty
dAzpYG1AcgzcICBltLqJrJPRcegI7cR0QfQ6AUCau5hSQ+e16P51BaGf7H4UfL1l
Mjius4ATq2HUqqAf/nBXv75lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbSYTB0YA
U+12CjuH/mZ6Rumi8j0wHwYDVR0jBBgwFoAUqvIbcGtV8TNNz2thfp4PMR1b9zMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOUQ0LzI5M0E1ODg4NzI1
MTExRjFBNUIzRDYwMzhEQTMwRkJDL3F2SWJjR3RWOFROTnoydGhmcDRQTVIxYjl6
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcXZJYmNHdFY4VE5OejJ0aGZwNFBNUjFiOXpNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy
OUQ0LzI5M0E1ODg4NzI1MTExRjFBNUIzRDYwMzhEQTMwRkJDL3F2SWJjR3RWOFRO
TnoydGhmcDRQTVIxYjl6TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBDkPQt7OWhb4d1/Uq45OaVTso8wbL5fsUtxaYpbf1hsoVbOJxfT52ZaGEbuy6J
ksNQ69Ah3rDn+Hi0vYSGjswGKobBA22Xpf/eTHCgrVKW0GWmevC+Ld2AnsLiOOc7
QDymDTBrlBESz2GwU4vyduyy+dqaDRe6m/7JYyRf0tZ2KWUuvwiN5ONhJf3JI5iz
zlCf2If1DjdNVy4V+nXBEbFviJVBl9zvcTOQ+ips5XfeUwGBGLtxfIxd/5AIyxJ/
NuX3666wNhvFkQi2m1BhwktK6SlryaPz3Zhmq5JHJ/P24c3RYFFl8j45QC+gK140
GyBsloHrn8tZp/sigjB+udja
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:09:32 2026 by rpki-client