Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File:                     QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier:          B3UAqD9GIZKDNATLUYZ/8uRQ3cqIBhMxNM+jQHBvmJo=
Subject key identifier:   CF:68:D1:B2:CF:FF:52:C8:DD:C7:A6:2E:A5:FD:41:88:AA:38:BE:F6
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer:       /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number:          01DD
Signing time:             Mon 21 Sep 2026 03:43:19 +0000
Manifest this update:     Mon 21 Sep 2026 03:43:19 +0000
Manifest next update:     Mon 28 Sep 2026 03:43:19 +0000
Files and hashes:         1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: H07+J34STwRFR1nGfbt9wbyC0p8sqlYWG9Z2vUW37ag=)
                          2: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: rKGQBFsWBoXRwkkEHmzJU4DziCIyRjQTWeYrnr/z7fc=)
                          3: 810265C29F8011F1A87DFCCB3B11F970.roa (hash: zEY+APVLW4gBdXNT2IbS0X3FvTuHb5f84oamsnoooSc=)
                          4: 47142068221311EFB680F113C4F9AE02.roa (hash: R9+W9Vd8vNJv6BZYi/psQ14Bv23TuvOa9qtjBXGBpmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
        Validity
            Not Before: Sep 21 03:43:19 2026 GMT
            Not After : Sep 28 03:43:19 2026 GMT
        Subject: CN=6ab0a7d7-079f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:09:1d:a6:2b:2d:df:a2:2c:fd:c6:14:61:
                    ef:d2:5c:d7:5f:8a:b3:d6:74:ac:8b:c9:4f:1d:5e:
                    e3:41:d8:8a:06:34:d6:b3:2d:9c:ac:8e:f7:dd:ff:
                    e4:d5:84:a6:c6:1d:2d:8f:45:c8:f4:11:e5:c3:8a:
                    67:46:cc:83:1e:6e:b6:24:3c:9c:19:94:7c:f0:a2:
                    bd:17:30:dc:e1:ff:09:c5:38:37:eb:a5:dc:c2:ad:
                    57:8f:1a:41:27:f5:29:b8:39:e2:22:89:dc:99:62:
                    4c:3f:5e:9b:8f:f6:66:55:2c:d0:95:74:d3:5d:95:
                    e4:44:ba:71:41:ab:fa:85:83:f2:7e:4e:65:51:de:
                    90:04:50:24:65:af:24:47:db:65:cb:2a:9f:75:17:
                    9c:ef:c4:82:b5:71:87:a5:95:8a:b7:ac:5f:28:b6:
                    f4:c9:5b:44:c3:14:50:11:dc:92:05:8e:72:80:ef:
                    c7:3f:71:22:e3:15:47:15:5c:8a:4e:d8:0a:88:24:
                    85:60:9a:20:6d:bf:52:67:be:5e:f4:d1:71:c7:ee:
                    c3:ff:95:01:fa:34:89:60:57:a4:cd:23:e4:63:19:
                    3c:d5:94:79:24:39:0d:6a:47:1c:76:84:2c:c0:0f:
                    aa:a2:cf:34:71:6f:2f:dc:28:2d:a7:36:02:a6:b0:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:68:D1:B2:CF:FF:52:C8:DD:C7:A6:2E:A5:FD:41:88:AA:38:BE:F6
            X509v3 Authority Key Identifier:
                keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:48:9c:eb:12:16:b0:63:03:de:55:15:e5:6b:83:90:c5:
         75:d1:f5:49:d4:41:97:d4:15:86:fe:e1:0a:6c:23:a4:95:d6:
         a4:1f:77:b3:0d:cb:e6:05:da:18:5c:af:22:10:86:22:c5:be:
         de:04:f1:7c:9c:34:bc:ef:24:98:68:5f:74:3d:d1:4e:cc:e9:
         83:02:a6:6e:bd:a0:89:ac:0e:7e:fc:e3:00:79:83:af:72:ca:
         16:28:90:f2:ad:f0:78:42:3b:8f:f0:29:31:86:10:35:98:5c:
         d0:7b:b9:ed:41:20:48:6c:6f:6a:86:cd:cd:1e:82:44:5f:08:
         1d:ab:a8:71:35:46:0e:f7:9f:16:b0:07:6e:e3:a4:ad:72:65:
         82:a0:cb:0a:f7:86:d4:6a:06:98:8b:1b:70:ff:8e:cc:f3:a5:
         0e:32:dd:5c:f3:a2:fe:b8:bb:37:22:96:58:23:77:9c:07:cb:
         9c:9b:63:59:2c:74:68:78:69:4a:5c:0a:03:bd:d4:80:2f:d8:
         1d:0b:c8:9d:e3:45:d8:f3:15:a4:f5:15:bd:3c:b7:8d:18:92:
         4f:19:f0:d6:f7:cf:09:cb:c5:06:29:8a:15:e0:b9:18:b5:79:
         3e:e3:90:5a:27:e0:87:06:fa:ee:b4:41:5f:5d:7e:5e:ec:ff:
         7a:4e:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:13:33 2026 by rpki-client