Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File:                     cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier:          7hSuTN3ZPaAllhk+yZA/cmHlG9Jm6aXGBi9rvovLy98=
Subject key identifier:   36:FB:0A:49:F1:C0:55:5B:EE:32:AD:7D:3C:F6:FE:0D:80:4A:45:BD
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer:       /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial:       088C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number:          0882
Signing time:             Sun 20 Sep 2026 20:42:01 +0000
Manifest this update:     Sun 20 Sep 2026 20:42:00 +0000
Manifest next update:     Sun 27 Sep 2026 20:42:00 +0000
Files and hashes:         1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: uv1w0uomS6lpS9Sh8DVXU3aH5Upw+osZq8U5t9qw2bw=)
                          2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
                          rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
        Validity
            Not Before: Sep 20 20:42:00 2026 GMT
            Not After : Sep 27 20:42:00 2026 GMT
        Subject: CN=6ab04519-ffa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:57:0a:80:31:ae:99:3e:b5:b8:b1:01:06:
                    11:13:26:d8:48:73:0f:3d:73:df:34:83:3d:06:b4:
                    10:fc:50:74:46:10:9e:9f:bb:ba:bc:0e:d1:3e:6d:
                    ef:dd:69:6b:71:f5:70:45:77:ad:09:f2:37:b8:57:
                    aa:d5:63:ed:e2:4b:b4:dd:d5:9a:41:cb:07:ec:85:
                    13:69:9e:15:cc:8d:df:8f:8e:79:38:8b:63:de:1e:
                    bc:af:0b:a5:59:c1:8e:f7:cc:c0:3f:01:31:29:f3:
                    1b:b2:db:e1:ad:4a:d1:14:0b:60:99:d9:f3:f5:d6:
                    35:58:b6:f2:c2:45:78:98:09:2c:c7:86:b7:02:39:
                    f6:90:4e:81:f8:bd:45:66:02:0a:20:62:b4:99:9f:
                    17:ea:dc:50:92:43:ae:0e:96:41:24:e8:40:72:69:
                    84:b5:0e:17:17:1c:d9:36:b5:33:24:d4:09:eb:92:
                    26:29:a1:a8:24:d8:60:4d:0b:41:5d:1b:3d:70:cb:
                    fb:e9:a1:40:7f:fe:af:80:45:6f:e6:38:8d:91:7c:
                    e5:d4:a0:66:fe:89:d9:d8:42:bf:81:ae:44:23:8b:
                    93:d0:55:7d:76:e0:89:7a:53:59:d5:b5:1f:21:e6:
                    b7:95:0b:9b:0b:40:0f:49:46:79:ab:7f:15:82:44:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FB:0A:49:F1:C0:55:5B:EE:32:AD:7D:3C:F6:FE:0D:80:4A:45:BD
            X509v3 Authority Key Identifier:
                keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:aa:28:73:8c:db:3f:cb:35:cf:a0:19:5f:63:eb:1f:9f:2d:
         c8:8e:7c:bb:d6:18:19:d5:6d:67:5f:9e:e7:79:25:25:d3:61:
         26:7a:7d:70:4f:34:b2:40:5d:dd:86:c6:8f:43:8b:71:59:6c:
         1e:b7:e3:8f:44:a4:10:bb:aa:2f:c1:90:e4:56:9e:cf:5d:0a:
         63:78:b0:18:e0:bd:0e:8b:fc:0c:f5:c4:d7:ed:f7:64:2c:2d:
         c0:3b:42:ae:9c:e8:86:8c:7e:4c:ba:96:11:46:cd:4e:7f:09:
         16:c7:7b:e1:12:88:c8:39:da:5a:72:bd:6b:25:b6:72:aa:7a:
         a8:e2:aa:43:2c:3c:45:55:a4:21:6d:ca:e9:83:c6:61:f7:27:
         ef:3a:07:f8:6e:2e:93:ef:41:55:86:08:9e:25:fa:4f:cd:b0:
         ba:71:3a:fb:67:35:65:d1:4d:61:d6:18:26:f9:e1:64:6e:91:
         4c:1c:7b:b0:f1:54:cb:09:8b:4e:e2:02:15:af:91:69:30:f7:
         dc:46:66:66:44:c4:c0:15:d4:2d:49:61:67:f0:8a:c0:cb:e8:
         17:0a:d8:5b:d2:e4:d6:68:13:d7:c5:7d:f6:37:39:a3:3f:3f:
         63:fd:c9:8a:02:05:bd:32:74:6e:31:b7:3b:84:08:a7:15:17:
         93:ff:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:49:56 2026 by rpki-client