Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
File:                     QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json)
Hash identifier:          GieNLHdUTFSAPonxXZZjdxjDFm3F8i9QPcK2FWmcdik=
Subject key identifier:   8D:01:2B:4E:BD:D0:55:C7:F9:81:F2:71:BB:09:70:71:29:1D:CF:00
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Certificate issuer:       /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
Manifest number:          0257
Signing time:             Fri 25 Sep 2026 02:18:27 +0000
Manifest this update:     Fri 25 Sep 2026 02:18:27 +0000
Manifest next update:     Fri 02 Oct 2026 02:18:27 +0000
Files and hashes:         1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: yB4vDIk6vL/XrteTxYJ5aeZeIVP4RiLg/HWnEcqfPe4=)
                          2: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: jsK4zEJyPdlVY78CXSdqb2JNhQ5rN5uWqnaH2jf5FtQ=)
                          3: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: FQVJmad1aRV/QbV4h3s9dvvJ6zDDRW7zBNhPPgrf9kM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
                          rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
        Validity
            Not Before: Sep 25 02:18:27 2026 GMT
            Not After : Oct  2 02:18:27 2026 GMT
        Subject: CN=6ab5d9f3-cd09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:d7:fd:0d:2c:4c:6b:56:31:29:d3:e9:64:
                    30:20:65:9e:34:62:d1:b8:05:b7:d3:38:57:cb:2e:
                    e1:f9:da:16:87:31:24:f3:de:6e:d6:02:3a:5a:39:
                    50:b7:b6:d4:5b:a1:fb:11:52:7f:07:0f:37:fd:8e:
                    90:cc:d1:16:bb:39:05:37:8b:1b:c1:10:7a:ec:cc:
                    68:a8:1f:4f:18:db:a2:d4:01:20:4b:88:ac:05:9a:
                    96:db:d4:fe:ca:de:a0:0a:66:e2:5a:6d:4c:b1:bc:
                    8d:0e:ee:2c:f7:c7:dd:86:e4:f1:a5:61:05:d8:ba:
                    b7:fe:92:a3:c4:9c:1f:58:75:25:4d:11:f4:6d:87:
                    ff:97:00:23:cf:55:db:11:d2:a5:61:4e:41:ab:1c:
                    4d:a6:34:c6:0d:10:fb:50:80:68:6c:de:f5:c9:fb:
                    7b:79:64:4a:9f:cf:17:8d:1c:54:56:9a:a7:ab:23:
                    d8:14:f8:7a:50:13:af:aa:f1:0a:7e:bb:55:b5:89:
                    e7:f4:c1:4a:c6:77:40:52:2f:a5:6e:0f:78:1a:2e:
                    d9:7e:14:13:85:81:92:50:28:80:63:47:4e:d9:a2:
                    91:a9:e3:db:da:4b:70:66:b2:8b:05:0e:db:37:18:
                    94:ba:0b:4b:99:cb:fa:35:16:3a:e3:43:d1:fc:0e:
                    d1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:01:2B:4E:BD:D0:55:C7:F9:81:F2:71:BB:09:70:71:29:1D:CF:00
            X509v3 Authority Key Identifier:
                keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:f7:d7:30:71:d3:c8:3b:d5:1a:a9:26:f1:c8:5b:08:d4:
         f4:28:e9:ee:51:3b:4d:cf:72:66:6a:e2:6a:94:9f:93:23:f1:
         65:4c:36:52:88:ef:d2:01:a6:f8:c9:72:a1:ef:f8:b9:a3:88:
         3c:b3:62:5c:36:06:ee:a8:f8:b5:61:b1:c1:79:04:9c:36:37:
         dd:8c:47:21:e5:6f:e1:92:6a:51:7e:08:3a:43:ab:22:b9:35:
         32:d5:7c:04:9c:cd:cf:e6:95:db:ad:37:eb:a8:62:fd:c8:5a:
         52:f3:8f:e6:aa:e1:8c:5e:31:e9:16:36:95:b9:39:af:87:28:
         16:a0:b5:8e:ae:66:06:91:1c:b3:bf:8f:e8:13:ee:de:f5:53:
         74:8a:e5:d2:ac:66:bd:48:ec:de:f2:12:1a:c0:d8:dc:c6:e2:
         64:5c:ea:b1:d4:bb:b3:72:66:f1:f4:35:91:8d:f3:bb:c6:0c:
         be:5c:9b:71:bd:34:e8:5b:4a:36:de:05:ce:03:e8:d1:28:f4:
         6b:45:5c:66:4b:26:57:b8:db:07:3f:5a:c0:52:f5:ea:02:06:
         3a:24:4c:f6:db:91:e6:11:34:e6:68:33:fb:91:8c:ac:09:f3:
         04:36:67:cb:9d:40:cb:37:2b:9c:9f:31:c8:a2:5c:fb:94:08:
         50:4b:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:41:00 2026 by rpki-client