Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File:                     qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier:          ByHwYK/Dkf1CWLnrb6X7MUAuLK5e8xo2QlTaiNrrSsU=
Subject key identifier:   6B:73:D6:8A:CA:6D:B4:00:8F:CF:61:71:DF:C3:09:01:79:6B:72:76
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer:       /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number:          0295
Signing time:             Wed 23 Sep 2026 01:34:00 +0000
Manifest this update:     Wed 23 Sep 2026 01:33:59 +0000
Manifest next update:     Wed 30 Sep 2026 01:33:59 +0000
Files and hashes:         1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: WNP9rfWurIL0D4oPuNKQSqFqhlTMiNKuHqYLVYJx0ks=)
                          2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
        Validity
            Not Before: Sep 23 01:33:59 2026 GMT
            Not After : Sep 30 01:33:59 2026 GMT
        Subject: CN=6ab32c88-39a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:18:3d:3a:f1:8f:a5:1e:7b:7e:8a:03:dc:
                    ba:0b:e5:4f:d5:35:c2:14:64:57:18:de:a6:6e:c3:
                    73:4a:68:58:3a:9d:79:77:39:82:01:b3:fa:e5:67:
                    a5:2c:03:cb:30:b9:86:39:42:df:41:3c:39:34:88:
                    2a:ca:fa:22:8a:35:b7:29:8c:a8:36:26:57:f5:84:
                    65:2b:94:e2:d2:05:50:69:2e:cc:f3:b6:15:af:98:
                    82:5c:d5:19:14:fb:b6:fe:c1:24:c0:24:38:87:f5:
                    0d:b8:90:04:11:dc:7a:53:15:e6:cd:73:bc:0e:6f:
                    93:b6:4d:96:15:20:dd:3b:6a:bd:f6:97:df:8d:b4:
                    04:7e:24:d7:55:84:bb:88:f8:a1:81:45:b9:81:7b:
                    62:32:34:fb:3b:9b:ad:9e:51:35:f1:d1:93:e6:63:
                    09:43:93:7d:90:20:d1:7b:7f:dd:81:9d:59:bb:cf:
                    3f:4d:59:74:b3:a9:86:37:71:61:27:49:bc:54:52:
                    49:0e:b6:44:00:ed:3d:81:da:c2:78:42:43:da:92:
                    3f:b3:3a:43:ea:3e:04:0b:5a:5b:56:48:ea:9a:c7:
                    ad:17:e0:50:f2:b3:c5:f6:e4:2d:6c:ee:56:8d:94:
                    09:cf:8a:ce:91:2f:d5:e6:05:5d:f6:74:99:7e:f0:
                    a1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:73:D6:8A:CA:6D:B4:00:8F:CF:61:71:DF:C3:09:01:79:6B:72:76
            X509v3 Authority Key Identifier:
                keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:01:8c:53:56:5a:5a:fc:aa:0d:e0:f2:ce:c9:d6:04:90:1d:
         2b:57:9b:79:df:9d:a7:15:bc:d7:70:bd:d7:cf:8b:6a:c5:40:
         52:02:b0:10:21:62:10:6e:6f:88:71:ee:a2:6a:ca:32:90:8f:
         9b:9f:da:db:17:90:b4:9e:9f:9d:5c:7a:04:7e:c3:26:d8:85:
         c5:75:28:74:47:a6:a6:02:0d:70:6a:36:13:9a:03:d6:dd:b8:
         89:30:e4:b6:ec:c2:14:2d:c3:87:14:a6:0f:14:37:b8:a4:f9:
         40:fc:e6:9a:cc:98:4b:8d:4d:e9:46:27:ab:a8:6b:07:b1:cc:
         24:05:08:5e:59:e6:67:b8:50:7e:68:d0:5a:86:2e:41:26:c0:
         4b:b0:98:25:e3:3d:1a:82:a9:4d:e1:a9:d2:2d:d1:37:0f:8d:
         9c:17:8b:ed:32:65:8f:bd:a8:ed:c2:ac:f8:a0:d2:72:f6:ae:
         30:81:a3:8e:c0:93:be:93:8f:82:8e:78:66:4e:46:c9:17:d7:
         00:b1:51:f8:b4:44:6c:7d:2d:84:5c:86:a1:22:a7:7f:52:1b:
         eb:a7:ee:ee:0f:dd:05:28:96:1a:d0:e8:fc:4a:fc:2a:4a:3d:
         1a:98:44:6f:8a:75:74:ae:d9:8b:41:eb:3c:20:71:e0:c4:6d:
         97:de:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:04:54 2026 by rpki-client