Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File:                     QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier:          1lnziaJyKwd+a7/v0t3mfBgncPFjyMfTqJeiUl8xvZ8=
Subject key identifier:   DD:FF:36:42:4F:E5:FB:8C:90:0C:0C:35:6F:37:C0:FD:2C:80:F8:A6
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer:       /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number:          0228
Signing time:             Mon 21 Sep 2026 02:46:23 +0000
Manifest this update:     Mon 21 Sep 2026 02:46:22 +0000
Manifest next update:     Mon 28 Sep 2026 02:46:22 +0000
Files and hashes:         1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: 8RzA85BT/LYF3ZCuqNdSO2a0nSZx3DryislCq8V4cwI=)
                          2: 294325DC699711EEB317603DC4F9AE02.roa (hash: rkdbQ97/B4DHE2WNeWD/G6YxsLNJ2wf35oDouMC90w4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
                          rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
        Validity
            Not Before: Sep 21 02:46:22 2026 GMT
            Not After : Sep 28 02:46:22 2026 GMT
        Subject: CN=6ab09a7f-08f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:25:43:30:d3:a2:03:c6:16:fe:dc:24:6e:
                    0e:94:29:43:64:35:2b:66:47:bc:a6:57:cf:c8:6d:
                    6b:ca:5a:1e:30:d4:4c:7e:90:77:a6:eb:9f:8f:5f:
                    44:c5:29:15:27:74:2a:08:1a:37:6c:05:f0:43:7d:
                    94:77:a8:00:5c:d3:d3:0e:b4:3d:ef:9a:3a:bc:74:
                    f5:de:23:7d:e1:68:db:2b:e1:34:51:5b:f1:18:99:
                    ce:86:78:48:23:19:e1:ec:3f:f5:22:b7:c4:6c:e2:
                    d5:57:c6:2c:e0:79:34:eb:3c:43:a5:8d:f4:90:e4:
                    b6:f0:e5:71:13:bd:52:0a:a2:72:51:99:c5:44:c2:
                    be:87:65:c6:71:94:ea:5f:1d:2a:e6:4a:f1:05:73:
                    c6:5d:07:a9:05:55:54:e7:a1:9b:2f:c9:80:97:46:
                    ea:95:dc:0a:93:dc:25:63:67:40:99:b9:21:68:36:
                    a7:50:b9:7c:b2:ed:ca:9c:e7:e8:5b:21:a8:e2:0a:
                    12:3d:93:c4:38:ae:3b:e1:ab:9b:23:c0:d7:41:7a:
                    26:a8:32:17:5d:41:9d:76:62:3c:83:37:23:4b:c3:
                    61:52:ae:0b:fa:da:92:5e:c6:39:1f:0b:a1:fa:20:
                    40:d7:d6:5c:f4:1c:b8:3c:48:e9:c7:85:ec:23:12:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FF:36:42:4F:E5:FB:8C:90:0C:0C:35:6F:37:C0:FD:2C:80:F8:A6
            X509v3 Authority Key Identifier:
                keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:24:3c:ae:d5:43:01:6a:06:af:d2:d3:65:05:4d:fe:af:0f:
         3d:a5:48:4e:45:8c:da:bd:1e:99:7f:16:f0:a2:ff:39:9c:ba:
         1d:fc:a9:c9:2e:33:35:21:6e:11:b4:90:50:62:0f:ab:90:a1:
         fa:8d:78:1e:8f:4d:a9:b4:af:7a:ee:47:a7:56:f1:07:2a:74:
         94:b3:dc:2f:b6:5e:95:01:54:6d:29:ef:ed:f3:db:b7:a1:97:
         9e:26:8e:35:04:22:01:a7:d5:a0:04:79:8a:d7:75:1a:4d:07:
         5e:40:d2:8d:48:ec:c5:59:80:27:4a:45:8b:31:46:0b:f7:7e:
         9c:67:90:aa:3b:7c:16:c6:0f:73:67:c8:ea:c2:f2:c1:bf:fb:
         4c:77:f7:dc:80:27:44:5f:cb:dc:dc:51:e3:a7:68:94:75:1f:
         59:9d:8b:33:50:84:81:f8:38:38:4b:4e:d4:2f:c6:db:13:df:
         41:ed:0e:ce:87:ea:75:5b:a7:c7:7c:10:2b:f4:51:99:3a:80:
         d0:c6:1f:ec:c7:c1:e8:5a:1a:ee:d8:05:a9:8f:a7:b5:f8:1e:
         ff:80:ac:0f:6f:ae:12:55:c0:c6:35:4a:f0:08:d4:3b:e1:cb:
         c7:0f:1c:32:74:d1:6d:61:ef:da:f1:87:4c:06:8b:dd:97:62:
         f3:75:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:37:52 2026 by rpki-client