Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File:                     CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier:          06H7i5HqxU0dkZjEP9/af/4K23Tn+urRthyMVrNQsP4=
Subject key identifier:   F2:BB:18:E3:E9:AF:E2:69:39:47:C5:59:46:3E:CF:6C:C3:34:38:DF
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer:       /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number:          0132
Signing time:             Fri 25 Sep 2026 05:41:02 +0000
Manifest this update:     Fri 25 Sep 2026 05:41:02 +0000
Manifest next update:     Fri 02 Oct 2026 05:41:02 +0000
Files and hashes:         1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: F+rsMwCSDTaJyPlZUc3qOqRdwmFF1KvZvTwbtttI+/k=)
                          2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
                          rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
        Validity
            Not Before: Sep 25 05:41:02 2026 GMT
            Not After : Oct  2 05:41:02 2026 GMT
        Subject: CN=6ab6096e-16ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:5f:94:c5:f8:a1:74:77:a5:be:18:ef:37:
                    bc:97:b3:93:a9:09:f0:c3:23:a5:3d:db:96:9c:bb:
                    bd:82:88:3b:66:18:0b:60:0b:99:06:e4:19:3a:b0:
                    37:d2:d6:d5:d0:4d:d8:c8:29:a7:bf:9d:a5:f2:da:
                    bc:63:2d:e4:83:cf:b8:a7:3d:47:16:fb:30:ca:ce:
                    7f:9b:11:ac:e9:e2:d6:18:c2:39:18:04:70:91:01:
                    81:1d:cc:9e:1d:c9:61:ad:a3:a1:36:7e:bc:5c:13:
                    a5:22:65:ea:3d:f1:34:a7:48:5b:53:54:f9:03:6e:
                    07:50:dd:35:43:f7:8d:c0:c9:39:54:c4:73:34:bd:
                    c1:70:e9:1e:bb:cb:49:fa:cd:53:da:be:7e:b8:7b:
                    ad:63:63:8e:e1:15:83:6b:e5:bb:a3:f6:01:70:6a:
                    d3:97:c0:3f:33:ae:57:8a:9f:d7:50:0c:ed:9a:16:
                    2f:b3:40:2e:de:4a:40:fb:f8:8c:ee:57:87:8b:2f:
                    8c:c6:6b:c2:a1:27:1b:fb:96:2d:84:cc:dd:79:51:
                    33:76:e9:d8:a7:35:ba:0a:ad:a1:84:16:52:76:9c:
                    e1:03:ed:e0:af:c6:7a:4f:83:f7:32:e3:e1:95:64:
                    9a:8a:93:15:2a:c0:a0:0b:78:6e:68:c0:53:77:31:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BB:18:E3:E9:AF:E2:69:39:47:C5:59:46:3E:CF:6C:C3:34:38:DF
            X509v3 Authority Key Identifier:
                keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0f:18:5e:21:f3:4f:ec:58:dd:b3:d2:54:fc:18:ea:b1:cc:
         2c:4f:5e:be:3b:e4:fd:1c:31:e2:e8:f4:09:68:12:12:3d:52:
         49:f3:31:02:c4:58:d0:0a:05:9d:f7:71:c8:b0:98:b4:42:38:
         62:cb:70:97:ae:ea:d2:32:25:ef:a4:e1:fe:eb:be:c6:12:4a:
         6f:4b:34:6a:15:f6:01:d7:3f:47:ad:0c:a0:c6:e4:fd:e9:01:
         88:10:d3:96:b2:35:c4:e7:c6:a0:40:51:39:ee:ed:f1:db:61:
         0a:70:d6:4e:14:3f:aa:a1:f1:3f:9a:6f:b8:22:cf:77:6e:8e:
         4b:e6:c7:52:7a:5f:6e:a6:9b:d3:be:32:41:ce:2e:c9:f1:06:
         a8:5d:39:79:5c:77:d9:17:af:ac:fb:08:6a:7b:ad:22:6b:e4:
         6e:61:92:8c:63:2f:62:81:cf:70:78:87:ee:ed:b3:d9:5c:19:
         21:31:b0:b8:66:35:a3:34:c0:19:99:33:da:3f:bb:c7:43:fc:
         db:56:08:a8:76:75:96:76:19:3b:50:da:0e:3a:a4:e8:8b:3d:
         bc:1e:0e:09:4d:24:0a:53:7c:11:b1:61:a9:69:90:39:a4:81:
         05:13:65:eb:fc:49:59:8b:a4:08:10:ba:63:5a:45:4b:82:b5:
         63:94:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:49:17 2026 by rpki-client