Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
File:                     qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft (raw, json)
Hash identifier:          HBKyrNJi7CJuWQUJ4UPg/1wvJwvnJbZ9ZuB6/r5QFY8=
Subject key identifier:   6A:BD:D7:86:02:1D:DD:43:76:FD:DA:E5:40:82:60:1D:0C:9A:D2:7E
Authority key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
Certificate issuer:       /CN=A91AC075/serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
Manifest number:          6A
Signing time:             Sun 27 Sep 2026 08:33:25 +0000
Manifest this update:     Sun 27 Sep 2026 08:33:24 +0000
Manifest next update:     Sun 04 Oct 2026 08:33:24 +0000
Files and hashes:         1: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl (hash: l/k313om0WjGCu9l1ac3CxlfYLbVkXgLY7Tw797mmFk=)
                          2: CDBA019C39F311F1ADEB5DEEC0833773.roa (hash: iidMH4KhBMhVgK4N0PlQBp3CYB4iLSSSQ1RpsnRFm3E=)
                          3: 4D14307E1C2C11F186EF2187353D8C67.roa (hash: 8n1lBtRiuUToqQoaz+XovDqW+aJBw7UTosZ8OjYJOZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
        Validity
            Not Before: Sep 27 08:33:24 2026 GMT
            Not After : Oct  4 08:33:24 2026 GMT
        Subject: CN=6ab8d4d5-cf0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e1:dc:47:1c:9b:01:b2:64:5c:d7:2d:18:16:
                    6d:c6:90:e6:e9:6c:7a:b4:57:53:e7:ed:fc:82:f6:
                    db:fe:0e:a0:e4:32:c4:0f:ef:1b:13:d0:86:00:02:
                    61:22:c5:74:9d:db:c4:9d:6f:e5:ec:5e:58:cc:c9:
                    70:7f:d3:39:a9:f8:be:11:2e:15:00:d0:20:d5:eb:
                    00:8a:5e:92:03:2e:d6:17:cf:ca:07:02:79:c2:e5:
                    78:51:e3:e6:c3:97:3d:ba:66:31:11:8d:8d:38:89:
                    52:de:02:9e:70:bc:61:d3:b4:09:06:e5:0d:ba:ce:
                    23:c1:1b:56:2d:89:4e:60:ca:03:65:6b:93:4e:d0:
                    1f:93:54:38:d3:40:08:2f:7b:98:5a:06:f0:3d:d2:
                    1e:2d:db:78:ac:5f:de:d5:eb:6a:23:e5:cb:6a:7a:
                    9a:f8:79:a9:14:25:37:5e:27:11:e1:a2:63:2d:88:
                    57:7b:b8:00:01:e6:68:f5:8c:9b:9c:b5:66:b1:1a:
                    67:36:86:cd:d7:4d:1e:9f:e5:93:11:f8:de:fc:1c:
                    f0:0c:2b:8a:1e:df:2a:cd:9f:86:df:b8:00:38:bc:
                    7b:9e:8d:c0:58:d6:0e:da:16:d3:4d:38:23:fc:cb:
                    37:aa:93:8c:c9:07:0f:c4:1b:cd:68:ef:66:f0:5e:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BD:D7:86:02:1D:DD:43:76:FD:DA:E5:40:82:60:1D:0C:9A:D2:7E
            X509v3 Authority Key Identifier:
                keyid:AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:22:d4:e5:81:fc:f3:db:3b:71:46:31:7b:97:b7:1d:74:d5:
         89:5a:e8:51:2b:96:1f:e9:f4:51:28:65:33:11:f2:dd:55:4a:
         72:33:8c:d2:2c:e0:0b:44:a8:24:bb:16:e7:95:54:a2:4c:95:
         87:de:42:31:0b:f0:48:36:de:58:4a:6b:c2:c8:d6:13:64:88:
         ae:01:4c:a7:4b:04:7e:31:ce:82:70:9c:a8:79:da:a2:6c:d6:
         00:59:35:33:e6:7e:c7:59:ca:03:ee:65:2b:18:b1:2f:aa:af:
         28:9d:b8:82:ae:6a:01:f2:fe:20:1c:49:a0:22:0d:40:01:23:
         59:83:21:2f:d0:63:2c:cd:a1:95:63:ce:00:92:d5:2f:ca:2e:
         23:a6:11:82:d7:fd:9d:32:51:96:26:f7:91:d4:03:51:eb:ec:
         ca:71:2f:0b:c1:0e:bd:7f:4a:22:3e:a7:9f:a4:fb:58:ac:5d:
         00:98:9a:b7:65:10:fc:a6:60:50:9d:10:0b:4e:07:19:58:43:
         2a:78:84:02:77:fa:bc:17:a0:ed:bd:ba:06:a5:b1:8b:1c:a0:
         fd:13:32:18:cd:7d:bf:e1:7b:ed:ff:d6:85:73:43:6c:b5:de:
         7c:fc:b6:48:86:7c:21:7c:f5:f4:be:37:ec:3c:88:db:15:bc:
         c4:4d:53:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:51:31 2026 by rpki-client