Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
File:                     Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft (raw, json)
Hash identifier:          JugDiq6HSJrBWlKDs5V4nSnKDKBUNedxtmSQoI2hDSE=
Subject key identifier:   A4:B2:62:72:D9:87:75:CF:C8:3E:A8:56:15:E5:E2:CE:AE:90:29:3A
Authority key identifier: 43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04
Certificate issuer:       /CN=A91B0E2D/serialNumber=43B463066F5BA166BE023AF7FA58B4212A427304
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
Manifest number:          1D
Signing time:             Fri 09 Oct 2026 09:43:52 +0000
Manifest this update:     Fri 09 Oct 2026 09:43:51 +0000
Manifest next update:     Fri 16 Oct 2026 09:43:51 +0000
Files and hashes:         1: Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl (hash: qV2iDcXqj3NYcFKdJUXowJIZU6Z6E+IFccJy3ZjGgNM=)
                          2: 831A285A99F811F1BFBF2EA14911F970.roa (hash: rZLgkUIG2I9KynMnivKmBbNyGpXP6BLLyC4/f2vDTdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0E2D, serialNumber=43B463066F5BA166BE023AF7FA58B4212A427304
        Validity
            Not Before: Oct  9 09:43:51 2026 GMT
            Not After : Oct 16 09:43:51 2026 GMT
        Subject: CN=6ac8b758-ef03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:5a:21:92:0c:e2:f4:65:38:6e:56:7f:02:
                    f9:7c:a0:2e:60:84:a6:5f:8d:98:a5:d9:00:83:be:
                    a0:fe:fa:36:85:ea:5d:01:4a:66:2d:80:ae:39:5e:
                    cf:8e:4e:9e:d0:f7:ef:25:b8:03:2e:2d:ea:8b:b8:
                    63:dc:0c:e5:9b:b9:2a:f7:4f:10:84:4d:b3:ee:46:
                    2e:85:58:23:bf:f0:a0:09:5a:c7:67:04:d7:65:4a:
                    51:1f:2e:ad:b4:21:a5:cd:22:15:be:ed:7e:69:c7:
                    47:5e:61:c4:b7:34:c1:f0:63:19:01:4e:c3:e4:2b:
                    1b:27:cc:82:cb:ba:85:90:08:22:8b:1e:e8:d9:94:
                    35:27:d0:de:7c:26:28:fd:aa:a4:8e:99:8b:16:e6:
                    7b:69:31:a9:a7:c9:03:71:8c:ce:68:b9:39:ff:85:
                    1a:74:85:3e:de:b1:18:c3:54:37:33:51:0b:0d:44:
                    b7:e6:c5:d4:87:eb:e9:9d:35:b6:ae:ee:1c:57:9a:
                    34:d4:5e:30:3f:99:9f:c2:9e:c5:47:a1:03:36:76:
                    95:7c:d0:39:51:18:f4:d9:53:ba:b5:0b:21:d6:56:
                    5e:a5:3c:44:07:47:63:b7:8e:7b:a8:5e:e0:a0:1f:
                    2b:a2:99:97:fd:3f:53:32:15:f8:02:15:d8:58:32:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B2:62:72:D9:87:75:CF:C8:3E:A8:56:15:E5:E2:CE:AE:90:29:3A
            X509v3 Authority Key Identifier:
                keyid:43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:18:29:a0:a6:fc:63:20:d5:aa:7b:71:d5:92:88:15:8a:10:
         55:9a:a1:66:fe:0f:4b:25:5b:24:0a:8c:04:85:a3:04:fb:d8:
         73:ce:0f:bc:76:5b:b5:89:be:92:44:fe:73:25:3b:e4:81:79:
         7d:a9:6b:20:ba:0f:51:6e:d6:39:ef:1b:d4:45:b1:bc:61:c0:
         56:f5:79:b8:5f:9d:b0:1e:a2:18:49:a2:6a:4e:45:a9:8a:b0:
         37:a9:5c:2a:da:61:35:11:95:a2:42:36:60:dc:8a:b1:be:f7:
         58:d1:28:10:9c:95:8d:f6:05:17:ee:a0:eb:03:05:44:e4:bb:
         a2:1c:37:39:77:4e:69:22:4f:59:43:1f:8f:e7:bc:ca:2b:6c:
         b1:f3:5b:66:f8:5c:bd:6d:e2:b0:11:63:36:13:38:b3:75:03:
         69:97:ba:6b:f9:b1:62:86:c2:4d:f9:cf:02:dc:74:44:e8:cb:
         05:82:aa:96:e1:80:d7:d3:07:10:5f:c0:57:26:d5:83:6a:7e:
         38:a1:77:e1:49:e6:cd:96:5d:16:56:86:37:17:2c:b7:62:af:
         23:a0:39:b8:58:84:22:f1:1b:77:17:5d:95:8e:9a:fe:86:5d:
         e1:94:0b:62:de:b9:7b:3c:97:e4:53:ce:83:d1:ea:ab:f6:a4:
         ea:cf:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:42:48 2026 by rpki-client