Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File:                     QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier:          osRP7rRSJMCmXbsBbJykQbylz1gWnQyfHjXTqHdWIqo=
Subject key identifier:   F9:0F:EC:53:37:45:A9:57:7D:3E:2A:2C:CF:27:15:01:88:F2:82:E7
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer:       /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial:       0922
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number:          0910
Signing time:             Sat 10 Oct 2026 20:20:05 +0000
Manifest this update:     Sat 10 Oct 2026 20:20:04 +0000
Manifest next update:     Sat 17 Oct 2026 20:20:04 +0000
Files and hashes:         1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: 5JFltcXYM/Gnf8Q5DUgPo9Kgiq2NtVdnDh7Dhkj8R2U=)
                          2: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: o0LmnO6BRRhTDWaoNS/Q5OWs6Jcg83zmkTbdMtTDeh8=)
                          3: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: 2jwBYmuNP2NNLno7BqXwfK/it4OfmPsU7sV8gqZB+Kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 20:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2338 (0x922)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
        Validity
            Not Before: Oct 10 20:20:04 2026 GMT
            Not After : Oct 17 20:20:04 2026 GMT
        Subject: CN=6aca9df5-4476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:75:fd:6b:a9:45:ce:67:e5:1a:88:46:26:
                    bb:75:84:75:8b:69:41:33:73:4a:1d:83:a1:ed:c6:
                    0b:f5:37:bc:88:1a:eb:e0:a3:a6:f6:58:db:99:ce:
                    43:03:11:f7:ec:16:da:90:7d:b5:e6:b8:b2:45:0a:
                    c7:a7:53:07:7f:c5:38:eb:a8:74:c4:52:30:68:bd:
                    15:8d:fe:5b:40:0e:59:20:d1:c2:73:e8:52:da:75:
                    90:be:d4:d8:89:d4:dd:d5:1b:60:31:c6:1e:06:9c:
                    85:e1:a4:02:26:e9:72:4a:4e:d5:0c:32:09:92:46:
                    46:c5:1d:6c:0f:24:c2:23:9f:da:52:e9:ee:60:01:
                    b6:d5:17:01:7c:49:9d:ea:30:e1:cf:78:73:bb:f6:
                    db:29:85:16:1a:81:9b:c2:41:7f:bd:3d:d8:e7:c0:
                    55:a2:c2:bc:72:3d:34:74:a7:92:a6:21:db:6e:ff:
                    a7:d7:5f:42:6d:09:58:15:dd:e0:ca:c8:d3:89:66:
                    a4:6e:af:ec:18:e4:01:4e:32:24:bb:e9:bc:82:c4:
                    64:22:17:79:b0:32:ee:56:41:d4:01:82:a9:0d:db:
                    30:e2:c1:8d:54:36:29:84:6c:f3:50:fd:c3:a2:fa:
                    5e:00:4b:61:fc:46:29:a7:33:dd:fa:ba:b2:30:24:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0F:EC:53:37:45:A9:57:7D:3E:2A:2C:CF:27:15:01:88:F2:82:E7
            X509v3 Authority Key Identifier:
                keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0e:4f:45:d8:44:45:e6:35:11:e3:e5:69:c4:ba:e6:44:93:
         cd:45:c1:f9:b4:6f:35:9e:c9:26:fc:14:cc:38:ec:72:96:cd:
         b2:d1:0a:c1:33:f4:6b:fe:66:eb:3c:5a:58:66:2f:c4:90:58:
         4d:df:ab:bc:e3:88:3b:d0:fa:06:a3:80:39:37:08:7f:2d:86:
         4c:65:48:a9:66:1a:5c:d0:0d:74:25:b0:12:98:14:7f:92:5a:
         db:d0:57:b2:ab:2d:29:e6:93:b1:b8:6b:05:7d:84:0c:e6:f6:
         87:21:a9:0c:a9:ed:70:0a:1b:50:e7:a0:6b:75:0e:85:c0:58:
         65:c4:f7:44:0f:2c:e7:40:9e:dd:2c:ed:73:58:a5:12:06:a5:
         fc:76:a9:41:33:23:91:fb:7f:73:0b:0e:d3:db:fc:d4:a0:94:
         2b:1a:90:c5:df:7f:c5:9b:bb:a1:d8:ce:a6:67:74:ae:56:68:
         0d:a3:b6:08:be:24:18:42:05:86:8d:bb:19:36:b0:ae:3e:5a:
         73:77:28:b5:31:5e:40:c7:26:7e:ca:9d:7b:11:4c:7a:db:f6:
         17:f7:7f:ea:9f:cb:d1:56:09:65:46:19:b1:b6:b5:1d:47:7f:
         16:15:f8:e4:9c:af:fc:23:5c:4b:7a:5b:9a:5d:3c:4d:f6:79:
         b7:e1:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:05:49 2026 by rpki-client