Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
File:                     5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json)
Hash identifier:          pPNIKY+1+uMoZuCzoREwQbPgFaU6QDgB5zq8YcCibsU=
Subject key identifier:   90:1A:59:BB:E6:A5:01:73:36:0A:C2:47:B2:FE:19:8A:5B:00:F8:60
Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
Certificate issuer:       /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
Manifest number:          FC
Signing time:             Tue 29 Sep 2026 06:44:03 +0000
Manifest this update:     Tue 29 Sep 2026 06:44:03 +0000
Manifest next update:     Tue 06 Oct 2026 06:44:03 +0000
Files and hashes:         1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: F9slWL0U2MTJwAnX4G9om95AgK8NKKM/u8nCf+Ynroo=)
                          2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: TIY6gyAp3NwOI0omiLD20nrzYuDIOBYf89hc7GdDNuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
                          rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 06:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
        Validity
            Not Before: Sep 29 06:44:03 2026 GMT
            Not After : Oct  6 06:44:03 2026 GMT
        Subject: CN=6abb5e33-65ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:18:3b:5e:28:65:a3:93:88:a9:35:a0:92:
                    8c:6a:3b:1a:57:a3:73:49:3a:f2:43:18:8d:0b:5a:
                    8e:45:ae:82:d6:3b:48:4c:26:94:fa:74:09:03:f9:
                    47:83:07:03:c2:b5:a5:8b:d6:0b:9c:9a:d3:e8:7b:
                    17:6b:26:07:10:9d:d4:d1:0b:f2:3a:bc:62:2c:97:
                    4b:2a:47:47:57:c9:14:cc:ca:13:fc:12:5b:9e:ee:
                    fe:0d:50:ad:e5:a6:8f:03:d2:49:5d:77:c7:37:36:
                    7e:68:60:85:6f:76:c6:94:3b:14:2d:de:4a:2c:09:
                    ea:1f:56:05:8a:09:ab:18:53:98:0d:03:d4:1f:d6:
                    5e:81:c9:e7:a9:d3:d0:9a:5c:85:a5:a0:ff:6d:45:
                    d0:dd:88:a4:a8:d0:d0:bf:f9:2c:cf:a6:34:ae:c6:
                    0a:29:15:5f:21:95:64:3e:7b:28:7f:0b:2c:bd:b6:
                    0b:bb:dd:4c:2d:90:a2:0d:c2:72:91:aa:1c:66:34:
                    1f:ab:8c:20:20:71:10:90:fa:5e:d2:ca:9b:20:6a:
                    e9:86:c9:19:01:93:8f:7b:8a:cf:54:51:27:a3:37:
                    6b:96:6a:6c:f5:c6:5a:50:cc:6c:47:c2:fd:80:5f:
                    4c:36:18:b1:59:6d:a8:c8:ff:07:c7:17:e1:a4:4d:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1A:59:BB:E6:A5:01:73:36:0A:C2:47:B2:FE:19:8A:5B:00:F8:60
            X509v3 Authority Key Identifier:
                keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:4c:52:fe:af:c7:c7:0d:e1:2c:13:83:b9:97:58:36:d1:
         2b:c4:5b:74:29:17:81:1f:c2:6b:47:a6:e8:0f:cd:5d:a4:f9:
         c2:bb:07:6d:b1:2d:29:65:85:23:1c:03:83:47:d5:67:b4:8a:
         08:08:7b:de:e0:28:9c:18:38:66:50:96:9f:99:19:31:5d:d0:
         b9:36:7f:d1:c0:82:18:26:1b:9f:37:07:e5:66:e6:e1:14:48:
         6f:f8:a1:68:b4:05:20:c5:ee:b7:f7:9d:aa:41:dd:62:df:c8:
         3a:4c:cd:49:cf:02:ef:70:d4:63:a1:28:23:a5:23:fd:b2:34:
         2d:2e:bd:be:b2:cc:62:ab:c2:21:96:ba:67:37:45:ff:a9:a3:
         63:63:d8:df:19:a9:0b:a4:64:ec:77:14:93:24:1d:98:f4:58:
         c1:81:6c:03:70:00:89:15:f1:a7:52:52:5e:2e:fa:7d:5c:fd:
         5c:6e:25:35:56:7b:3f:5a:60:c8:82:b6:ef:79:63:50:75:2b:
         d6:9a:c0:ff:a9:81:5e:54:a2:36:fe:50:d7:f2:13:3f:20:89:
         9e:92:92:9a:c8:f4:1c:65:56:95:e1:d2:03:5b:80:c2:09:6b:
         e0:63:c5:fe:25:ee:39:74:73:a9:93:a8:ff:75:81:c0:2b:3c:
         81:59:d0:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJBNEYxMTAvBgNVBAUTKEU3RjQxOTI1MUE3OTYxREYyNzREMzlCNTM0QTIyRjNF
Q0RCMzEwMkYwHhcNMjYwOTI5MDY0NDAzWhcNMjYxMDA2MDY0NDAzWjAYMRYwFAYD
VQQDEw02YWJiNWUzMy02NWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJIYO14oZaOTiKk1oJKMajsaV6NzSTryQxiNC1qORa6C1jtITCaU+nQJA/lH
gwcDwrWli9YLnJrT6HsXayYHEJ3U0QvyOrxiLJdLKkdHV8kUzMoT/BJbnu7+DVCt
5aaPA9JJXXfHNzZ+aGCFb3bGlDsULd5KLAnqH1YFigmrGFOYDQPUH9ZegcnnqdPQ
mlyFpaD/bUXQ3YikqNDQv/ksz6Y0rsYKKRVfIZVkPnsofwssvbYLu91MLZCiDcJy
kaocZjQfq4wgIHEQkPpe0sqbIGrphskZAZOPe4rPVFEnozdrlmps9cZaUMxsR8L9
gF9MNhixWW2oyP8HxxfhpE0kwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAaWbvm
pQFzNgrCR7L+GYpbAPhgMB8GA1UdIwQYMBaAFOf0GSUaeWHfJ005tTSiLz7NsxAv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE0Ri80RjQwQkU2QzNC
NzcxMUYwOTdBOEJCMjRDNEY5QUUwMi81X1FaSlJwNVlkOG5UVG0xTktJdlBzMnpF
QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVfUVpKUnA1WWQ4blRUbTFOS0l2UHMyekVDOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkE0Ri80RjQwQkU2QzNCNzcxMUYwOTdBOEJCMjRDNEY5QUUwMi81X1FaSlJwNVlk
OG5UVG0xTktJdlBzMnpFQzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVaFMUv6vx8cN4SwTg7mXWDbRK8RbdCkXgR/Ca0em6A/NXaT5wrsHbbEtKWWF
IxwDg0fVZ7SKCAh73uAonBg4ZlCWn5kZMV3QuTZ/0cCCGCYbnzcH5Wbm4RRIb/ih
aLQFIMXut/edqkHdYt/IOkzNSc8C73DUY6EoI6Uj/bI0LS69vrLMYqvCIZa6ZzdF
/6mjY2PY3xmpC6Rk7HcUkyQdmPRYwYFsA3AAiRXxp1JSXi76fVz9XG4lNVZ7P1pg
yIK273ljUHUr1prA/6mBXlSiNv5Q1/ITPyCJnpKSmsj0HGVWleHSA1uAwglr4GPF
/iXuOXRzqZOo/3WBwCs8gVnQ9A==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:48:24 2026 by rpki-client