Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
File:                     Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json)
Hash identifier:          n2w0xS5GNhYOKFwXR81hcZN7CCFmJCBiAIW1C7eiKkg=
Subject key identifier:   C3:CA:8B:16:D7:67:16:DA:46:22:DB:18:D5:53:53:B0:FF:21:65:09
Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
Certificate issuer:       /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Certificate serial:       1139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
Manifest number:          1115
Signing time:             Fri 02 Oct 2026 17:26:32 +0000
Manifest this update:     Fri 02 Oct 2026 17:26:32 +0000
Manifest next update:     Fri 09 Oct 2026 17:26:32 +0000
Files and hashes:         1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: jfIujiSDsH1bSXxl3y6/Lg6cU8W4PH6XSo3vraWAQy8=)
                          2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ=)
                          3: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 4xjOHA2a4uxswPhEHWIZ5kUb1RGsi99QGiMmvVEx05A=)
                          4: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: 1zVW9OK/rYgrfqL/Kah7ClFS1DlkC9pX1ORA7B+nV6E=)
                          5: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: hKyxzq+6NvE6xqXSiWJ91EzUH8fvtkfjv6xhpZcoKsw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
                          rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4409 (0x1139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
        Validity
            Not Before: Oct  2 17:26:32 2026 GMT
            Not After : Oct  9 17:26:32 2026 GMT
        Subject: CN=6abfe948-4fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5b:d1:3c:b6:c7:bb:c5:a1:42:e4:4a:37:ca:
                    0d:bd:75:dd:b3:58:1d:66:92:56:54:78:b0:12:1e:
                    d8:c5:88:91:cd:5c:95:20:eb:10:67:09:39:2a:35:
                    dd:4b:94:6d:28:8d:cf:2c:be:a4:ef:81:22:fc:dc:
                    42:f6:79:87:18:d3:3d:7f:f3:22:18:6d:d4:88:87:
                    8d:a4:85:3c:83:2e:6f:d2:57:a9:e5:92:1a:c5:62:
                    08:d8:11:a6:e2:26:1f:4f:bd:e9:17:a4:64:1c:74:
                    0e:f1:c9:f1:93:cf:8b:5e:89:c2:b1:10:ad:0b:4a:
                    ac:64:44:c0:01:10:00:31:f8:83:72:70:d5:64:26:
                    e9:7f:2e:16:83:5a:0f:71:3f:6d:53:36:19:d7:81:
                    7f:9f:f6:c3:ab:28:d9:90:66:a3:e0:11:db:8b:b1:
                    13:81:ad:63:fb:a6:35:e8:f4:c7:65:6d:f0:8d:af:
                    d3:b1:53:33:e9:32:de:a2:5e:4c:38:03:9d:fe:21:
                    90:f6:5e:30:55:89:f7:29:63:17:c0:5f:9a:56:33:
                    4c:af:13:20:db:4f:2a:4d:91:fc:f8:08:b4:15:55:
                    8b:38:f6:c0:6f:3c:fe:77:d9:d8:35:79:2a:60:5b:
                    a5:6c:92:e6:7b:68:44:dc:64:a6:49:78:3f:8a:e0:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CA:8B:16:D7:67:16:DA:46:22:DB:18:D5:53:53:B0:FF:21:65:09
            X509v3 Authority Key Identifier:
                keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:23:7d:69:5b:da:59:69:f2:ba:3d:34:83:6a:97:21:2f:28:
         2b:10:8c:b0:12:dc:46:f2:c1:cb:9d:82:b5:f6:85:f0:a2:e3:
         36:a9:24:48:a8:c3:1f:43:f4:34:2d:dd:ef:62:99:a1:be:4d:
         c2:39:16:82:a8:87:c9:0a:00:73:09:79:f1:76:d7:b6:96:86:
         d1:82:a6:a5:fc:2a:60:62:5c:a6:f6:cc:f6:7b:e9:e6:e6:d5:
         fa:20:19:6e:0c:4a:76:fc:b5:51:bc:7f:97:b5:d7:61:e8:d0:
         f7:2a:b8:d9:11:79:52:9b:bc:e0:73:a4:99:6c:73:00:ab:51:
         f8:7e:ec:3d:b1:a4:0d:91:e5:3e:f4:15:7d:f2:5a:09:df:3e:
         71:f1:83:bb:8c:ba:a4:b3:83:71:f8:00:12:ae:63:11:95:a8:
         5e:22:2e:8a:1b:4f:d9:b5:1f:4c:b4:2d:41:18:9f:d2:d2:59:
         25:94:94:c5:e2:9e:52:93:6c:64:ca:ba:0a:9c:05:5c:ca:dd:
         dc:da:5f:62:00:27:83:70:c6:bd:f6:48:d4:85:8a:ef:88:1c:
         59:11:77:ef:00:0e:cc:f4:ea:46:64:a0:a8:ce:52:60:39:f3:
         e8:59:fe:7a:5e:c1:17:a3:2c:02:b0:d7:be:5e:2b:b8:7d:67:
         cb:18:bd:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICETkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz
MDNGRTRGNzEwHhcNMjYxMDAyMTcyNjMyWhcNMjYxMDA5MTcyNjMyWjAYMRYwFAYD
VQQDEw02YWJmZTk0OC00ZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyFvRPLbHu8WhQuRKN8oNvXXds1gdZpJWVHiwEh7YxYiRzVyVIOsQZwk5KjXd
S5RtKI3PLL6k74Ei/NxC9nmHGNM9f/MiGG3UiIeNpIU8gy5v0lep5ZIaxWII2BGm
4iYfT73pF6RkHHQO8cnxk8+LXonCsRCtC0qsZETAARAAMfiDcnDVZCbpfy4Wg1oP
cT9tUzYZ14F/n/bDqyjZkGaj4BHbi7ETga1j+6Y16PTHZW3wja/TsVMz6TLeol5M
OAOd/iGQ9l4wVYn3KWMXwF+aVjNMrxMg208qTZH8+Ai0FVWLOPbAbzz+d9nYNXkq
YFulbJLme2hE3GSmSXg/iuCn9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPKixbX
ZxbaRiLbGNVTU7D/IWUJMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2
Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln
QUR6c1h2cTdnajB3UC1UM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeiN9aVvaWWnyuj00g2qXIS8oKxCMsBLcRvLBy52CtfaF8KLjNqkkSKjDH0P0
NC3d72KZob5NwjkWgqiHyQoAcwl58XbXtpaG0YKmpfwqYGJcpvbM9nvp5ubV+iAZ
bgxKdvy1Ubx/l7XXYejQ9yq42RF5Upu84HOkmWxzAKtR+H7sPbGkDZHlPvQVffJa
Cd8+cfGDu4y6pLODcfgAEq5jEZWoXiIuihtP2bUfTLQtQRif0tJZJZSUxeKeUpNs
ZMq6CpwFXMrd3NpfYgAng3DGvfZI1IWK74gcWRF37wAOzPTqRmSgqM5SYDnz6Fn+
el7BF6MsArDXvl4ruH1nyxi9Iw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:15:09 2026 by rpki-client