Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
File:                     qwZIgiREAh7nNyCgReCpRPXXf-M.mft (raw, json)
Hash identifier:          YgVLCey8+PJb1TvFsyFzrOnrQTIgWBpJx1ML1tMNjf4=
Subject key identifier:   36:81:6C:38:B4:DA:52:D5:C0:6D:38:7B:7B:0F:39:43:F0:32:AC:8B
Authority key identifier: AB:06:48:82:24:44:02:1E:E7:37:20:A0:45:E0:A9:44:F5:D7:7F:E3
Certificate issuer:       /CN=A91CE4A1/serialNumber=AB0648822444021EE73720A045E0A944F5D77FE3
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
Manifest number:          0504
Signing time:             Sun 20 Sep 2026 23:35:02 +0000
Manifest this update:     Sun 20 Sep 2026 23:35:01 +0000
Manifest next update:     Sun 27 Sep 2026 23:35:01 +0000
Files and hashes:         1: qwZIgiREAh7nNyCgReCpRPXXf-M.crl (hash: jRtHgFFy1TPZD66aG3ROm2gutnS1JKk2/mOutPZFngk=)
                          2: CE6F2E9C97BC11F18CB49434A2EE528E.roa (hash: Nwt+OMKG4b1+bsIf5bbnfPAQc5s5GLqlwpqO4m2VZos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.crl
                          rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE4A1, serialNumber=AB0648822444021EE73720A045E0A944F5D77FE3
        Validity
            Not Before: Sep 20 23:35:01 2026 GMT
            Not After : Sep 27 23:35:01 2026 GMT
        Subject: CN=6ab06da6-2a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:39:53:05:11:28:52:f3:ca:16:a0:04:fa:a5:
                    c5:be:d4:13:0b:32:4c:c3:73:49:e8:3c:61:c1:7d:
                    09:0e:14:85:07:6a:b3:8c:d9:76:ab:86:11:8a:33:
                    d7:16:88:29:07:a2:54:7d:af:e0:30:63:a3:53:84:
                    f6:7c:ce:b9:02:4e:ec:a1:8a:fe:05:3d:80:74:4c:
                    68:d6:34:03:b9:03:2c:5a:a4:34:37:66:29:28:43:
                    4e:0c:e4:2b:65:1e:06:1b:d7:fe:94:98:dd:24:9a:
                    9a:9c:34:2e:73:4d:fb:d1:8a:98:39:b9:0b:b6:a7:
                    4f:ba:4b:ce:76:66:e2:0f:67:6d:db:76:e5:19:b0:
                    1c:57:00:e9:a7:79:dd:23:f1:c5:0a:e1:58:4c:6b:
                    9c:b8:50:0a:d9:dd:c6:48:d6:64:25:a3:a2:7b:20:
                    25:86:0e:9c:43:51:b4:5e:aa:16:b1:a3:02:63:a5:
                    60:57:3b:15:1b:40:ad:09:38:2d:40:1e:20:5f:9f:
                    e5:3b:fb:99:35:a3:9f:5b:a5:8a:13:03:bd:99:97:
                    e3:49:62:00:48:57:35:a9:86:4f:5b:16:02:36:b4:
                    93:b4:0c:33:76:c3:93:8e:36:38:c8:2c:dd:4e:15:
                    f2:8b:ad:3a:d6:4b:31:07:0b:52:ce:82:f6:aa:b5:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:81:6C:38:B4:DA:52:D5:C0:6D:38:7B:7B:0F:39:43:F0:32:AC:8B
            X509v3 Authority Key Identifier:
                keyid:AB:06:48:82:24:44:02:1E:E7:37:20:A0:45:E0:A9:44:F5:D7:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:26:b6:93:50:44:93:29:f6:52:a9:d0:d9:45:5e:d3:2d:27:
         69:b2:4f:6e:40:5f:f2:60:96:f9:5f:42:77:24:a1:b7:17:f1:
         ac:b7:47:6e:6e:47:1a:e1:51:25:ac:11:44:07:70:3a:9e:f3:
         a2:55:92:26:80:fb:6c:29:57:39:90:8a:74:bc:ab:66:c2:f2:
         e8:a0:a9:d8:cd:e6:e7:4e:c8:d2:b9:9d:cd:df:10:31:6c:90:
         31:50:38:4b:c3:da:e7:24:07:35:33:81:ad:ee:df:b1:16:54:
         d8:b2:17:74:e7:64:25:40:68:de:b7:0b:ba:58:ae:38:0e:44:
         a5:2b:28:4b:a7:7e:09:76:5f:41:b3:5c:22:07:48:4c:58:95:
         d0:10:aa:e1:8b:82:ae:85:ef:3a:ce:33:b5:98:af:ef:6d:fc:
         16:17:a6:71:bc:56:16:d0:ac:33:74:78:70:6f:c7:84:c8:47:
         64:92:ba:ab:49:dd:1f:b2:c6:05:91:2c:97:87:2c:ec:91:f1:
         6c:80:90:ad:2f:6e:8f:e8:8f:ef:75:23:03:d2:68:b0:52:93:
         65:24:46:8f:98:34:a1:17:ad:41:36:b3:bf:de:a5:69:8b:51:
         00:a2:6d:ef:59:23:a9:2d:69:1c:35:f2:11:b4:3a:5f:c3:f0:
         a0:97:17:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:40 2026 by rpki-client