Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
File:                     qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json)
Hash identifier:          ffUqsdtUxN0yjQ+nld/Id6cn982dFary7JFobwnSyCU=
Subject key identifier:   43:F3:9B:2D:BE:B3:20:E7:A5:C1:32:36:9E:33:0C:B2:6E:3E:03:73
Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA
Certificate issuer:       /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
Manifest number:          01E7
Signing time:             Mon 21 Sep 2026 03:31:27 +0000
Manifest this update:     Mon 21 Sep 2026 03:31:27 +0000
Manifest next update:     Mon 28 Sep 2026 03:31:27 +0000
Files and hashes:         1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: JwIKaCHPYaKoLEKYhi8NdoLSbCDdYYuz5lZ6b1n6w9Q=)
                          2: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 9ttVaEEltdhUs2UYv+eAKQaB+ioiRBAGNmshMZGHE7w=)
                          3: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: gZMg/kdPjraT+HkFJ3M5Wuo5BFJ4/DV3UHp4Eod3HvE=)
                          4: 13Es5GdA88kWx8sMewBACagbFSE.asa (hash: n9v5a3sudoMYaJxvm85TmoUU8x6y36XEU6eGoZqo5Y0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl
                          rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA
        Validity
            Not Before: Sep 21 03:31:27 2026 GMT
            Not After : Sep 28 03:31:27 2026 GMT
        Subject: CN=6ab0a50f-14ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:a6:43:a8:4e:29:ec:d5:43:4f:b9:43:c5:
                    5e:fe:d9:69:7c:3e:a1:e9:5a:48:97:45:db:73:6b:
                    c4:3c:a4:28:c6:13:ad:14:ed:0b:02:6b:4a:99:fb:
                    08:e9:46:fb:47:d8:87:eb:22:d3:af:d6:4f:e8:fa:
                    2c:6a:dd:a2:19:c6:da:06:81:73:00:c2:5f:8d:f1:
                    b0:46:ce:c3:f9:46:92:d6:f8:59:98:24:2f:c7:8b:
                    f6:49:8a:d2:35:30:e5:b7:7d:b2:aa:d4:c7:81:7d:
                    99:27:b1:11:11:18:c9:04:a2:fe:d3:3e:cd:74:31:
                    d9:82:6e:72:b7:b0:85:75:b0:01:3b:36:42:26:34:
                    91:02:da:d4:65:d4:76:ce:07:e8:18:02:48:2b:87:
                    ea:18:e7:37:bd:70:e0:02:7e:23:81:75:cc:df:18:
                    16:0f:67:ab:fb:b9:ef:b4:f5:db:bd:99:52:65:c5:
                    f2:7e:ca:bb:5b:a9:29:6d:ff:15:9b:2c:2c:d1:6b:
                    9b:d6:1e:cb:94:7e:2d:44:1a:1a:4e:19:92:a3:a4:
                    0a:a9:55:1d:ce:23:eb:37:1f:c7:86:73:bf:82:38:
                    ef:05:0b:2a:ea:cd:11:18:5a:ef:12:54:f8:52:c1:
                    5d:9b:83:e0:df:7b:65:12:63:8f:84:4d:fe:15:d2:
                    31:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F3:9B:2D:BE:B3:20:E7:A5:C1:32:36:9E:33:0C:B2:6E:3E:03:73
            X509v3 Authority Key Identifier:
                keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:93:79:99:9d:c1:39:d1:71:3f:d6:10:eb:b4:a8:07:bb:64:
         23:cd:04:83:2a:09:0f:30:fd:16:0f:21:c3:8e:b9:b1:4b:9f:
         19:6e:87:dd:c5:fb:6a:f5:08:88:12:25:75:b7:de:78:1b:f8:
         5e:a9:f0:8a:db:b1:cb:67:59:fd:db:d6:5d:83:9d:3d:9e:21:
         49:66:08:b8:b8:f0:a9:3b:d4:b4:a8:57:b7:2a:33:00:15:32:
         63:60:ea:5a:34:87:f4:a2:85:6c:b2:9c:af:4c:34:22:37:85:
         04:ea:0a:94:37:1c:10:ef:ed:bb:b7:39:a9:bb:ce:77:65:1c:
         5f:ef:b3:65:ad:83:d0:ed:c1:d1:e3:06:c8:e3:e2:c5:a7:5f:
         86:cf:d3:31:3a:5c:32:2e:04:f2:8a:64:53:bf:65:87:a7:fb:
         95:e3:8c:0e:16:92:c5:4e:38:72:f5:c1:03:db:88:f7:04:79:
         5c:d8:c9:8a:7d:26:65:a6:d7:ab:b8:a2:1a:24:04:88:ca:c6:
         5b:91:80:38:ae:f6:01:dd:11:be:89:aa:5b:83:8e:69:6d:ba:
         6c:e9:af:b8:13:be:af:61:48:50:bc:ef:37:92:e2:09:98:8e:
         d3:58:64:80:ab:59:de:0e:7c:5c:28:9f:a8:7d:be:3e:bc:16:
         7a:8b:73:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz
MDM0RTY5REEwHhcNMjYwOTIxMDMzMTI3WhcNMjYwOTI4MDMzMTI3WjAYMRYwFAYD
VQQDEw02YWIwYTUwZi0xNGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxT2mQ6hOKezVQ0+5Q8Ve/tlpfD6h6VpIl0Xbc2vEPKQoxhOtFO0LAmtKmfsI
6Ub7R9iH6yLTr9ZP6Posat2iGcbaBoFzAMJfjfGwRs7D+UaS1vhZmCQvx4v2SYrS
NTDlt32yqtTHgX2ZJ7ERERjJBKL+0z7NdDHZgm5yt7CFdbABOzZCJjSRAtrUZdR2
zgfoGAJIK4fqGOc3vXDgAn4jgXXM3xgWD2er+7nvtPXbvZlSZcXyfsq7W6kpbf8V
myws0Wub1h7LlH4tRBoaThmSo6QKqVUdziPrNx/HhnO/gjjvBQsq6s0RGFrvElT4
UsFdm4Pg33tlEmOPhE3+FdIxfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEPzmy2+
syDnpcEyNp4zDLJuPgNzMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1
MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h
ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY
UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK5N5mZ3BOdFxP9YQ67SoB7tkI80EgyoJDzD9Fg8hw465sUufGW6H3cX7avUI
iBIldbfeeBv4Xqnwituxy2dZ/dvWXYOdPZ4hSWYIuLjwqTvUtKhXtyozABUyY2Dq
WjSH9KKFbLKcr0w0IjeFBOoKlDccEO/tu7c5qbvOd2UcX++zZa2D0O3B0eMGyOPi
xadfhs/TMTpcMi4E8opkU79lh6f7leOMDhaSxU44cvXBA9uI9wR5XNjJin0mZabX
q7iiGiQEiMrGW5GAOK72Ad0RvomqW4OOaW26bOmvuBO+r2FIULzvN5LiCZiO01hk
gKtZ3g58XCifqH2+PrwWeotzxg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:27:08 2026 by rpki-client