Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
File:                     Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json)
Hash identifier:          y4hG52FOnFjubXG3zG/VjlKKVw++FUyxJp8O2tljU8g=
Subject key identifier:   78:AC:D3:1A:45:45:5C:B8:59:AA:94:DF:B9:BF:7C:BC:45:44:33:01
Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
Certificate issuer:       /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Certificate serial:       05BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
Manifest number:          05B6
Signing time:             Sun 20 Sep 2026 22:57:31 +0000
Manifest this update:     Sun 20 Sep 2026 22:57:31 +0000
Manifest next update:     Sun 27 Sep 2026 22:57:31 +0000
Files and hashes:         1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: e1Ck2NlE5J4DTKe0fDnlWvkP7YmnBFgHXsP2xWcFKbY=)
                          2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: 9ZEEK3IQ8UuFSqgHtrQ6O84JIh+FgFNIqrwN+9CFIi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
                          rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
        Validity
            Not Before: Sep 20 22:57:31 2026 GMT
            Not After : Sep 27 22:57:31 2026 GMT
        Subject: CN=6ab064db-2c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:c3:a6:38:ef:80:45:85:fb:bc:a0:c5:83:
                    c9:f4:ae:45:68:96:19:51:ed:e8:36:b8:54:60:6e:
                    27:49:77:c7:2f:9d:97:c8:e0:07:ba:ca:63:90:79:
                    87:76:5a:ff:4f:03:be:8b:96:ee:8f:3e:59:8f:8d:
                    54:7b:83:53:05:93:05:00:f3:9e:76:e7:13:a6:4f:
                    07:ea:00:7b:8d:4f:72:d5:55:c5:7b:47:50:e1:3b:
                    56:ad:c8:8b:de:e8:71:a4:d4:aa:7a:bb:9a:b7:80:
                    36:86:d6:5e:ca:47:a7:13:24:8b:eb:b3:65:9d:1f:
                    72:51:d8:2f:ac:d7:a9:d6:23:ab:3b:10:11:43:da:
                    cf:6e:ee:87:8d:db:f6:1c:af:62:38:e3:eb:e6:12:
                    21:87:14:ca:45:fe:b4:1f:c8:66:45:9b:5a:7d:af:
                    85:24:6a:8c:d4:42:58:32:18:ba:73:66:dd:e7:d1:
                    e8:da:b5:97:19:59:fe:e2:e0:00:d0:06:16:99:7d:
                    fb:38:da:46:5f:c4:7d:fb:04:be:db:70:de:18:a6:
                    d5:ef:85:1f:39:cc:a6:1f:0f:b2:55:f9:9e:34:c7:
                    14:65:ed:91:61:c1:ae:a9:c4:92:bd:c4:b9:9a:6f:
                    3c:33:dc:77:1e:aa:a2:69:fe:d1:26:cc:0d:f1:ba:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AC:D3:1A:45:45:5C:B8:59:AA:94:DF:B9:BF:7C:BC:45:44:33:01
            X509v3 Authority Key Identifier:
                keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:30:04:88:a9:0e:ff:69:07:60:2a:d2:48:80:9a:85:ab:e5:
         21:f2:a0:91:02:98:6e:3f:f5:d2:26:fe:48:eb:d6:cc:72:2e:
         7c:52:2f:b5:1a:db:c2:a9:a0:b4:fd:e3:e8:31:4a:e1:6b:84:
         79:7b:01:39:da:83:6e:44:78:86:cf:14:60:cd:c3:6f:eb:4d:
         de:01:96:cf:99:89:2f:70:04:cb:88:56:cf:8a:ec:c6:b6:90:
         c4:d3:00:d6:c8:b9:94:d6:ae:da:95:f8:d7:de:7d:ec:86:9c:
         49:3a:87:f6:4a:0b:d5:c3:53:ad:d4:5d:96:4f:c3:cd:73:53:
         2a:83:d4:83:90:84:05:dc:b1:19:ff:4e:b1:da:7e:f4:24:c3:
         f6:d1:d9:40:65:83:8d:fd:5a:48:ca:e5:b8:e3:57:35:26:66:
         a3:a1:de:dc:1a:36:3f:56:0a:6b:ba:55:73:6b:83:2a:57:22:
         f3:fc:fd:33:26:db:17:ff:fc:5e:70:32:9c:a9:14:2e:06:9a:
         68:76:52:03:6b:8b:47:6b:4e:e6:9c:50:04:0e:82:64:be:2e:
         00:5b:01:4d:82:85:f8:4b:8b:4b:c3:ab:59:89:2a:05:00:bf:
         61:ba:2e:b8:4a:5c:5d:90:9e:0f:af:07:1c:b7:59:08:d7:4f:
         38:21:ab:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx
QzQ4M0I2NTMwHhcNMjYwOTIwMjI1NzMxWhcNMjYwOTI3MjI1NzMxWjAYMRYwFAYD
VQQDEw02YWIwNjRkYi0yYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtRjDpjjvgEWF+7ygxYPJ9K5FaJYZUe3oNrhUYG4nSXfHL52XyOAHuspjkHmH
dlr/TwO+i5bujz5Zj41Ue4NTBZMFAPOeducTpk8H6gB7jU9y1VXFe0dQ4TtWrciL
3uhxpNSqeruat4A2htZeykenEySL67NlnR9yUdgvrNep1iOrOxARQ9rPbu6Hjdv2
HK9iOOPr5hIhhxTKRf60H8hmRZtafa+FJGqM1EJYMhi6c2bd59Ho2rWXGVn+4uAA
0AYWmX37ONpGX8R9+wS+23DeGKbV74UfOcymHw+yVfmeNMcUZe2RYcGuqcSSvcS5
mm88M9x3Hqqiaf7RJswN8bqFyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHis0xpF
RVy4WaqU37m/fLxFRDMBMB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB
NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjFEOS9FMzdGMTM4MjJBNkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6
QlI2TWZnc2EyOU1jU0R0bE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqzAEiKkO/2kHYCrSSICahavlIfKgkQKYbj/10ib+SOvWzHIufFIvtRrbwqmg
tP3j6DFK4WuEeXsBOdqDbkR4hs8UYM3Db+tN3gGWz5mJL3AEy4hWz4rsxraQxNMA
1si5lNau2pX419597IacSTqH9koL1cNTrdRdlk/DzXNTKoPUg5CEBdyxGf9Osdp+
9CTD9tHZQGWDjf1aSMrluONXNSZmo6He3Bo2P1YKa7pVc2uDKlci8/z9MybbF//8
XnAynKkULgaaaHZSA2uLR2tO5pxQBA6CZL4uAFsBTYKF+EuLS8OrWYkqBQC/Ybou
uEpcXZCeD68HHLdZCNdPOCGr+Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:06:57 2026 by rpki-client