Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
File:                     qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json)
Hash identifier:          grF4x29wO/8eRUsHoquoT+kpF4JV3jglmAE3afmEXkI=
Subject key identifier:   F1:BB:4F:D2:41:35:90:D2:2A:E6:6B:D2:6E:D4:BC:7D:15:4B:03:B0
Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC
Certificate issuer:       /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
Certificate serial:       07C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
Manifest number:          07C0
Signing time:             Sat 26 Sep 2026 21:31:00 +0000
Manifest this update:     Sat 26 Sep 2026 21:30:59 +0000
Manifest next update:     Sat 03 Oct 2026 21:30:59 +0000
Files and hashes:         1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: 65kq0uTChR3ao8vDCL5AZXZms2mlRy08d0FNDmuzkFE=)
                          2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: +zXdWbj90V5wiCW78x9iWppvFwiybMcG8sAJuI2k4as=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl
                          rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
        Validity
            Not Before: Sep 26 21:30:59 2026 GMT
            Not After : Oct  3 21:30:59 2026 GMT
        Subject: CN=6ab83994-c609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:da:eb:ff:91:9b:c3:92:78:ba:e9:2f:d4:
                    f0:b4:15:b4:da:92:13:d5:b8:51:9e:18:39:7b:e7:
                    76:95:7b:88:25:2c:14:30:16:86:cd:f8:11:e9:66:
                    6d:f5:6d:21:65:98:6c:1d:b8:04:6b:12:24:a4:12:
                    70:d8:ee:d8:b0:2f:87:ea:bf:68:bd:e8:fa:9f:01:
                    fc:1d:48:22:f8:35:84:07:29:1f:d6:5f:d4:89:a8:
                    93:3d:b0:88:ae:92:1a:62:57:42:4f:b1:d7:b6:d6:
                    25:1a:36:aa:41:3c:58:59:14:18:b4:1c:72:b1:e7:
                    66:6d:07:c8:59:67:de:8e:df:d9:70:dc:cc:46:10:
                    c3:03:5f:85:0a:e5:25:74:6e:ed:8e:cb:d0:73:be:
                    26:02:59:2a:90:41:20:e6:53:c1:92:ae:e8:3f:f7:
                    42:88:8b:52:5a:dc:fc:3d:7c:7e:9d:c8:3b:aa:50:
                    f5:07:78:b3:cf:73:28:57:70:d9:a0:b0:88:0e:d2:
                    5f:92:a0:a2:5b:8e:4f:a2:48:0c:f7:39:76:61:46:
                    fc:9f:af:7e:42:cf:bd:ae:bf:7e:3d:30:20:36:c2:
                    13:a3:9f:e0:24:6f:6b:34:a3:ba:ac:6d:26:fd:99:
                    0d:92:64:91:cc:4e:54:9f:e2:70:b4:31:eb:1a:f9:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:4F:D2:41:35:90:D2:2A:E6:6B:D2:6E:D4:BC:7D:15:4B:03:B0
            X509v3 Authority Key Identifier:
                keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:eb:79:68:23:3e:7f:28:58:55:63:69:2b:fd:b8:d2:3e:
         bc:5a:cf:cf:39:ce:e4:7e:5c:8d:72:4b:fa:ea:65:be:ab:e9:
         91:c5:8a:1e:43:fe:f4:0e:e0:2c:0d:7e:6b:b3:3f:87:c5:ea:
         46:0b:32:0e:1a:6b:41:fd:48:3a:42:e4:04:ba:f8:db:8e:0a:
         25:b6:5c:6f:5d:18:7a:bc:9b:5e:3b:c1:72:15:cc:61:a9:1d:
         6f:5c:5d:ea:0a:44:9b:e7:c1:83:9c:6b:e8:5f:c3:82:c9:ba:
         5c:7b:94:32:66:0b:fa:f1:6a:4c:27:9a:49:d2:7f:ab:e3:18:
         68:c0:5d:43:99:4a:7b:3f:07:91:aa:e6:5e:a2:35:53:31:0c:
         74:6d:05:99:88:9a:22:b9:af:8b:15:08:1f:be:7d:5f:b9:1c:
         2f:28:90:cd:f6:c0:f6:70:16:65:5e:07:79:c3:f0:2e:bd:99:
         4d:87:8a:96:5c:45:eb:87:36:3c:8b:e7:a7:23:ed:e9:11:99:
         19:51:b7:cc:67:29:f3:5a:ac:8b:55:61:36:2b:ab:0f:67:13:
         d3:1a:8e:e1:2b:a0:49:31:b9:7b:52:69:d8:b0:3c:ca:89:fd:
         5a:65:c1:20:0d:74:f2:de:f0:b3:42:a9:38:37:85:fc:af:e8:
         e0:3c:a5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:21:37 2026 by rpki-client