Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft
File:                     QGOUHymkcXnuj_UfMB3x6kEfvTg.mft (raw, json)
Hash identifier:          r4EMKfS9OzWwWbgd/h10IQ7FWhGaMel8f9ImGWjTKzc=
Subject key identifier:   93:FB:17:59:45:55:F9:62:16:53:9F:75:D9:3E:1E:5F:F1:33:A5:C1
Authority key identifier: 40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38
Certificate issuer:       /CN=A91E4700/serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft
Manifest number:          C0
Signing time:             Mon 21 Sep 2026 07:07:45 +0000
Manifest this update:     Mon 21 Sep 2026 07:07:45 +0000
Manifest next update:     Mon 28 Sep 2026 07:07:45 +0000
Files and hashes:         1: QGOUHymkcXnuj_UfMB3x6kEfvTg.crl (hash: CDrRDuC/4dAlO1PRvOctsQQQetb5L5Zj5pblxDjU1do=)
                          2: 6A797774BDDF11F0B524BD85C4F9AE02.roa (hash: 8w/0YJBW6UK1DI6hNcDAiSGDGO9AI7vRgBVhPpRorOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl
                          rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4700, serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38
        Validity
            Not Before: Sep 21 07:07:45 2026 GMT
            Not After : Sep 28 07:07:45 2026 GMT
        Subject: CN=6ab0d7c1-17f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5f:0e:16:31:e6:d0:6d:97:88:63:2c:ff:c0:
                    c1:a9:38:b3:da:bc:f8:5a:49:7b:7c:41:d3:8b:77:
                    3f:d7:89:14:a3:40:6e:a2:1d:f0:4b:f0:e1:1f:1f:
                    87:f7:19:3e:2b:fa:5d:2d:b6:18:a9:77:c9:15:70:
                    4d:53:3f:b8:8a:ca:9d:98:40:43:f5:df:ab:7e:5c:
                    6a:14:93:c2:bd:76:95:e3:d5:eb:03:5d:ed:bf:70:
                    75:57:e3:05:c7:a2:eb:15:dd:6c:15:28:8e:94:c2:
                    ec:5f:17:a7:4e:04:6b:d4:ab:e3:d0:c2:cd:98:08:
                    2f:e1:f7:e9:51:ae:c6:91:e7:11:8c:96:f0:65:c9:
                    fa:ec:04:c0:c5:c5:42:50:bb:ef:0f:15:25:2c:e0:
                    87:0c:0f:00:2b:0e:ac:9c:3d:7c:03:00:e9:9e:dc:
                    b5:0d:8b:99:dd:a8:9c:23:94:c8:e4:77:51:7b:9c:
                    94:6f:8f:3e:0d:eb:87:f1:b9:7d:17:7d:14:42:a1:
                    ee:b1:a8:ec:8e:30:68:86:a6:9b:f4:fc:b3:73:ff:
                    3c:fc:15:a5:1d:bc:85:6e:64:c9:0f:02:ef:5e:3b:
                    64:df:ab:7f:0a:f6:1c:69:81:00:b1:27:b8:29:eb:
                    db:3c:60:39:ad:18:96:7f:06:15:c7:bc:70:23:e0:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FB:17:59:45:55:F9:62:16:53:9F:75:D9:3E:1E:5F:F1:33:A5:C1
            X509v3 Authority Key Identifier:
                keyid:40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4b:6b:9c:34:20:7f:e2:15:5e:3c:98:4d:17:24:23:95:40:
         fa:50:b9:5e:a7:a4:cc:28:6d:07:78:a6:5d:a5:ac:67:96:ca:
         7b:4f:f9:b1:56:9b:f8:99:e2:62:a4:d6:6e:26:41:2b:2e:d3:
         38:6a:21:af:a1:c2:e7:dc:11:4a:ff:2b:a0:8d:81:9e:55:3a:
         5a:dc:cd:c0:f3:80:f8:71:fd:14:29:84:15:2d:1c:10:d7:12:
         ca:9c:18:44:f7:46:79:e9:0f:0c:40:9d:51:5b:48:cd:4c:51:
         d0:f1:4a:54:85:9c:e4:f0:d8:a5:86:53:96:25:c5:a6:2e:a9:
         86:73:12:7a:da:81:b6:0d:2b:f8:d6:2e:09:98:69:55:ec:ab:
         88:9b:59:3e:e7:61:e4:fc:e9:02:12:14:94:1e:ae:a8:a1:1d:
         7c:89:69:c4:86:fb:31:69:3e:ef:4f:03:68:11:b0:de:84:44:
         af:f8:41:a6:c2:fd:fa:16:8a:28:d9:cb:60:ca:28:6c:b3:34:
         4c:4f:ba:be:71:b2:43:13:9a:b3:f4:ee:e2:bc:63:19:7e:69:
         78:26:a0:9b:dd:22:6c:17:9e:95:e0:30:1e:e1:8d:ed:33:2e:
         5a:c5:df:22:bd:32:fb:c0:49:fa:d8:23:2f:d3:48:ec:67:47:
         0f:29:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:11:13 2026 by rpki-client