Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
File:                     fqB__DIeh8j3RMqqCf_5ixzAtos.mft (raw, json)
Hash identifier:          JXSRidi7pAu6kn9vP9OdLOegtSoQpkdKruEYXnXzuno=
Subject key identifier:   11:C4:43:EC:B1:14:74:0B:B7:EC:3B:6F:67:13:9B:D0:DC:C4:63:56
Authority key identifier: 7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B
Certificate issuer:       /CN=A91E859E/serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
Manifest number:          3B
Signing time:             Sat 19 Sep 2026 08:40:38 +0000
Manifest this update:     Sat 19 Sep 2026 08:40:37 +0000
Manifest next update:     Sat 26 Sep 2026 08:40:37 +0000
Files and hashes:         1: fqB__DIeh8j3RMqqCf_5ixzAtos.crl (hash: U3D2HdmXmc7DUU9BymiixRQj07r7ONT9xY1hwxko47w=)
                          2: D22158C0674811F1B78F7ABD8247A888.roa (hash: MGUrpK1K2oupHxzWSgO6Nc9+anYE61p1UNik8Cr88aI=)
                          3: 0CB90268678411F1A5717FF39347A888.roa (hash: FMjrzW19UpAuLU2zd+ioPWQz9JPl11mv3uL2SMTAKOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl
                          rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E859E, serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B
        Validity
            Not Before: Sep 19 08:40:37 2026 GMT
            Not After : Sep 26 08:40:37 2026 GMT
        Subject: CN=6aae4a86-bcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:e0:e2:ac:71:f3:3f:48:eb:a5:e4:bd:53:
                    ea:0e:bd:1a:93:25:bf:95:8a:08:a6:0f:c0:b8:72:
                    ed:b0:9d:24:3f:7b:69:bf:11:69:5c:74:34:fb:e0:
                    72:32:dc:63:8a:87:ba:cb:4f:33:10:1b:0b:7b:1a:
                    fb:f4:49:22:23:42:a6:f9:89:59:79:07:1e:2e:e7:
                    9a:1b:9e:9c:3e:76:72:f7:2c:03:d2:e1:14:79:3c:
                    b8:8a:b0:91:0a:d2:7b:20:ff:e5:ce:97:0d:0f:ae:
                    74:65:39:e9:2b:15:51:4b:f1:6e:d6:a8:3d:12:0f:
                    18:54:5b:03:29:66:fd:ed:3d:5c:13:07:ee:25:57:
                    cc:27:0c:c0:9a:36:cb:14:45:ec:97:88:e9:c5:4d:
                    bb:d9:a0:20:42:42:d2:c1:73:17:b8:76:d4:bf:6c:
                    ad:db:78:b3:4e:4b:c7:ab:78:ef:19:b5:5b:dc:91:
                    99:47:6a:90:9a:a6:e1:c2:00:2c:79:2f:4f:06:2c:
                    cf:c3:61:bc:ec:e0:68:41:1f:06:f7:c9:59:d1:b6:
                    5d:62:e3:75:ed:8a:22:ab:62:13:31:95:37:88:bd:
                    1f:bd:53:8b:b6:50:cc:20:0c:18:8f:4b:07:29:57:
                    f5:d8:47:62:a4:d2:84:84:36:b7:77:e4:4b:ff:3c:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:43:EC:B1:14:74:0B:B7:EC:3B:6F:67:13:9B:D0:DC:C4:63:56
            X509v3 Authority Key Identifier:
                keyid:7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:71:ce:ed:05:94:89:75:9c:00:9a:a2:01:ba:2f:1d:98:4a:
         69:6c:94:f5:1c:1b:1b:22:fa:6d:f8:54:6f:25:6d:23:a8:2a:
         aa:af:03:b7:59:a6:b6:f8:b9:de:5e:3c:38:b6:31:04:3c:8e:
         28:12:f6:1c:c1:88:cc:d6:c3:c6:4e:34:9d:5d:df:26:61:45:
         80:fe:93:88:f6:22:f1:b5:fc:d0:eb:fa:7a:ea:af:f8:43:e2:
         23:c4:63:20:d0:9c:a1:bd:21:df:aa:6f:62:c5:13:84:5a:c6:
         e4:3f:2a:8a:53:aa:60:65:4b:33:5d:39:19:66:c7:a6:c7:fe:
         7e:27:18:e7:00:72:c8:3c:96:76:77:b5:4f:43:97:72:89:ad:
         5e:9b:14:e5:5d:65:90:db:34:18:93:fb:8e:94:05:34:5e:60:
         22:fa:6c:75:ee:e5:b0:e8:15:58:46:57:eb:9a:48:7e:bd:2b:
         31:6c:51:52:c0:5d:f9:53:31:8b:2c:38:f9:6c:e2:5c:04:6a:
         a1:21:05:73:69:6b:72:95:35:33:ea:7f:b8:22:82:07:0f:59:
         4e:bc:70:06:7b:f7:06:ba:4b:f5:95:4d:bd:f4:d0:3b:c9:24:
         e8:85:71:34:07:17:73:80:1a:5e:89:5c:db:cb:75:35:5a:ea:
         e7:4f:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:50:57 2026 by rpki-client