Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File:                     qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier:          7U1rVz2Z4k/WVbwc+idoHg+i5TQutVKJDvMsXaxlX44=
Subject key identifier:   51:B0:3A:5B:AE:79:71:3C:3B:E3:75:7F:0E:85:53:A8:24:EA:40:CC
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer:       /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number:          01E9
Signing time:             Mon 21 Sep 2026 03:32:15 +0000
Manifest this update:     Mon 21 Sep 2026 03:32:14 +0000
Manifest next update:     Mon 28 Sep 2026 03:32:14 +0000
Files and hashes:         1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: 6/8EJjdPNrFyZEUA/K2nKpbL0cIU28cBUpbZEbixu0Q=)
                          2: 469DADAE9B1D11F199542C1F6411F970.roa (hash: 7ld5vVKkgDVk7iu8ZivqDo4KyiyF+452Quc+9rok5eY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
        Validity
            Not Before: Sep 21 03:32:14 2026 GMT
            Not After : Sep 28 03:32:14 2026 GMT
        Subject: CN=6ab0a53f-2741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d4:d2:1f:86:7a:11:2a:06:47:ea:75:c1:9f:
                    e3:b6:b2:3a:e9:25:f1:05:7d:f8:07:3b:85:d7:d5:
                    bd:c7:28:0e:1c:00:00:ec:c0:9f:63:f9:de:06:23:
                    1a:0a:be:e0:85:64:8f:7e:64:67:06:04:13:5a:ba:
                    09:67:a5:e4:07:8c:5c:6d:da:23:10:18:b4:4c:8b:
                    7b:65:d1:03:7a:88:08:56:b7:36:9a:eb:11:45:ba:
                    e8:ad:c3:27:26:b7:b3:b2:c5:48:07:94:bb:90:35:
                    f5:ed:f6:bc:ef:51:dc:b2:b1:a6:e6:ef:95:4d:d7:
                    4e:37:05:da:bd:8b:64:69:55:e3:cd:19:b1:1f:fe:
                    9f:9c:8f:05:9f:d8:ed:90:2e:5f:52:2d:82:a8:65:
                    00:9a:49:95:33:95:cc:89:f2:e2:c1:8b:2b:e4:f0:
                    15:12:a4:9e:4f:0b:14:03:b2:da:32:2c:d9:6f:6c:
                    24:8c:7c:ff:48:2d:24:35:5a:89:cd:3b:e1:1e:7c:
                    27:e7:85:c3:8c:88:81:0c:71:4c:3e:55:99:30:cf:
                    48:02:0d:1a:c2:78:06:ec:31:8a:82:21:04:1c:a6:
                    8b:c6:5f:f3:24:7c:52:e8:52:11:7d:b9:5f:72:1b:
                    72:fc:d8:df:2c:41:b0:ed:40:da:a3:a2:3d:15:3d:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B0:3A:5B:AE:79:71:3C:3B:E3:75:7F:0E:85:53:A8:24:EA:40:CC
            X509v3 Authority Key Identifier:
                keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:c9:84:a1:ac:2c:c4:a5:3e:ce:50:c6:55:10:26:51:89:65:
         22:d3:f2:c0:4b:7d:83:b8:7d:89:35:8f:d4:f4:de:c2:1b:43:
         ae:e9:c3:e6:d4:43:38:0e:87:eb:ac:dd:a4:2c:48:60:f8:79:
         a7:9a:28:45:e3:7a:a2:90:a0:53:2c:7e:11:20:ef:fd:fa:5a:
         64:34:8f:8e:95:ff:bb:42:a1:da:13:9f:c1:05:f9:cd:bf:77:
         2b:a4:0d:6b:5f:74:71:f1:09:c1:a9:54:18:17:25:12:74:75:
         a2:db:b8:18:6c:5c:ce:c2:4c:6c:be:22:98:70:9b:6c:74:55:
         e6:2f:a7:01:83:66:7e:9f:96:4a:9e:a3:3b:dd:1b:92:42:0d:
         7e:36:d1:06:a2:44:68:61:14:73:d2:76:c5:fd:25:6d:9f:b7:
         d6:c0:c3:4c:f1:76:e6:e9:db:55:ce:08:19:8b:59:07:82:05:
         26:c4:4b:7b:a6:fc:54:de:36:7d:17:9e:4d:71:a5:2a:14:fc:
         f3:7c:a3:51:82:0b:eb:94:16:b3:c9:6c:38:81:96:ee:84:6d:
         70:6a:6d:05:7d:ed:dd:85:4a:06:0f:66:ca:fb:67:5d:af:8b:
         d4:dd:7a:70:a2:3a:49:52:b7:38:b0:f3:7c:b8:8d:40:01:a6:
         ca:de:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:50:20 2026 by rpki-client