Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
File:                     QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json)
Hash identifier:          MxcPf8kWFSjVDzJXGyJJFxADHYk6X4YjWdGQYdc5GYQ=
Subject key identifier:   84:B9:8D:DA:9C:6B:44:17:1A:06:EF:E7:E7:9B:31:6C:C1:EC:E8:DB
Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
Certificate issuer:       /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Certificate serial:       0B53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
Manifest number:          0B49
Signing time:             Sun 20 Sep 2026 19:10:36 +0000
Manifest this update:     Sun 20 Sep 2026 19:10:35 +0000
Manifest next update:     Sun 27 Sep 2026 19:10:35 +0000
Files and hashes:         1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: Di5tPL9HV1iuQoIDy2HOImBVn9VCbVMq18dnytp2iIQ=)
                          2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: r0lCb8PmrHuRVFml8CXtx2AwxypyCR8m21BT5Lcfkrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
                          rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2899 (0xb53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
        Validity
            Not Before: Sep 20 19:10:35 2026 GMT
            Not After : Sep 27 19:10:35 2026 GMT
        Subject: CN=6ab02fac-6fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:ff:44:3a:a5:ad:29:a1:48:3a:e4:1a:9c:
                    83:6f:97:22:25:51:c7:9e:be:32:be:75:e3:75:d7:
                    3b:48:53:0c:33:21:b8:ab:84:6a:32:14:9c:89:ef:
                    b2:25:99:b1:65:5d:cc:b8:79:8c:39:01:a7:cc:77:
                    25:7d:f9:cc:38:3c:cf:46:1e:bb:23:13:c3:e1:f2:
                    4c:8e:08:d7:81:67:16:bd:a2:98:77:ac:62:a3:95:
                    e7:19:eb:1b:c9:da:ba:e1:0a:db:f7:be:c5:ae:8a:
                    12:dd:25:a1:ac:7d:12:dd:8f:12:bc:06:91:69:f9:
                    77:83:ed:83:e2:b7:5d:7e:35:ea:e7:10:b9:08:0f:
                    d8:8b:0d:26:43:6f:4c:53:d6:75:1a:8e:b0:ef:64:
                    2a:1d:ec:19:53:70:e7:08:06:0c:43:1f:f2:0a:af:
                    45:dc:50:13:d2:cd:ee:45:10:32:fa:60:8b:3b:66:
                    bc:3c:42:e5:77:07:e9:de:ea:30:39:46:e2:41:27:
                    46:aa:25:e0:d7:1c:e1:84:c9:b4:b4:51:75:99:79:
                    e9:be:a9:b3:5d:33:c8:c7:02:66:ac:1a:f0:ad:11:
                    7a:36:23:0d:0f:a7:55:c2:a0:7f:a8:ff:94:87:db:
                    50:d7:cd:95:20:2c:99:75:b1:af:0c:e9:32:5a:63:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B9:8D:DA:9C:6B:44:17:1A:06:EF:E7:E7:9B:31:6C:C1:EC:E8:DB
            X509v3 Authority Key Identifier:
                keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:d5:45:e0:7e:17:8f:eb:bc:30:5d:55:cc:23:14:b2:d7:
         5f:bc:f0:40:14:d6:60:1a:ba:a3:6e:61:11:c5:2d:43:9c:8c:
         01:dc:ab:55:b8:45:fa:f2:04:e3:a2:9b:72:9c:c8:c5:ed:50:
         41:c3:7b:8f:0e:dd:8c:d2:73:de:3b:17:7f:f3:c1:c0:2f:c7:
         69:cc:50:42:4d:f7:f6:95:49:ea:f9:85:3f:ef:45:ab:06:c7:
         f7:46:be:0c:6d:e1:36:3d:bd:64:97:7b:81:df:35:f9:ab:ae:
         5d:7d:5b:8c:9f:d2:fd:a9:f8:2d:43:b7:87:18:af:44:41:2a:
         53:18:d0:17:4c:92:ae:d2:3b:4c:67:0a:31:35:29:5f:30:7a:
         44:89:8e:d3:36:c1:e3:a2:8a:4b:6c:16:9b:4f:c0:ba:e1:29:
         27:24:35:d2:89:86:40:de:0c:79:40:31:6e:80:d5:69:d1:ab:
         1c:39:9b:4f:9a:79:f0:c7:d1:ae:2a:78:d3:90:47:04:97:5a:
         72:9c:74:29:08:66:54:3f:68:1c:9e:0c:81:9e:a8:6b:c2:25:
         aa:34:12:66:74:68:60:36:09:cb:bd:5d:d1:84:ce:21:20:97:
         93:5a:69:ac:eb:dc:eb:74:25:b8:63:d4:85:95:20:20:17:b4:
         a5:f3:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:22:59 2026 by rpki-client