Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft
File:                     AS8QgccGdx-n-iNDsinDDgorY3A.mft (raw, json)
Hash identifier:          zqB/SpVor1dEMykx7m8XHdMFe3SfYavWauwSTvCHL9M=
Subject key identifier:   99:38:70:6C:C6:4D:07:69:72:5D:58:D8:C0:B9:73:F4:5F:8B:D2:B9
Authority key identifier: 01:2F:10:81:C7:06:77:1F:A7:FA:23:43:B2:29:C3:0E:0A:2B:63:70
Certificate issuer:       /CN=A91F77AD/serialNumber=012F1081C706771FA7FA2343B229C30E0A2B6370
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AS8QgccGdx-n-iNDsinDDgorY3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft
Manifest number:          029C
Signing time:             Mon 21 Sep 2026 02:17:26 +0000
Manifest this update:     Mon 21 Sep 2026 02:17:25 +0000
Manifest next update:     Mon 28 Sep 2026 02:17:25 +0000
Files and hashes:         1: AS8QgccGdx-n-iNDsinDDgorY3A.crl (hash: Xznt5Fqxmc0DmpgWb2KKDOr+kUNAk1I0zN4u0+n2c18=)
                          2: 8AF7D7C06B6D11F1AFFFF7B39E47A888.roa (hash: QbzGMD98dsrnTN2MJM6slR+UOkvXLh7rdc5w/gswTvs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.crl
                          rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AS8QgccGdx-n-iNDsinDDgorY3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F77AD, serialNumber=012F1081C706771FA7FA2343B229C30E0A2B6370
        Validity
            Not Before: Sep 21 02:17:25 2026 GMT
            Not After : Sep 28 02:17:25 2026 GMT
        Subject: CN=6ab093b6-90f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:a2:ff:46:33:c8:94:9a:85:8c:cd:40:cf:
                    03:e8:34:95:64:d9:d2:0c:57:17:88:49:05:04:49:
                    81:82:40:d2:af:d1:07:99:a0:a9:83:a9:0f:f1:85:
                    81:e4:75:74:b2:66:79:c2:b5:91:e3:d8:c2:2d:f5:
                    93:ed:63:13:73:2a:c2:09:86:ff:8e:67:bb:b5:12:
                    c5:69:95:e4:18:2a:c4:37:7d:19:e3:f2:68:23:a0:
                    9f:73:86:87:1b:00:a4:85:b4:bd:20:00:f5:0c:76:
                    4c:24:f7:f8:52:0f:07:2e:3e:1c:a1:9e:92:b4:76:
                    43:8a:6f:8f:9b:3b:79:8e:04:a1:53:cf:0a:ee:03:
                    4c:dc:fd:33:e5:cd:12:79:52:6e:1a:b3:24:38:b7:
                    c5:66:a6:61:64:14:39:76:a2:ad:a8:66:1f:2b:82:
                    dd:be:df:40:7a:96:0c:2d:b6:5f:a7:5e:51:35:b9:
                    40:eb:82:25:df:86:64:dd:59:c6:81:3c:c8:55:f6:
                    9f:25:7e:04:5b:ad:9a:66:cc:9f:7f:a4:19:52:f7:
                    f6:dd:6b:3b:c0:b0:3c:f6:42:2b:84:12:78:e3:d5:
                    a5:b0:0b:32:6d:54:49:85:00:40:91:ea:49:4b:60:
                    cb:47:a7:10:c7:93:c9:f2:e3:84:00:62:1b:56:5e:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:38:70:6C:C6:4D:07:69:72:5D:58:D8:C0:B9:73:F4:5F:8B:D2:B9
            X509v3 Authority Key Identifier:
                keyid:01:2F:10:81:C7:06:77:1F:A7:FA:23:43:B2:29:C3:0E:0A:2B:63:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AS8QgccGdx-n-iNDsinDDgorY3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:17:15:5e:db:25:01:b2:fb:06:3d:39:1b:00:56:86:e3:27:
         90:12:1b:27:7d:35:49:88:3c:d8:92:7b:b7:a5:24:f7:02:ba:
         b7:68:e4:cc:e3:9b:9b:0a:c2:f6:86:21:5e:20:d3:bc:ef:c0:
         90:4e:53:61:c3:09:a3:7e:c9:79:ef:1d:4a:a1:0f:9c:f6:5e:
         68:0b:f4:6b:f4:c6:04:ed:e4:70:a2:93:c3:08:6c:a3:98:88:
         9e:8b:8a:d1:5c:5d:c4:e2:b0:84:31:5a:7d:75:90:b8:91:bb:
         5d:d7:fb:88:a3:06:e6:78:d0:09:8e:dc:9e:e2:c0:af:bc:6f:
         dc:4b:cd:ac:25:0a:d1:9f:ed:5e:f3:ba:35:eb:0e:e9:13:6b:
         f4:00:3f:94:46:73:8b:08:16:21:53:e9:fc:6e:e2:10:20:70:
         20:2b:bb:a4:d5:a4:c9:4a:ed:fc:bc:2a:ae:7a:28:9c:00:74:
         f9:83:ee:90:78:2f:dd:bf:c1:76:b8:17:14:9f:97:ca:e7:ad:
         a6:e4:f6:e1:28:7e:1d:03:95:23:58:6d:13:15:77:1a:7f:ed:
         ca:7f:82:27:1c:96:d9:4c:7b:8d:90:8d:b2:d0:c6:a2:c4:37:
         52:53:fd:17:8e:74:f4:b3:9f:95:24:b0:39:7a:04:8d:db:9e:
         ec:1c:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:16:00 2026 by rpki-client