Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/QoiykPj3q4cRk4Kc02KxnELa6uw.mft
File:                     QoiykPj3q4cRk4Kc02KxnELa6uw.mft (raw, json)
Hash identifier:          yQQldCYagSn5hIxTBcPcC3SUhGppVZnPqcJHACtTT7Y=
Subject key identifier:   85:F7:F2:C5:50:20:92:D0:BF:20:22:0E:47:96:A1:44:E8:A9:7B:9C
Authority key identifier: 42:88:B2:90:F8:F7:AB:87:11:93:82:9C:D3:62:B1:9C:42:DA:EA:EC
Certificate issuer:       /CN=A91FF173/serialNumber=4288B290F8F7AB871193829CD362B19C42DAEAEC
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoiykPj3q4cRk4Kc02KxnELa6uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/QoiykPj3q4cRk4Kc02KxnELa6uw.mft
Manifest number:          0F
Signing time:             Sun 11 Oct 2026 09:48:40 +0000
Manifest this update:     Sun 11 Oct 2026 09:48:40 +0000
Manifest next update:     Sun 18 Oct 2026 09:48:40 +0000
Files and hashes:         1: QoiykPj3q4cRk4Kc02KxnELa6uw.crl (hash: EPl+ero9ciDYn5GKNdZ3i9wBWjLj/c83ToTs6fQXuCc=)
                          2: 6F83373EB17011F191BBE2085F11F970.roa (hash: 4MxtvqwkSm/QfzlKGlWrKRTVa/m7fHuBpY3z9z6QFTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/QoiykPj3q4cRk4Kc02KxnELa6uw.crl
                          rsync://rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/QoiykPj3q4cRk4Kc02KxnELa6uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoiykPj3q4cRk4Kc02KxnELa6uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF173, serialNumber=4288B290F8F7AB871193829CD362B19C42DAEAEC
        Validity
            Not Before: Oct 11 09:48:40 2026 GMT
            Not After : Oct 18 09:48:40 2026 GMT
        Subject: CN=6acb5b78-5f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:b4:10:9b:ab:d2:3a:cb:ee:d6:9b:e9:ea:
                    c8:6c:7f:0c:37:b3:40:32:62:d1:48:e9:68:2c:c4:
                    ac:61:55:a4:5b:3f:9e:73:c9:ad:b3:0b:ad:bd:b7:
                    aa:f3:4a:d6:1c:28:66:05:40:02:c8:58:b4:8b:00:
                    07:0f:84:61:07:70:a9:07:5a:db:53:41:84:f1:23:
                    b1:df:b9:75:e1:ce:25:30:33:77:86:54:a6:2f:c8:
                    af:2f:90:4b:c7:8c:b1:b3:67:a5:70:52:a8:41:b2:
                    74:d9:50:5f:cf:4c:35:58:6a:d1:5f:a0:20:d2:ce:
                    3d:7c:4e:59:0b:04:ad:d9:60:a6:8a:13:aa:cd:6b:
                    28:10:f9:d0:d7:37:a8:46:ff:f6:b4:a3:59:8d:09:
                    af:bd:cd:c8:76:f2:0b:9a:9b:f5:4a:e5:4e:ca:47:
                    fd:46:3c:2d:14:cb:13:39:e5:f8:94:98:a1:6e:72:
                    85:9c:1f:9a:09:d1:f3:69:dd:14:9d:60:e1:82:2a:
                    32:c6:a0:aa:02:3a:4a:44:1c:fe:a5:f3:cb:e5:5f:
                    4a:d7:4f:18:b7:0f:31:7f:ee:a1:bb:19:be:c5:fd:
                    c1:11:88:f9:13:ca:12:d3:39:f4:41:95:f8:8b:d1:
                    2f:b0:36:b1:68:4c:37:3b:4f:1d:2c:64:29:f7:14:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F7:F2:C5:50:20:92:D0:BF:20:22:0E:47:96:A1:44:E8:A9:7B:9C
            X509v3 Authority Key Identifier:
                keyid:42:88:B2:90:F8:F7:AB:87:11:93:82:9C:D3:62:B1:9C:42:DA:EA:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/QoiykPj3q4cRk4Kc02KxnELa6uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoiykPj3q4cRk4Kc02KxnELa6uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF173/2A7D9C9CB17011F18A99A6FC5E11F970/QoiykPj3q4cRk4Kc02KxnELa6uw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:80:70:bc:88:0d:d8:18:b6:7d:b9:62:09:88:cc:ef:fe:3d:
         33:98:9d:08:25:c8:f6:b6:d8:db:23:38:a1:7a:d8:ad:21:06:
         d7:a5:81:ac:ba:fd:81:87:90:ea:fc:28:9f:a6:25:92:f1:0f:
         b2:fb:b1:8f:01:83:f1:7a:87:0b:81:1d:64:20:5d:57:c6:25:
         08:1a:5d:03:33:93:9c:60:47:5f:08:2e:d6:f9:45:48:b6:27:
         89:a3:c8:b9:96:1b:a6:c3:7e:11:7f:5c:6f:f0:34:dd:c2:43:
         04:c5:0d:de:3c:f2:59:a1:05:ee:75:a5:75:09:53:4e:b9:97:
         2a:95:e9:3c:23:3d:37:54:63:92:c8:c2:a1:55:c7:77:6f:2c:
         5f:15:c2:b2:58:41:28:09:ec:a3:d2:cb:d9:3d:1c:38:b9:de:
         8d:b7:1e:b4:b9:a3:3d:10:c6:89:82:62:e2:ec:d3:07:d7:39:
         fe:d2:79:eb:0b:ae:f6:2e:de:11:db:16:d5:5a:45:85:1a:61:
         be:1b:e5:22:3a:37:7e:b9:02:4c:1f:29:fe:de:35:2e:bc:ad:
         63:d1:25:5a:be:6f:67:f5:d9:b6:d0:c8:24:70:c1:00:6d:86:
         97:ca:12:cc:36:2e:32:6f:63:b2:44:18:0f:31:e9:52:9a:38:
         16:bb:5d:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RjE3MzExMC8GA1UEBRMoNDI4OEIyOTBGOEY3QUI4NzExOTM4MjlDRDM2MkIxOUM0
MkRBRUFFQzAeFw0yNjEwMTEwOTQ4NDBaFw0yNjEwMTgwOTQ4NDBaMBgxFjAUBgNV
BAMTDTZhY2I1Yjc4LTVmNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsZrQQm6vSOsvu1pvp6shsfww3s0AyYtFI6WgsxKxhVaRbP55zya2zC629t6rz
StYcKGYFQALIWLSLAAcPhGEHcKkHWttTQYTxI7HfuXXhziUwM3eGVKYvyK8vkEvH
jLGzZ6VwUqhBsnTZUF/PTDVYatFfoCDSzj18TlkLBK3ZYKaKE6rNaygQ+dDXN6hG
//a0o1mNCa+9zch28guam/VK5U7KR/1GPC0UyxM55fiUmKFucoWcH5oJ0fNp3RSd
YOGCKjLGoKoCOkpEHP6l88vlX0rXTxi3DzF/7qG7Gb7F/cERiPkTyhLTOfRBlfiL
0S+wNrFoTDc7Tx0sZCn3FOJJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhffyxVAg
ktC/ICIOR5ahROipe5wwHwYDVR0jBBgwFoAUQoiykPj3q4cRk4Kc02KxnELa6uww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMTczLzJBN0Q5QzlDQjE3
MDExRjE4QTk5QTZGQzVFMTFGOTcwL1FvaXlrUGozcTRjUms0S2MwMkt4bkVMYTZ1
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUW9peWtQajNxNGNSazRLYzAyS3huRUxhNnV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG
MTczLzJBN0Q5QzlDQjE3MDExRjE4QTk5QTZGQzVFMTFGOTcwL1FvaXlrUGozcTRj
Ums0S2MwMkt4bkVMYTZ1dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA9gHC8iA3YGLZ9uWIJiMzv/j0zmJ0IJcj2ttjbIzihetitIQbXpYGsuv2Bh5Dq
/CifpiWS8Q+y+7GPAYPxeocLgR1kIF1XxiUIGl0DM5OcYEdfCC7W+UVItieJo8i5
lhumw34Rf1xv8DTdwkMExQ3ePPJZoQXudaV1CVNOuZcqlek8Iz03VGOSyMKhVcd3
byxfFcKyWEEoCeyj0svZPRw4ud6Ntx60uaM9EMaJgmLi7NMH1zn+0nnrC672Lt4R
2xbVWkWFGmG+G+UiOjd+uQJMHyn+3jUuvK1j0SVavm9n9dm20MgkcMEAbYaXyhLM
Ni4yb2OyRBgPMelSmjgWu102
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:54:05 2026 by rpki-client