Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
File:                     QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json)
Hash identifier:          Ow3SrDOqFXMq1ubYXatTXoP3sQePLNuRO0+vVQOrjQo=
Subject key identifier:   53:8A:49:2D:41:35:94:EE:53:69:69:52:C2:8F:B7:03:1F:D8:38:7B
Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
Certificate issuer:       /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Certificate serial:       0CBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
Manifest number:          0CBA
Signing time:             Mon 28 Sep 2026 18:40:57 +0000
Manifest this update:     Mon 28 Sep 2026 18:40:57 +0000
Manifest next update:     Mon 05 Oct 2026 18:40:57 +0000
Files and hashes:         1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: OBfTYiYlj9B3Kj40XbVtkLH45m/l0sSPCjOaEgBdPFU=)
                          2: DCA4F74AA77E11F1AC50A9373F11F970.roa (hash: U5B6BD+AQVgGNRiCjakEnvUVRqkWyd49kgo+EJ246as=)
                          3: AB9730AAA7DD11F1B8E3669D5C11F970.roa (hash: V0nf8R/JXTCmLmr3evrsoWZqErfhyc7Me8vH9L8neaE=)
                          4: 4C3E706CA52311F1BF257A553D11F970.roa (hash: gX6kPHPqmwsZXWiQP0ngQzAC81Vp3pbcU0fPRnXm1tk=)
                          5: 4B953CCCA52311F1BF257A553D11F970.roa (hash: 0ImBywBjvGucOTmDCrSxY7e6CfnTVMVfaWd4EW4f3f0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 18:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3263 (0xcbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
        Validity
            Not Before: Sep 28 18:40:57 2026 GMT
            Not After : Oct  5 18:40:57 2026 GMT
        Subject: CN=6abab4b9-fb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:ad:1c:d4:ea:3c:a1:b9:2c:37:2e:d4:23:
                    b0:a6:ad:51:4c:49:6f:45:af:18:26:d2:08:da:78:
                    a2:41:45:ec:16:be:65:10:6d:e5:38:01:3a:18:06:
                    5f:c8:52:1b:13:38:83:a1:2d:75:b1:8e:ac:20:7f:
                    af:44:89:46:a6:cd:29:73:35:d5:a4:e2:d5:43:8f:
                    38:d3:b9:72:ef:8b:6b:f4:35:8c:92:29:2e:7a:ad:
                    1a:66:c4:85:76:51:2f:9a:20:6e:ce:68:db:09:2c:
                    11:a5:85:80:11:7f:43:33:7e:b3:d2:f4:70:dc:3e:
                    c5:56:08:3f:5e:f8:f5:a5:5a:56:7f:1b:8a:52:bb:
                    0c:eb:18:d5:e2:ca:9d:4a:79:90:51:de:d9:5b:21:
                    ed:5b:93:e1:30:65:35:11:7a:e6:b2:72:8d:c1:30:
                    cc:24:45:0d:a3:7b:b3:f2:54:63:6d:3f:e2:73:c2:
                    fd:04:6d:54:a9:dd:98:1a:11:8e:35:56:0e:96:85:
                    8d:16:17:0a:1b:75:28:47:fc:5a:cd:c7:6f:9b:70:
                    b4:1e:4e:81:2f:1b:31:4b:0e:46:3e:fd:09:6f:f7:
                    43:14:b4:12:20:c2:e6:76:c4:41:db:6a:f8:a9:53:
                    83:58:6d:36:1b:d2:3b:25:b6:ed:32:d2:57:4f:43:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8A:49:2D:41:35:94:EE:53:69:69:52:C2:8F:B7:03:1F:D8:38:7B
            X509v3 Authority Key Identifier:
                keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:03:49:f7:b6:5e:d4:85:28:d4:0f:55:78:d0:e6:9f:35:
         a9:d0:35:7b:34:28:c8:05:5a:7d:0c:35:5f:6f:0e:38:65:7f:
         97:d0:5f:32:6a:59:d0:4e:f5:ac:c1:24:19:e6:0e:6a:08:03:
         33:b0:79:70:9f:44:bd:29:50:39:ff:79:1a:c5:6e:65:de:c5:
         31:72:8d:c5:a2:ce:31:ea:94:bc:ac:27:d5:69:34:a0:d1:f3:
         0e:bc:9c:2c:30:46:61:a2:0d:58:64:28:af:55:48:53:4d:a2:
         d2:ce:c6:79:c1:fb:d5:5f:63:f6:3c:fa:d0:19:e4:f0:f7:aa:
         7a:13:d0:3b:96:2e:04:2d:23:12:a5:95:4d:63:f7:54:33:82:
         fd:5a:1c:8b:59:03:05:52:22:00:63:51:9d:ba:f8:73:6a:59:
         e5:3d:18:4a:25:f2:28:60:5c:13:24:e4:65:97:87:8a:b3:71:
         3d:99:11:50:f0:d9:5a:20:ab:6b:39:58:b3:d2:69:89:4c:42:
         80:35:5c:ff:b8:43:c5:c3:50:12:5a:79:46:0e:b1:11:e8:48:
         b5:0b:91:c5:9b:1f:4a:5a:7a:b7:e5:5b:38:c3:5d:62:09:22:
         cb:21:fe:f6:28:ea:8d:09:55:68:d9:bf:1c:6f:fe:97:40:47:
         89:28:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:56:53 2026 by rpki-client