Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File:                     QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier:          uiiJPsO22wwm63gGNUhv3LSIIViL3J2X3N4fH6yVYhA=
Subject key identifier:   6C:8B:A6:CC:74:71:B9:8D:B9:DB:0C:DC:8A:9A:21:8D:DB:B8:31:8B
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer:       /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial:       1F44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number:          33A6
Signing time:             Sat 26 Sep 2026 15:39:53 +0000
Manifest this update:     Sat 26 Sep 2026 15:39:53 +0000
Manifest next update:     Sat 03 Oct 2026 15:39:53 +0000
Files and hashes:         1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: VXZUHY5trISdWvHL0Hz6m0nxtkInxjcQ3XaDYwPEjpY=)
                          2: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: yJXJ5SLj4VwXuD8Ehh1ZIDkhmlJob+LgqphoaUYaKIg=)
                          3: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: /ampEdBe+kl/3HXCK44N+88+jWPKW8sseqMEZh+CUvs=)
                          4: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: qeMPXbch432wl/+6juWOQAEyaC1zRaKSmP/WPoP80k0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
                          rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8004 (0x1f44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
        Validity
            Not Before: Sep 26 15:39:53 2026 GMT
            Not After : Oct  3 15:39:53 2026 GMT
        Subject: CN=6ab7e749-f4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:e8:8e:b4:96:f7:67:26:9f:02:36:2c:68:
                    a9:f7:ef:27:32:4d:25:0d:9c:72:39:5d:91:68:df:
                    40:c7:a2:66:98:9e:3c:61:57:9a:8b:49:8b:13:cf:
                    02:ab:40:96:e0:07:5a:c1:58:d0:ba:86:8d:98:21:
                    8d:84:25:16:23:37:38:29:a9:fa:3e:c5:98:05:84:
                    08:02:9b:16:cd:f2:5a:19:39:dc:6e:5c:cf:22:9f:
                    1b:d4:c5:de:a2:c1:c6:96:68:fd:87:6f:f8:54:ad:
                    d7:cd:2f:b8:f9:de:49:2b:fc:24:1e:4a:7a:8a:08:
                    5e:b0:b0:31:30:7e:8e:4d:36:ac:04:35:35:1e:22:
                    fb:64:37:c4:0f:cc:8c:7a:90:2b:3b:b2:6b:1c:21:
                    40:5b:f5:d7:86:25:30:b9:ad:16:55:ab:51:4a:a2:
                    90:2a:c4:e4:ce:73:23:e9:1a:a7:80:37:02:4f:cc:
                    b7:6d:ff:57:00:4d:19:76:20:20:ba:c9:7a:65:f0:
                    75:2d:84:16:5a:91:27:03:e3:8f:4a:31:6e:1d:de:
                    fd:5b:cb:15:1b:cb:4d:b1:4b:51:1b:44:9d:1f:78:
                    16:a1:c2:7b:3b:d6:2e:65:23:96:78:24:32:d1:b0:
                    ec:59:f5:58:86:34:36:78:90:39:6d:9a:2e:67:fd:
                    e6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8B:A6:CC:74:71:B9:8D:B9:DB:0C:DC:8A:9A:21:8D:DB:B8:31:8B
            X509v3 Authority Key Identifier:
                keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:c6:37:5d:f3:78:4c:d3:cc:60:94:44:91:5d:d7:d6:70:
         71:cf:50:10:0f:c1:96:00:b0:ab:9e:bf:1a:5a:c3:0f:4f:fe:
         df:d4:fc:97:5a:8e:ba:67:e8:5a:5f:ff:d4:12:c8:a1:66:f0:
         43:8b:1b:87:1f:78:4b:65:e4:45:83:92:77:75:79:67:5c:34:
         e0:c7:b4:cf:16:35:bc:3b:f8:01:16:e9:7d:05:50:f2:58:33:
         52:29:62:2b:54:50:54:29:cb:97:15:32:de:78:a0:44:0e:1c:
         1e:f4:c0:fe:a9:04:d3:d8:01:64:ec:e5:57:d1:c5:7b:cc:f5:
         c0:93:3d:3a:67:0a:cc:cf:0f:5b:4f:8a:e0:de:ec:01:5b:d7:
         fc:9e:fe:c6:00:1e:88:20:81:00:45:9d:f3:45:55:ac:d4:48:
         3e:02:de:18:cd:d1:89:35:56:a1:db:25:d2:ce:09:53:4a:e1:
         64:01:f9:63:2a:ef:bb:98:3e:10:ac:c7:c5:b4:92:8c:20:c5:
         29:c6:61:0f:35:9a:41:0e:1f:88:0b:09:d2:7f:f3:86:c4:f4:
         38:94:dd:14:34:58:69:fb:94:6a:10:20:0f:7e:d1:b5:2a:6d:
         3a:e0:0e:f2:d5:f5:c3:b6:ac:05:98:e3:12:c4:70:2d:dd:84:
         36:ec:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:26:40 2026 by rpki-client