Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File:                     qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier:          Wue3kjQ6IePDYkYMvZOHZIrVb+LuH9vudW0mlm5uvEQ=
Subject key identifier:   E0:EA:F0:64:2B:2E:F0:2E:4F:F4:37:34:DC:39:FF:26:E1:68:1B:71
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer:       /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial:       02B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number:          029C
Signing time:             Wed 23 Sep 2026 01:42:27 +0000
Manifest this update:     Wed 23 Sep 2026 01:42:27 +0000
Manifest next update:     Wed 30 Sep 2026 01:42:27 +0000
Files and hashes:         1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: gMgqFd2q/DEOtZQO9VkG2989ZT6ZkmoPswg/Odvk1Us=)
                          2: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=)
                          3: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=)
                          4: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
                          rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
        Validity
            Not Before: Sep 23 01:42:27 2026 GMT
            Not After : Sep 30 01:42:27 2026 GMT
        Subject: CN=6ab32e83-c393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:e9:4f:04:e4:ba:bd:33:00:17:d3:dc:47:
                    40:ae:e1:94:84:87:36:f7:53:9a:be:4f:fd:72:55:
                    c5:f4:2c:24:f2:ed:26:5c:a7:c1:40:c7:30:a4:d2:
                    c7:38:b8:e6:14:39:23:c4:84:e3:7e:04:17:95:b0:
                    49:c2:67:98:4f:ca:27:8b:6d:1e:b6:41:4d:5a:33:
                    e5:54:c3:90:28:cb:01:a9:21:00:10:47:fb:95:b9:
                    77:90:c1:3a:bc:44:e1:ed:d1:4e:84:df:58:71:22:
                    b0:0d:09:cf:bf:44:a1:59:00:50:d0:19:77:b7:cc:
                    55:ad:ab:d1:db:97:d5:af:24:09:a3:14:7e:e2:ee:
                    a6:0b:e1:c7:d5:be:3b:a3:f6:e0:13:be:00:01:b4:
                    ee:2c:77:3d:5b:4d:15:88:f0:d2:f0:82:08:a7:ac:
                    2c:c7:fb:18:15:6f:f1:bf:4c:ac:57:11:97:06:b3:
                    9b:d2:79:81:b8:cd:dc:76:8a:65:9c:a0:66:b8:b7:
                    6c:8e:93:bb:ef:9a:e4:ac:bd:81:b4:7e:45:a1:f1:
                    86:c7:dd:2f:11:d7:16:f5:9a:07:6b:6b:97:c2:11:
                    da:2e:61:ab:28:9b:3d:9b:ba:84:58:dd:d6:72:45:
                    d5:7f:bf:b2:a9:ad:58:6b:56:d7:bd:de:74:95:fb:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EA:F0:64:2B:2E:F0:2E:4F:F4:37:34:DC:39:FF:26:E1:68:1B:71
            X509v3 Authority Key Identifier:
                keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:00:ec:f3:3b:9e:32:03:3f:af:38:64:7c:b1:5a:50:18:28:
         92:59:76:b2:24:5c:7c:d8:bb:dc:f4:54:a7:53:ad:c1:2d:d1:
         d0:af:ed:2c:d6:7d:fd:68:17:e8:48:39:56:0a:a4:e1:76:a5:
         b0:c7:26:0a:f1:80:cb:d9:8b:ff:b5:da:6e:56:0c:81:4b:e4:
         68:50:f9:61:02:1e:e4:1f:db:cd:8e:72:90:31:c5:9a:2e:3d:
         3e:5f:18:9f:b5:34:71:cf:74:6a:c1:1a:bb:0e:5d:03:8f:5c:
         b1:aa:db:7e:04:69:a9:23:24:27:74:f2:d9:51:c9:87:28:12:
         73:3a:19:0a:1d:f4:50:e6:bc:05:73:2c:19:ad:7b:95:11:dc:
         2e:d6:70:60:ab:35:d8:6a:64:4a:08:3f:6b:cf:a8:60:d8:63:
         16:3f:5d:af:41:af:e7:a5:12:5e:32:d8:c4:9e:28:c4:1e:7b:
         81:34:00:85:28:12:96:25:9a:94:6f:3b:6e:30:5e:bf:98:68:
         26:b1:2b:76:55:1e:7f:73:5e:da:11:19:e0:f7:11:3e:e7:20:
         37:90:99:42:78:5b:d7:8f:f8:bb:5c:4c:fe:7e:7b:81:73:0e:
         d5:24:26:c3:2f:84:90:c9:9f:56:3d:2c:a1:d6:f9:98:b2:10:
         65:64:56:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:34:35 2026 by rpki-client