Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
File:                     qdfTMxZtqSYb56g2YxgPO_DskKE.mft (raw, json)
Hash identifier:          oFFpZRNGzPgejPCXnxYFK+Vj2KWjhG34RWcnU7WtcVU=
Subject key identifier:   7C:6D:68:DA:50:26:35:4D:91:A1:69:3C:8E:1B:0C:60:1C:C3:A7:3E
Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
Certificate issuer:       /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
Manifest number:          50
Signing time:             Tue 13 Oct 2026 09:03:47 +0000
Manifest this update:     Tue 13 Oct 2026 09:03:47 +0000
Manifest next update:     Tue 20 Oct 2026 09:03:47 +0000
Files and hashes:         1: qdfTMxZtqSYb56g2YxgPO_DskKE.crl (hash: S7CopdWOweTiEqqiBUSNYKOUluV1lmM8MbQTahTsEME=)
                          2: 773251504B5D11F1927AF905AF833773.roa (hash: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
                          rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
        Validity
            Not Before: Oct 13 09:03:47 2026 GMT
            Not After : Oct 20 09:03:47 2026 GMT
        Subject: CN=6acdf3f3-2393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fd:1e:95:52:a3:d6:a8:5c:31:ce:89:65:6d:
                    c6:6f:1b:5d:f5:5d:c0:a0:a7:62:70:5a:d8:c2:da:
                    15:a1:06:0f:37:f1:8f:07:ce:41:94:5c:9b:3b:cf:
                    1a:c6:82:d9:33:27:4b:2b:14:fe:e0:ae:7d:df:f8:
                    89:8c:98:b2:dc:79:07:2d:96:eb:fa:43:02:8d:3b:
                    b6:e1:8e:b0:11:98:72:41:5b:bd:fc:02:a5:9c:1b:
                    eb:c0:34:71:31:18:be:61:36:5e:51:fc:85:dd:82:
                    bb:47:31:94:13:cd:f2:aa:55:57:bf:fd:0c:df:92:
                    4a:02:18:16:2f:6c:2f:4f:90:3a:1c:e9:fa:d3:8e:
                    79:9d:b1:e8:8a:b5:47:39:44:ef:c8:8a:6c:b3:13:
                    5b:de:fc:46:45:6c:8d:09:f6:1a:da:b5:46:55:8d:
                    d5:83:c1:41:ca:71:64:8f:6b:05:fa:1d:64:d1:d5:
                    fc:41:47:97:08:16:21:80:0e:ac:96:f2:22:0a:92:
                    3d:ca:4e:46:2c:a7:e5:9e:b7:b1:79:3b:4c:d6:5a:
                    d0:4b:b1:14:dd:87:a4:f7:c9:34:ab:d2:ec:96:3e:
                    8a:87:4f:69:9d:dc:f1:3a:22:c3:f6:a3:8f:d4:0e:
                    7d:4c:0e:49:5f:d5:1d:d8:1a:2f:bc:3d:c2:55:f5:
                    2c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6D:68:DA:50:26:35:4D:91:A1:69:3C:8E:1B:0C:60:1C:C3:A7:3E
            X509v3 Authority Key Identifier:
                keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6f:71:f9:31:5f:6f:c3:59:45:b7:4d:bd:d0:c7:46:9e:17:
         13:ce:f6:be:5c:11:d1:f3:e3:6f:c4:92:04:45:53:a4:c0:d8:
         cf:37:31:5b:0b:04:7b:b2:b9:ea:ad:6d:08:ca:95:58:79:82:
         56:d7:44:cd:24:45:f7:1a:ea:9b:27:90:51:81:ff:35:61:22:
         a5:70:08:fb:78:8e:fe:fb:7c:79:7e:3b:c9:fc:23:3f:65:44:
         d8:5c:c1:a5:bd:24:0f:a7:86:12:ff:2c:35:15:ec:0f:e0:d0:
         5c:1f:33:b6:55:b5:ee:1d:f5:8a:83:5e:7d:41:62:a8:71:10:
         cf:4d:fc:5c:01:fd:ad:f9:1c:f5:8e:e7:c4:5d:18:17:d3:e0:
         ae:76:27:74:50:f6:01:c9:85:72:a9:0b:38:ec:db:50:42:24:
         14:85:f6:84:51:7c:83:41:71:2d:41:42:97:f3:bf:08:95:18:
         34:39:c8:ce:ee:1a:aa:49:0c:90:39:a4:68:c1:cb:ef:a0:2b:
         ca:7b:ab:d9:05:0c:75:e4:5e:05:b3:37:bf:be:c1:8c:39:bb:
         9b:ed:f4:21:56:df:9c:92:39:0b:4f:1c:21:0b:d3:ec:9d:da:
         3f:28:b4:b9:14:b2:d7:9c:0c:b6:1c:a2:44:33:44:33:b8:db:
         bc:eb:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:51:32 2026 by rpki-client