Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
File:                     QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json)
Hash identifier:          zKAyGKA2K16E07PzXKeWcm+AqbdYguCQtD4kvmQVLBY=
Subject key identifier:   9D:53:99:05:42:74:B4:00:46:5B:12:34:6F:20:09:9A:5D:05:43:A7
Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
Certificate issuer:       /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Certificate serial:       068A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
Manifest number:          0680
Signing time:             Sun 20 Sep 2026 22:24:15 +0000
Manifest this update:     Sun 20 Sep 2026 22:24:14 +0000
Manifest next update:     Sun 27 Sep 2026 22:24:14 +0000
Files and hashes:         1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: UgRrosyzVQGKLxn8yRZ868vQSKTNVcNucX58sPTD6gg=)
                          2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: APtBc0Fg5uoB90s7FYUbm7HkOE2poEQup95WnZBKZc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
                          rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
        Validity
            Not Before: Sep 20 22:24:14 2026 GMT
            Not After : Sep 27 22:24:14 2026 GMT
        Subject: CN=6ab05d0e-1faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:2a:20:79:16:53:c2:06:d9:17:fc:95:38:
                    2b:a9:ea:63:a0:a1:a3:7c:b9:de:e1:f9:4c:55:85:
                    e6:51:c2:4f:8b:03:eb:3d:24:07:69:3f:41:91:a8:
                    0a:63:4f:ae:2e:50:6b:65:67:21:93:74:70:8b:3b:
                    de:51:b5:f6:77:de:a8:74:97:2b:74:9f:20:93:71:
                    71:7d:24:92:da:8f:14:44:08:b9:75:df:09:f5:38:
                    11:d8:0e:40:54:a0:1c:76:fb:49:ca:ec:29:2f:0b:
                    29:04:ea:00:c1:6c:cd:10:61:89:53:14:50:ec:13:
                    28:6b:ed:1b:07:d4:e2:8c:89:76:ed:0b:e6:90:28:
                    a8:b4:0c:95:49:8e:15:82:1a:3d:7c:fa:9d:91:a1:
                    ab:a0:5b:7a:5b:a0:38:0b:ee:f0:90:0d:37:ac:2b:
                    cc:f9:7e:9e:f5:77:80:b3:ff:d0:8d:63:9a:76:a0:
                    7c:bb:a6:53:94:fb:38:65:de:67:e4:94:be:ed:44:
                    08:16:38:9b:82:77:69:8c:e8:a5:1e:07:c6:44:ff:
                    d4:7c:e8:cf:ba:ec:c0:37:31:73:01:3f:48:ab:4a:
                    b2:52:92:fa:4c:b2:70:61:f5:e1:11:00:33:92:84:
                    df:ab:a1:e8:d0:96:85:4f:50:2d:d5:2c:90:3e:31:
                    01:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:53:99:05:42:74:B4:00:46:5B:12:34:6F:20:09:9A:5D:05:43:A7
            X509v3 Authority Key Identifier:
                keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:bc:bc:2f:89:c7:a9:81:cd:98:83:7f:0f:6c:42:b2:d0:
         5f:04:5b:f1:51:13:53:cb:b7:f7:a6:1c:d1:c0:2a:cc:66:a2:
         12:ce:96:fa:41:b1:8c:53:c0:6d:d6:e8:a4:8f:18:5a:48:46:
         55:b0:9e:cf:bd:65:48:c9:7f:92:78:00:a3:75:7a:da:64:3c:
         5c:81:0c:b8:1b:e0:e5:a8:83:01:29:62:8d:62:6e:da:b3:e9:
         da:a5:d6:56:1a:a0:66:de:d8:db:97:91:27:f7:90:a5:b7:5c:
         bf:df:31:5b:94:a6:dd:36:33:09:24:fc:81:ed:0b:9e:b8:1b:
         9b:ca:ed:3e:86:7b:20:5c:13:12:e5:86:36:8b:2c:2d:65:ee:
         4c:47:0c:88:d6:a0:f3:25:f4:5e:5d:ce:3d:fa:76:11:2c:ab:
         35:ca:41:18:50:56:23:8b:3a:7e:53:28:6f:8d:3e:0d:c8:78:
         97:1c:9d:f4:1c:6d:22:1f:c3:e0:33:24:37:17:78:f7:fd:b4:
         66:89:09:a9:5b:f4:16:1b:ac:5e:e8:db:c6:02:bf:62:be:91:
         c6:9c:05:c4:eb:77:73:cf:93:9d:1a:60:df:30:be:b8:3c:80:
         ed:4f:85:33:e4:34:7f:c8:c7:ce:9a:de:c4:7c:d5:25:d5:58:
         48:fa:03:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:45:51 2026 by rpki-client