Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
File:                     QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json)
Hash identifier:          gOCoe/w/7U6czr4ermoP/vKm3Y+9W5Qf9vzEVjBD/xc=
Subject key identifier:   72:6E:BF:D9:47:FE:02:B6:71:05:D8:93:79:F9:BD:AA:70:C3:95:D5
Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
Certificate issuer:       /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Certificate serial:       08D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
Manifest number:          08CB
Signing time:             Mon 28 Sep 2026 20:36:19 +0000
Manifest this update:     Mon 28 Sep 2026 20:36:18 +0000
Manifest next update:     Mon 05 Oct 2026 20:36:18 +0000
Files and hashes:         1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: GcJH/QxnX73CBsgYx/h9Xk4ElBERLTq7ZIy8Fe7WYPU=)
                          2: 6944587246B311F090CDB927C4F9AE02.roa (hash: VJ0PaimdIk1enlfYWOaptRsWi7j1kdYlaW2W2nKmkrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
                          rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 20:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
        Validity
            Not Before: Sep 28 20:36:18 2026 GMT
            Not After : Oct  5 20:36:18 2026 GMT
        Subject: CN=6abacfc2-0208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:59:d1:fb:0c:7f:14:89:15:a7:c3:83:01:
                    0d:a7:d5:29:e2:d7:d5:5d:b2:cc:f9:4d:8c:7a:85:
                    42:79:61:a0:7d:16:b8:c2:08:a3:9e:05:93:b9:42:
                    23:26:d4:9e:06:5e:05:05:36:1c:f8:0c:29:6b:de:
                    8a:bf:fe:07:f7:0c:e1:1f:32:24:4d:81:75:76:de:
                    c8:c3:df:16:b2:1b:52:10:e3:3f:cb:5e:da:7e:87:
                    ca:84:cc:db:e8:72:db:8b:b0:20:0f:23:30:60:63:
                    83:15:0b:9f:33:87:f3:5b:62:b7:ce:7f:55:31:2f:
                    fa:5e:57:09:1a:f6:d0:8c:0b:00:49:1e:bf:bf:82:
                    51:75:69:53:9b:f5:06:60:bb:85:b2:24:4b:09:a2:
                    5e:10:c6:81:ed:65:8b:34:51:03:99:7c:80:73:b8:
                    e0:83:df:a3:e9:3f:80:81:79:59:62:b1:8d:70:19:
                    eb:c8:f3:7d:86:03:c1:ae:46:d6:4c:f4:72:64:37:
                    d6:5a:d9:1d:bf:2d:2b:44:09:5b:0f:27:b3:53:c6:
                    cf:24:fb:12:5d:17:9b:8c:7f:f3:3d:96:22:44:bc:
                    3c:b4:05:cb:a2:b4:cb:df:d7:c3:d3:3c:73:3b:8b:
                    84:1b:ba:41:db:1f:47:f8:06:b7:2b:d6:86:72:08:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6E:BF:D9:47:FE:02:B6:71:05:D8:93:79:F9:BD:AA:70:C3:95:D5
            X509v3 Authority Key Identifier:
                keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:27:2a:25:9e:ff:8e:8e:01:0a:ce:72:d0:fe:5b:9b:2b:
         69:9b:1d:f2:00:b3:93:46:61:1f:cc:1c:d1:a7:67:45:c4:dc:
         2f:dd:6d:cd:ad:55:00:24:a2:11:82:a6:32:ce:5a:0d:aa:7b:
         9e:38:02:82:64:05:c9:be:1c:7a:49:bd:be:b7:5d:5e:74:91:
         27:5f:0d:c7:81:48:91:f1:eb:79:67:3a:5f:ab:1a:28:23:3a:
         50:06:09:c4:ce:e7:07:14:ce:b3:9e:c9:d0:e6:c1:05:17:48:
         e3:f5:19:36:35:cd:b2:a3:91:99:bf:27:bc:63:09:de:86:d8:
         fe:02:64:b7:34:78:89:0f:ff:4f:3a:a4:37:26:a9:95:1c:d0:
         16:0c:5c:90:24:35:4e:01:e6:fb:44:71:26:66:85:35:c4:67:
         aa:df:3a:80:15:67:a2:bb:0c:01:b4:07:8c:11:59:6c:a9:86:
         e3:01:cb:21:10:d0:84:eb:41:22:2d:52:88:3c:b3:88:6c:97:
         a3:ad:62:5e:7c:21:7a:43:30:25:22:25:f4:48:62:b2:43:ca:
         15:31:42:68:00:91:53:3e:d5:59:c5:f2:9c:55:9a:8f:d4:51:
         f8:18:be:f6:cc:0e:7f:c0:ac:a9:7d:ea:b5:da:a7:d3:9e:27:
         ed:4b:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:48:27 2026 by rpki-client