Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
File:                     rqa1YkZ78uEmlnUJYunTMkshJj0.mft (raw, json)
Hash identifier:          SS4hvd419oB45pjAhnE47vhJz/TYdjNdU2lpVA/CQLU=
Subject key identifier:   EF:F1:7D:D6:D8:89:60:F7:98:F6:4F:1F:A3:D4:30:18:9A:F4:22:63
Authority key identifier: AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D
Certificate issuer:       /CN=A9139ECA/serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
Manifest number:          30
Signing time:             Fri 25 Sep 2026 08:50:43 +0000
Manifest this update:     Fri 25 Sep 2026 08:50:42 +0000
Manifest next update:     Fri 02 Oct 2026 08:50:42 +0000
Files and hashes:         1: rqa1YkZ78uEmlnUJYunTMkshJj0.crl (hash: ob7r7eEZgpVcZppCKmd+n3ps0UyBtzgEn15pOS5cEwI=)
                          2: 1B0AAFAE7A8C11F1B1F8078C59A30FBC.roa (hash: wfatrlh8uuEwspZHwlBADBh6qz3SMKGJNlNB+wHl+u0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl
                          rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139ECA, serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
        Validity
            Not Before: Sep 25 08:50:42 2026 GMT
            Not After : Oct  2 08:50:42 2026 GMT
        Subject: CN=6ab635e3-0236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:be:ce:e5:94:06:65:ce:5f:d2:eb:10:d1:
                    8f:ee:79:1b:d7:76:b3:06:b4:91:6e:90:72:e1:a0:
                    fd:f0:21:16:2e:f1:f2:3f:ee:08:98:dd:08:13:dc:
                    42:cc:74:26:9f:85:00:24:71:89:52:cd:80:23:54:
                    e2:d8:39:93:ee:ef:8c:1b:01:55:0e:15:32:a1:a7:
                    78:f7:bc:3d:c2:01:c7:dc:90:5e:ba:ba:72:44:21:
                    64:8d:a6:7c:af:b7:d5:53:21:ea:5f:1c:c2:53:c7:
                    d3:b5:eb:22:5d:dd:0c:98:a6:61:e5:a3:0f:80:48:
                    5f:f1:c3:97:e6:6d:76:8d:67:89:7b:fb:ce:f6:cf:
                    2b:43:20:5a:f1:74:5a:a8:c2:a3:28:13:3e:96:98:
                    39:68:e6:fb:25:b0:49:ad:01:69:d3:67:b0:36:a4:
                    db:18:07:1d:5e:bc:7d:88:05:60:1f:2c:ae:b1:dc:
                    99:3b:27:5f:e2:e2:42:5e:71:4a:c5:c9:d3:50:59:
                    ca:36:8e:42:ea:6a:04:ec:1e:d4:e1:11:fb:ac:32:
                    8a:52:73:28:52:ea:2b:1f:18:59:9a:71:0a:f5:c3:
                    0b:10:64:85:cd:0e:02:f9:e5:c5:65:2c:83:44:ac:
                    44:96:37:56:4e:5f:41:65:65:1f:8a:c6:41:17:c8:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F1:7D:D6:D8:89:60:F7:98:F6:4F:1F:A3:D4:30:18:9A:F4:22:63
            X509v3 Authority Key Identifier:
                keyid:AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:0f:20:e8:ce:d6:c9:3e:c3:88:0a:15:8f:08:b3:80:8b:
         ab:74:42:23:19:10:be:74:ef:d3:90:29:08:a0:1e:e3:62:f8:
         c7:e5:55:bc:de:6e:49:e9:90:90:ff:5c:0c:0f:3c:23:89:03:
         92:b8:cf:29:c4:b9:4b:df:7a:e0:64:cf:12:b6:de:15:fd:da:
         63:ec:e9:b1:90:d3:5e:cf:7b:cb:cf:d3:cf:5e:33:0f:9c:c9:
         37:d3:ce:2f:48:75:60:ab:47:a9:c4:f2:2d:17:4d:c0:09:62:
         26:fd:80:8b:ab:18:d7:37:e2:91:c2:de:84:ae:d2:32:93:65:
         b3:8a:0b:4b:69:df:5b:9c:23:d0:16:8c:a7:f9:f2:bb:c1:e6:
         c8:96:e1:1f:d5:25:c9:cb:15:fe:0a:04:20:2b:78:9c:73:5b:
         ac:e7:09:a6:46:f9:73:61:28:03:cf:06:1f:00:04:54:42:80:
         b1:36:87:97:89:9d:b0:dd:d2:2c:58:b8:e7:8a:f1:99:71:b6:
         9c:fa:8a:ec:a8:93:a2:d4:2a:df:e5:f8:59:c1:76:a4:a3:ab:
         56:55:60:05:c6:a4:6c:9b:78:fa:5a:93:64:b1:d4:59:6a:76:
         49:a4:e9:cb:27:d2:30:5b:be:93:bd:be:da:c5:32:9d:e9:15:
         4e:1e:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:15:28 2026 by rpki-client