Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
File:                     QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json)
Hash identifier:          xwjoTDJLJ1JjhEvM/Z8RyhjSH6LmCUw6x84Y5cuKHgU=
Subject key identifier:   5C:47:AF:35:DD:66:39:CD:0C:D2:0A:30:BD:89:AC:59:5D:78:53:B7
Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
Certificate issuer:       /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
Manifest number:          6B
Signing time:             Sun 27 Sep 2026 08:29:42 +0000
Manifest this update:     Sun 27 Sep 2026 08:29:41 +0000
Manifest next update:     Sun 04 Oct 2026 08:29:41 +0000
Files and hashes:         1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: Gdp81KUlEsEg8/2zRHSWdngDpkpZsmcm+aoNxlgcWkw=)
                          2: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=)
                          3: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl
                          rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
        Validity
            Not Before: Sep 27 08:29:41 2026 GMT
            Not After : Oct  4 08:29:41 2026 GMT
        Subject: CN=6ab8d3f6-9dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:56:89:6a:5e:a9:56:30:4e:12:eb:b2:44:ca:
                    e5:c8:23:12:3f:ce:f5:50:75:f4:56:49:07:7f:39:
                    96:ed:79:a2:d6:4c:d2:9e:d4:c8:72:77:6a:e7:a1:
                    dc:93:81:b8:d3:cd:36:d6:3a:3e:b6:0a:92:90:5f:
                    b0:2e:b0:a8:43:37:f7:b2:a5:f8:54:10:c9:9b:c5:
                    e2:63:f9:f4:4a:c1:11:7a:36:ad:c5:f5:07:cc:d8:
                    ac:68:d4:7f:74:68:5c:9e:ec:cc:87:f6:b8:17:79:
                    aa:26:7b:b1:96:3e:51:1a:8f:39:9f:da:3f:c7:a6:
                    72:a3:63:89:cf:df:b3:54:bc:82:18:dc:c6:b2:f8:
                    1e:59:80:38:28:fc:f2:4f:92:8b:6b:d8:eb:f2:82:
                    16:63:7b:7e:d0:01:66:18:2d:1f:ab:34:8b:4e:a6:
                    aa:e0:62:40:83:0a:f9:04:44:44:ff:89:6e:e6:1c:
                    f4:fe:0e:2e:6b:a6:56:9c:b2:12:ea:fb:ab:40:f9:
                    59:6c:05:37:06:b5:5b:a2:e7:27:ab:0e:1c:bc:77:
                    14:8a:49:fa:93:d3:63:9c:80:c0:93:8a:32:75:c0:
                    89:10:fa:44:7e:9c:66:ba:06:db:94:ea:cf:1b:7a:
                    9b:54:4d:12:20:8b:0d:bc:af:69:b6:79:7a:c8:d3:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:47:AF:35:DD:66:39:CD:0C:D2:0A:30:BD:89:AC:59:5D:78:53:B7
            X509v3 Authority Key Identifier:
                keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:8e:62:ac:e0:46:d1:b2:8b:f5:b4:02:b1:04:bb:2b:b5:e8:
         60:6a:73:1b:3b:38:28:cb:01:16:87:a6:f3:51:62:0d:b6:71:
         d1:7c:5c:7c:d2:7b:83:55:e0:ed:ee:9e:55:77:8d:dc:35:30:
         4c:91:99:1f:e0:47:92:1a:1a:4d:5e:2a:42:dc:fb:88:cc:1c:
         67:91:de:8c:f4:ad:03:ab:ba:43:6b:cd:b5:47:56:e4:ab:79:
         80:79:16:cb:6c:52:a4:1b:80:90:05:63:0d:74:ff:14:a4:2e:
         2e:06:6f:50:70:91:22:49:61:9a:99:46:f9:5a:e4:58:56:0b:
         0b:da:9f:21:49:3a:cd:75:fd:de:08:be:54:41:c4:fb:b5:04:
         d0:1b:da:42:18:d2:87:2d:37:b2:66:b4:44:8d:18:54:e9:c1:
         0f:60:2f:7b:73:b5:fb:74:39:b3:2d:f3:df:9b:52:34:d5:76:
         cf:85:22:49:86:87:17:53:cd:84:aa:2a:51:04:35:16:88:3d:
         f1:07:cb:a1:6f:ed:5c:a0:ee:56:cb:c2:28:e4:21:64:5d:7e:
         f0:ec:16:58:a1:09:10:5f:38:c0:6a:a5:fd:e3:86:c0:f3:97:
         b4:66:55:67:75:13:dc:cf:fe:5c:4f:65:1d:d7:6c:6c:e1:23:
         5a:61:1b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:08:25 2026 by rpki-client