Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File:                     QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier:          0DguzOWqhD0Hg0QUVqYcyUe2XbChJlTfgFuWDtTd5dg=
Subject key identifier:   53:D3:77:C3:66:09:F8:1E:15:DC:08:BA:9A:57:84:C4:2E:47:D3:4C
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer:       /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number:          0229
Signing time:             Sun 27 Sep 2026 03:19:21 +0000
Manifest this update:     Sun 27 Sep 2026 03:19:21 +0000
Manifest next update:     Sun 04 Oct 2026 03:19:21 +0000
Files and hashes:         1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: iiK2x1dO/y1L35WZMA3B1IszvP8IoWf8rfdc3SQfwn4=)
                          2: ECE2E908B34C11F1902F4B313511F970.roa (hash: VKdOcR7nd8Uy4p/yEaUCGqVIBZDXHU6mvcAdNqe4W5E=)
                          3: 24579154B34D11F19494EB3F3511F970.roa (hash: y14mvIb09+eEN3eSsgVA2iSdwPaX6VrqG7CF5oFtwac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Validity
            Not Before: Sep 27 03:19:21 2026 GMT
            Not After : Oct  4 03:19:21 2026 GMT
        Subject: CN=6ab88b39-b091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:48:f1:a5:49:a9:88:4e:c9:f4:63:aa:28:
                    b5:d3:84:2f:9d:06:b1:b6:8d:21:7b:1b:ee:ea:4f:
                    73:1a:a9:79:cf:69:ae:2d:c1:a0:72:fd:1e:92:ee:
                    41:13:ec:a9:14:1a:cb:42:e5:0e:85:bd:53:fe:c2:
                    ab:93:c0:0b:2b:39:ea:81:13:3a:31:01:52:99:06:
                    4c:73:20:49:26:1d:17:32:0b:e2:2a:2f:e2:d1:6d:
                    d5:c5:18:39:5d:06:5d:02:d8:87:27:e9:a1:22:68:
                    c0:99:8e:63:98:9a:98:75:92:4a:6e:df:38:86:dc:
                    58:eb:83:b2:b0:4b:21:1a:88:e0:48:95:38:04:66:
                    10:64:55:ca:f5:bc:66:4b:75:96:f8:2c:a8:32:ab:
                    10:80:a4:98:87:39:b5:4e:25:84:f3:81:9e:b3:f7:
                    e3:26:fc:26:5d:08:f1:87:b4:8e:74:7a:e7:05:81:
                    1f:8c:8d:19:b4:61:0e:fa:6c:e9:cd:27:f8:aa:af:
                    c3:3e:d3:c1:89:52:23:85:27:b5:34:1b:8f:b2:a1:
                    0c:99:68:4b:41:a6:9d:e0:2d:62:4f:de:37:1f:0e:
                    f5:19:48:05:d0:78:fe:2c:cb:18:bb:09:c1:94:73:
                    3b:d4:15:15:af:e7:32:a1:fe:9b:d2:ca:1c:52:2a:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D3:77:C3:66:09:F8:1E:15:DC:08:BA:9A:57:84:C4:2E:47:D3:4C
            X509v3 Authority Key Identifier:
                keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:6c:03:37:be:40:7a:00:02:d6:ac:24:df:e6:b9:76:87:40:
         7f:99:5b:5e:d8:3d:93:be:d2:68:54:0e:ed:0d:f5:6e:d5:35:
         e7:8f:0d:ae:4d:4a:bd:c8:1c:4c:77:6f:05:d5:cb:37:16:e7:
         75:53:26:6f:09:58:d4:b5:bc:ee:ac:ac:f9:bf:ab:7e:26:0f:
         d1:47:e2:70:cc:13:c3:f5:c9:01:5b:8e:26:e6:e2:ce:8f:0a:
         e7:da:a6:be:34:9c:b3:60:94:39:be:15:69:e2:50:a1:7f:43:
         5d:45:70:91:1b:91:9e:c5:b8:82:06:75:50:04:09:b7:10:99:
         80:fe:fa:23:7b:9b:9d:d5:37:72:bd:ea:ff:67:59:db:f1:a7:
         12:19:87:c7:52:e5:a8:17:c9:de:b1:b8:9f:1f:7b:d1:d5:27:
         78:30:f0:10:da:95:d2:80:11:0b:ca:6a:95:14:3a:8e:15:56:
         59:4a:18:dd:b3:74:1f:a3:f8:31:7a:0c:58:3b:a7:d1:8f:96:
         99:04:be:27:5a:e8:c9:2b:35:39:79:4a:d2:9e:81:fe:2b:74:
         e4:ae:63:1b:ef:23:ea:18:ea:60:af:17:4f:f6:1b:7a:98:d1:
         4c:a6:6c:ec:d4:8f:6b:74:ca:5c:36:14:35:ee:30:1a:b9:04:
         9e:a4:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:16:38 2026 by rpki-client