Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File:                     QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier:          hQvmityVA8cWB9xVfUQEPfF+JllMhRc17XQeRniT4C4=
Subject key identifier:   07:57:44:16:98:01:E9:24:FB:3D:B0:24:96:6E:66:6A:15:5A:F2:D2
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer:       /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number:          0228
Signing time:             Fri 25 Sep 2026 03:00:37 +0000
Manifest this update:     Fri 25 Sep 2026 03:00:36 +0000
Manifest next update:     Fri 02 Oct 2026 03:00:36 +0000
Files and hashes:         1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: QgDAbwQlKp63j+Vgaoj1C9/UpIEIauEODK6FY+tSR+0=)
                          2: 24579154B34D11F19494EB3F3511F970.roa (hash: y14mvIb09+eEN3eSsgVA2iSdwPaX6VrqG7CF5oFtwac=)
                          3: ECE2E908B34C11F1902F4B313511F970.roa (hash: VKdOcR7nd8Uy4p/yEaUCGqVIBZDXHU6mvcAdNqe4W5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Validity
            Not Before: Sep 25 03:00:36 2026 GMT
            Not After : Oct  2 03:00:36 2026 GMT
        Subject: CN=6ab5e3d5-b0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:9d:34:47:ee:21:4c:96:2f:d5:41:b7:22:
                    f3:6a:84:9c:46:b9:28:96:95:39:5f:3a:4b:ba:54:
                    ad:a6:0f:a5:ac:04:e8:f3:e6:76:25:15:f8:ea:6c:
                    0d:5f:9a:f7:2a:6d:e7:77:3b:24:1d:29:fa:8f:5d:
                    45:cb:75:2f:4d:79:3d:33:a2:1a:2a:37:6e:04:51:
                    32:5a:2b:46:e0:e7:bd:a7:db:5a:76:81:86:bd:3e:
                    53:b6:bd:ec:83:2e:e1:bc:cb:92:bc:14:38:62:cd:
                    55:07:15:4d:e1:ff:63:f8:3b:44:30:ef:72:c3:2b:
                    bc:1b:13:18:58:29:c1:7b:be:e8:ab:03:c4:cf:1d:
                    d0:58:c3:31:37:2c:31:cc:cc:3a:6d:9a:12:0c:4e:
                    b1:1b:08:31:9c:85:88:1d:fd:ca:e0:81:c5:8d:71:
                    65:3b:40:84:88:74:47:72:1e:23:e7:50:fd:3a:39:
                    91:01:f2:46:6f:16:5b:17:23:29:e1:93:29:8b:cb:
                    e1:0a:35:df:7b:59:ea:14:60:c7:14:97:27:16:86:
                    fe:71:ac:ff:9f:56:68:5e:df:c7:8d:2d:7e:f8:b0:
                    7e:da:39:17:6f:4f:dc:3e:f9:3c:d5:09:fd:b0:67:
                    bc:49:5e:70:e9:6e:43:90:ac:16:2f:0b:81:19:0f:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:57:44:16:98:01:E9:24:FB:3D:B0:24:96:6E:66:6A:15:5A:F2:D2
            X509v3 Authority Key Identifier:
                keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:15:7c:70:50:84:1c:c7:d7:4b:13:57:cb:6a:32:91:5c:67:
         bd:a2:2a:63:8b:19:52:df:3e:24:e4:2b:46:9f:cf:56:1b:03:
         83:94:20:0d:35:2d:9c:b5:a0:7f:5d:82:64:fd:9d:3f:0e:78:
         11:19:ff:f9:39:58:62:5b:7c:8f:52:5f:d2:3c:fa:7c:c9:a8:
         18:62:01:ad:86:4e:ec:34:9e:5d:32:60:a3:fb:59:15:80:8f:
         a3:7a:6a:ca:e7:84:0e:06:1e:66:3f:89:52:cb:17:f8:a5:4d:
         03:a5:b2:6f:8f:5a:b7:92:51:ad:c8:0b:ba:ae:27:39:07:8f:
         1a:16:f2:b1:00:b4:da:66:7c:81:5a:c8:8b:f9:18:ab:69:9b:
         82:51:6a:e1:4b:83:6d:06:6c:a3:f8:ec:b0:c1:2f:49:5d:0d:
         08:52:f6:05:4d:1a:a0:b5:4f:d6:85:7c:68:41:fd:98:1b:bb:
         ed:e2:d1:53:bf:c7:fe:85:44:42:e3:fb:e1:26:73:3e:80:82:
         aa:ef:ba:07:24:2f:77:2f:f3:dc:c2:57:e1:50:6d:d3:1c:f1:
         72:82:f9:d0:bf:66:1d:7e:ff:ce:81:04:94:59:3f:53:ce:2c:
         6e:32:36:be:7b:bb:bb:c3:b8:d5:c3:11:6b:b8:80:24:b0:a3:
         5b:c3:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:47:24 2026 by rpki-client