Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File:                     QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier:          k49hleD4Sbqr7B8NVwUq/aKMe6vk1RyXC3tQkIB+I8Q=
Subject key identifier:   31:95:2A:3E:56:61:6E:37:D3:87:89:86:E4:2E:7B:47:E6:BF:39:F0
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer:       /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial:       02D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number:          02D7
Signing time:             Wed 23 Sep 2026 00:55:21 +0000
Manifest this update:     Wed 23 Sep 2026 00:55:21 +0000
Manifest next update:     Wed 30 Sep 2026 00:55:21 +0000
Files and hashes:         1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: bCkKLcEAIXjz/BLrwvjVVNPifEJkICTs0aypLiItBFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
                          rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
        Validity
            Not Before: Sep 23 00:55:21 2026 GMT
            Not After : Sep 30 00:55:21 2026 GMT
        Subject: CN=6ab32379-9f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:0d:1a:0d:ac:69:1d:8d:e6:d2:24:0d:6f:
                    e2:86:a0:50:44:01:5f:8a:0a:1e:2b:95:53:6e:ea:
                    c0:4d:6f:0d:8c:41:df:b1:f8:9f:80:bd:f9:dd:fc:
                    17:62:ef:62:df:83:df:22:c3:3c:d6:58:f8:89:67:
                    74:46:6b:ac:d0:0b:07:15:68:d5:3a:af:90:35:c8:
                    ab:f2:6a:0c:b7:f8:ba:ce:05:28:cb:ce:7a:9b:19:
                    b3:4d:56:f7:0c:9d:bd:a6:f1:ef:f6:74:28:6e:53:
                    af:9e:bf:33:cf:ac:f0:d1:1f:52:e0:3a:8e:eb:57:
                    b0:30:c2:b7:70:b9:02:8a:5c:5a:14:cb:94:5d:1d:
                    ce:bf:e4:54:c3:fc:40:92:be:ca:1f:b3:30:ec:c2:
                    f6:6d:01:3f:ea:ad:c9:ea:99:a6:98:11:3a:eb:75:
                    48:dc:f9:ed:bd:55:23:7c:0d:17:a7:32:ce:20:e1:
                    be:89:2d:e8:1d:0f:77:e0:f4:c3:26:bc:db:78:25:
                    e2:d5:c2:ce:8f:50:46:2f:3b:e3:e2:db:9f:c5:c5:
                    3d:5b:03:07:e6:2e:92:d2:7e:05:c4:a0:af:7d:ee:
                    65:45:25:28:2e:56:49:55:67:c8:57:4a:f6:42:b6:
                    d8:12:7e:38:fe:64:28:f4:a2:40:08:a0:3d:56:bd:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:95:2A:3E:56:61:6E:37:D3:87:89:86:E4:2E:7B:47:E6:BF:39:F0
            X509v3 Authority Key Identifier:
                keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:05:93:cc:93:7b:dc:b9:d7:88:61:84:1e:18:b1:36:2f:38:
         33:a5:ec:74:75:de:3a:29:6d:9f:b0:c7:3a:1a:f5:24:57:e3:
         17:dc:4b:2d:64:d5:5c:b8:8f:4c:cf:fb:e7:39:4d:39:11:17:
         6e:ca:42:f5:dc:a7:db:dd:4f:bb:2b:ca:82:66:32:1e:8a:6f:
         c5:22:8c:7b:9a:db:c9:8b:c8:31:f7:09:58:47:00:bb:3f:69:
         15:58:87:33:e6:27:f6:b5:43:f8:7e:a6:a7:6b:01:b2:a0:fc:
         41:42:90:e2:fd:88:e8:4d:33:97:71:15:d4:47:05:73:8f:e3:
         19:d2:f0:cd:ca:cf:52:f4:79:63:e7:6a:72:6d:27:16:04:4c:
         99:80:81:5a:6b:68:c8:ed:59:e2:fa:43:86:ae:ad:e5:47:f8:
         dc:e7:e7:19:3e:bd:7a:a2:59:6b:06:a2:bc:e6:05:d8:e2:e6:
         84:29:fc:9d:32:b0:95:32:a3:cc:93:19:88:4d:37:d9:8d:64:
         92:f2:95:16:d3:10:db:a2:2e:27:5e:8a:9c:68:08:1b:66:2e:
         02:db:18:98:9c:81:c1:b8:4e:5d:09:2b:63:5d:db:fd:3b:f5:
         0a:17:1d:5d:8e:e2:d4:2b:73:43:dd:b0:0a:3d:3d:9b:6f:fe:
         74:af:de:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC
Nzg4MTMzREYwHhcNMjYwOTIzMDA1NTIxWhcNMjYwOTMwMDA1NTIxWjAYMRYwFAYD
VQQDEw02YWIzMjM3OS05ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyhENGg2saR2N5tIkDW/ihqBQRAFfigoeK5VTburATW8NjEHfsfifgL353fwX
Yu9i34PfIsM81lj4iWd0Rmus0AsHFWjVOq+QNcir8moMt/i6zgUoy856mxmzTVb3
DJ29pvHv9nQoblOvnr8zz6zw0R9S4DqO61ewMMK3cLkCilxaFMuUXR3Ov+RUw/xA
kr7KH7Mw7ML2bQE/6q3J6pmmmBE663VI3PntvVUjfA0XpzLOIOG+iS3oHQ934PTD
JrzbeCXi1cLOj1BGLzvj4tufxcU9WwMH5i6S0n4FxKCvfe5lRSUoLlZJVWfIV0r2
QrbYEn44/mQo9KJACKA9Vr1XtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGVKj5W
YW4304eJhuQue0fmvznwMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE
N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw
dWtzVkxUYmJCYnkzaUJNOTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYAWTzJN73LnXiGGEHhixNi84M6XsdHXeOiltn7DHOhr1JFfjF9xLLWTVXLiP
TM/75zlNOREXbspC9dyn291PuyvKgmYyHopvxSKMe5rbyYvIMfcJWEcAuz9pFViH
M+Yn9rVD+H6mp2sBsqD8QUKQ4v2I6E0zl3EV1EcFc4/jGdLwzcrPUvR5Y+dqcm0n
FgRMmYCBWmtoyO1Z4vpDhq6t5Uf43OfnGT69eqJZawaivOYF2OLmhCn8nTKwlTKj
zJMZiE032Y1kkvKVFtMQ26IuJ16KnGgIG2YuAtsYmJyBwbhOXQkrY13b/Tv1Chcd
XY7i1CtzQ92wCj09m2/+dK/eGw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:53:47 2026 by rpki-client