Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
File:                     qtP-OSFFYMILVrZr17neXikZTf4.mft (raw, json)
Hash identifier:          JO2hN/bRcy1jU7Sci4BQyyMtWeq9kwkE/GZlOezmuq4=
Subject key identifier:   9E:13:33:7A:48:D9:83:AD:DD:EB:D2:C9:46:5A:0A:28:4D:EA:66:CC
Authority key identifier: AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE
Certificate issuer:       /CN=A915273A/serialNumber=AAD3FE39214560C20B56B66BD7B9DE5E29194DFE
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
Manifest number:          5E
Signing time:             Thu 01 Oct 2026 09:35:31 +0000
Manifest this update:     Thu 01 Oct 2026 09:35:31 +0000
Manifest next update:     Thu 08 Oct 2026 09:35:31 +0000
Files and hashes:         1: qtP-OSFFYMILVrZr17neXikZTf4.crl (hash: ECS2WlKFft4e9QVsekXMLGGqLcptx6SY03DbcHjQLBc=)
                          2: 68C95B4044C811F1AF05867DBD833773.roa (hash: EgnYcd9zGGkBLRDkgrSpZMFzkZue4mGm6N7R+D7HArs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.crl
                          rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 09:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915273A, serialNumber=AAD3FE39214560C20B56B66BD7B9DE5E29194DFE
        Validity
            Not Before: Oct  1 09:35:31 2026 GMT
            Not After : Oct  8 09:35:31 2026 GMT
        Subject: CN=6abe2963-90a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:2b:15:88:7a:33:53:d8:95:b1:96:5d:3e:
                    f4:a1:dd:e1:21:f6:93:9a:29:b7:98:82:0f:57:d6:
                    fc:1e:5c:a1:12:5f:e7:08:16:d9:4e:13:a6:06:bf:
                    fe:67:68:19:2c:4f:c4:e9:66:f8:f0:81:e3:fc:b8:
                    3b:24:62:d6:f2:07:89:79:72:e2:7e:f6:63:d6:84:
                    36:d5:81:c6:16:a4:ae:d8:3a:cd:1e:c8:17:c1:0d:
                    3a:f8:3f:b0:86:5e:93:38:80:11:bb:bb:e3:cd:9e:
                    0e:71:ba:f4:64:32:6e:07:b8:4f:01:e4:60:da:d7:
                    f7:29:22:54:3d:bd:ee:52:1b:50:33:c9:e5:81:c3:
                    0e:d1:bf:37:c2:8d:76:e3:5c:52:0c:07:8b:82:84:
                    38:d2:e0:6f:93:22:ba:6a:91:8e:5b:9f:53:51:30:
                    6a:b7:d8:3a:53:12:37:41:89:4f:07:00:2e:05:5b:
                    4e:de:dc:73:ae:39:90:ab:46:e1:b8:dc:31:c2:69:
                    2f:7e:cb:31:e5:18:bc:f6:f1:8a:db:8c:6a:7e:53:
                    8c:10:b3:d7:a3:a0:f0:59:f9:2a:50:71:55:62:fe:
                    09:e3:48:38:92:3e:94:8e:12:48:27:64:39:7a:ce:
                    46:7c:ee:d7:8f:ac:aa:f5:e7:7e:2e:00:e1:67:94:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:13:33:7A:48:D9:83:AD:DD:EB:D2:C9:46:5A:0A:28:4D:EA:66:CC
            X509v3 Authority Key Identifier:
                keyid:AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:de:1c:24:34:fa:c7:1e:c8:26:77:de:90:85:84:d9:e9:52:
         65:77:1f:68:19:4f:aa:a4:a8:b3:64:40:a0:dd:a2:ec:ef:3f:
         99:25:4e:62:3c:5a:73:d5:55:41:5f:bd:f4:30:4b:84:57:32:
         93:3d:d3:e6:41:63:91:da:f9:55:2f:5e:20:53:1b:73:96:4d:
         34:e6:7a:5f:c5:c9:40:09:f9:8a:cf:ee:8b:9a:6b:3c:7b:8e:
         f7:a4:c2:26:2c:0d:d3:9f:30:35:f5:f0:a8:cb:49:b6:a4:6a:
         0c:d7:93:7e:dc:45:ee:97:5c:75:3a:2e:e1:fe:ee:bd:2d:fd:
         87:dc:58:89:7a:cd:e4:22:b2:b2:58:99:1f:c7:83:a0:ac:32:
         e7:b5:87:57:0f:c0:86:d3:68:57:16:9e:71:42:b8:a6:aa:01:
         79:0d:6e:ba:22:49:f2:28:ac:9a:c1:8e:2b:e5:18:67:d8:fb:
         62:73:fa:cc:20:a2:6e:9f:ce:fb:fb:a5:95:3a:68:eb:b1:d1:
         fa:32:26:79:8f:f2:87:12:0f:64:0a:b4:d5:ce:08:6c:e8:07:
         ee:a5:e5:44:d0:72:ed:8d:80:f3:8d:0f:87:ec:94:9a:fe:66:
         df:dd:70:8b:26:13:b3:8a:30:f6:76:9e:ef:f9:6a:39:42:ad:
         36:31:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:19:52 2026 by rpki-client