Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
File:                     qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json)
Hash identifier:          PQvjWvwZWz+7gOAWd3iObeNzQwWVkkutQVL/qTV4obw=
Subject key identifier:   F0:DC:CB:05:1B:68:57:F2:B8:28:8A:A5:7C:BA:66:A9:0D:4C:85:AA
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Certificate issuer:       /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
Manifest number:          0881
Signing time:             Sat 26 Sep 2026 20:52:19 +0000
Manifest this update:     Sat 26 Sep 2026 20:52:19 +0000
Manifest next update:     Sat 03 Oct 2026 20:52:19 +0000
Files and hashes:         1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: aUR+J+9VZ3a10t91rBCOOLfh3inJgyB4lxRl3bPyij4=)
                          2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: DBVP47MzkA4zExAYz5BkJLhWa09IKcrwIj4PmXTVqgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
                          rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 20:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
        Validity
            Not Before: Sep 26 20:52:19 2026 GMT
            Not After : Oct  3 20:52:19 2026 GMT
        Subject: CN=6ab83083-b911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a7:e0:65:61:a5:47:6a:5c:76:67:c9:a7:6d:
                    b0:e1:bf:fa:0f:39:09:3e:5a:b8:d0:cd:cf:bd:d1:
                    53:46:10:c0:d5:64:31:11:40:eb:b6:58:85:a0:70:
                    bc:95:27:14:a2:23:bb:8c:6e:f4:ce:d8:f2:d0:86:
                    92:c4:34:0e:41:9b:db:43:9c:fd:15:55:28:12:55:
                    be:77:14:b4:cc:75:ee:cf:4a:39:3e:22:b9:42:1d:
                    cf:11:3e:97:52:38:94:7f:f6:b0:72:f2:a9:43:22:
                    6d:07:be:4e:92:9e:c2:55:e7:89:71:c1:bf:75:ac:
                    7b:f1:c3:ef:ff:60:38:33:49:41:6d:92:dd:48:47:
                    32:c4:4c:98:17:5d:ff:11:78:31:11:df:1e:75:c0:
                    26:64:19:04:01:83:0d:5c:a7:95:8a:06:92:5d:63:
                    9a:05:00:0e:5d:bd:7e:9c:e4:f4:79:ed:b8:a5:fd:
                    20:b1:2f:0d:ae:68:5b:e6:f9:82:61:4f:44:e8:2a:
                    e8:89:ed:d0:6f:62:a3:b2:f5:59:4b:97:0f:cd:eb:
                    24:71:a6:fa:23:2c:27:2f:bd:65:62:19:03:ee:a9:
                    d4:f1:96:74:41:f5:cf:c4:ca:66:f2:20:9e:57:86:
                    46:01:36:21:7c:c7:b5:01:84:f1:c1:ba:5d:33:0a:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:CB:05:1B:68:57:F2:B8:28:8A:A5:7C:BA:66:A9:0D:4C:85:AA
            X509v3 Authority Key Identifier:
                keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1c:fb:a7:7a:26:c7:78:ef:a2:9b:26:72:27:9c:28:7a:b9:
         7d:69:a2:e3:93:36:99:9b:11:b7:07:45:bc:12:6c:6d:fb:56:
         e7:c8:3a:84:3d:2d:a1:2f:ae:68:83:31:46:c7:66:58:1c:94:
         df:c6:dc:fa:ac:ab:3e:78:0e:a2:8c:53:65:d9:89:2b:75:d2:
         86:33:62:ab:6d:b9:78:cc:98:2b:d1:e6:d0:2f:1b:df:13:a7:
         71:e8:ff:1f:55:87:e2:f9:88:49:1b:27:3b:60:3a:f2:6d:e7:
         b1:44:3b:af:c9:e2:09:61:b7:d9:f9:bd:90:31:7c:c3:2a:6b:
         39:c9:83:a4:e9:d0:43:1c:9f:86:e3:76:8f:12:81:09:46:1a:
         8d:8c:12:79:84:ac:e6:91:f6:99:b0:28:4e:f3:a9:32:c7:7c:
         7d:ef:cb:0d:c0:fa:99:28:3a:c0:b2:b3:2e:fa:56:cb:a2:c9:
         ea:8b:0b:54:42:49:eb:bb:50:b6:ee:c1:47:98:57:8d:e7:dc:
         c5:10:36:a7:f6:23:da:2a:c7:5b:90:97:a0:1b:0a:a7:58:56:
         ea:40:73:4f:69:fa:4c:69:33:66:ce:4d:f3:06:58:3f:1e:7c:
         af:f3:4d:b8:7c:c5:57:45:1a:fe:9a:5e:b8:7e:59:b7:d8:00:
         09:fb:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:54:26 2026 by rpki-client