Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
File:                     qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json)
Hash identifier:          WzcEtkBBOSIMw4aB78/J0MFsZI/tvDavTze/dSc2weY=
Subject key identifier:   05:BA:97:27:4C:76:A6:BE:33:02:AF:E8:15:8E:40:34:9E:F2:09:B5
Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
Certificate issuer:       /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Certificate serial:       2F06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
Manifest number:          2EF3
Signing time:             Sat 26 Sep 2026 15:29:36 +0000
Manifest this update:     Sat 26 Sep 2026 15:29:36 +0000
Manifest next update:     Sat 03 Oct 2026 15:29:36 +0000
Files and hashes:         1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: EOnJilYgWOOesq7PKZ6xFtU/A2b1oWdmAngfVrLtvhU=)
                          2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=)
                          3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl
                          rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12038 (0x2f06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
        Validity
            Not Before: Sep 26 15:29:36 2026 GMT
            Not After : Oct  3 15:29:36 2026 GMT
        Subject: CN=6ab7e4e0-8b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cc:89:55:d4:f2:7f:8a:c2:45:c6:c4:6b:ba:
                    a7:bc:51:be:9f:29:a6:52:b4:a5:dd:0e:f1:02:fd:
                    24:bd:61:6c:1b:92:f2:34:22:5a:57:38:50:d1:75:
                    45:58:03:2a:52:96:69:0d:14:64:a4:88:ac:7a:22:
                    7b:45:8f:92:a4:e2:48:fd:de:fd:4e:b4:1f:32:56:
                    fb:ae:0b:08:23:29:c4:2c:79:5f:90:a3:7b:da:c0:
                    6f:39:d1:98:85:13:ca:f1:fc:72:d4:76:b9:f8:db:
                    25:d9:1a:9b:a3:e2:31:0d:25:22:97:cc:0c:18:c7:
                    0b:28:94:8a:b4:3f:e2:dd:2c:36:bd:96:9b:16:d4:
                    f5:fb:35:bb:ff:7a:a9:23:c9:bb:e9:95:54:39:0e:
                    60:1e:49:7d:97:7a:6c:34:de:07:19:6b:31:f5:49:
                    a2:f0:6c:93:2b:17:18:c0:ff:f4:6e:6a:6b:21:b0:
                    99:27:63:61:47:a4:66:71:9a:10:49:f1:1c:4c:af:
                    a1:36:c1:a2:a3:1d:fc:32:5b:a5:b8:7d:04:5d:40:
                    41:a4:b1:fa:38:41:97:b6:2f:82:9f:61:9f:15:47:
                    1e:aa:8a:99:0f:21:c2:05:73:c5:a3:51:28:e4:80:
                    cd:dc:b5:35:08:5a:34:3e:c7:61:0d:df:fe:c8:ce:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BA:97:27:4C:76:A6:BE:33:02:AF:E8:15:8E:40:34:9E:F2:09:B5
            X509v3 Authority Key Identifier:
                keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:46:ae:8e:7d:33:65:d2:84:26:47:89:42:4f:c1:35:30:6e:
         71:27:bc:c7:26:ed:08:0b:d1:bb:e4:e8:e4:5b:b2:a9:19:21:
         cc:04:92:fd:0b:41:33:fe:f4:83:df:0b:e0:d9:14:a1:2c:f4:
         72:60:5a:58:8b:28:6f:0d:55:34:85:32:ed:0d:83:e7:2a:bc:
         27:7d:26:97:4d:d4:18:f8:31:bb:e4:b7:f6:40:eb:42:a3:98:
         39:0c:62:44:34:0b:12:9b:2f:08:38:2f:b7:58:75:3e:dd:8c:
         bd:31:87:3c:a5:88:49:6e:b0:87:fd:88:f3:8d:26:94:73:72:
         fe:81:f4:af:c5:d2:31:ac:49:e1:4c:22:87:a0:8f:f6:e0:5d:
         69:b8:62:15:25:dd:9a:0c:bd:d2:3f:57:38:95:41:cc:4b:3f:
         25:80:2b:e4:38:2a:fd:bb:b2:e3:cc:ca:7b:80:b2:89:b2:fc:
         e1:8f:84:b6:f7:ee:b5:f4:56:21:63:7b:0b:76:60:74:39:c3:
         aa:a6:86:d2:9b:e4:34:a2:56:b4:79:e2:d6:63:a7:d8:a1:fb:
         9c:ea:9e:f7:5d:6a:28:0f:ca:55:be:6d:9e:6e:0b:66:7f:26:
         a7:cc:f2:30:cc:52:5f:d8:1f:34:d0:a4:df:7b:05:f2:3b:df:
         e7:2a:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:47:58 2026 by rpki-client