Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File:                     qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier:          0Vnqov0nFWNXHzel2Vvo489dN2cuuXz1h8EyQt4nbB4=
Subject key identifier:   49:7D:C8:FE:8B:7C:C1:84:BA:65:3D:81:4C:AD:BE:55:2F:96:A1:0C
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer:       /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number:          E7
Signing time:             Wed 23 Sep 2026 06:22:57 +0000
Manifest this update:     Wed 23 Sep 2026 06:22:56 +0000
Manifest next update:     Wed 30 Sep 2026 06:22:56 +0000
Files and hashes:         1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: /0kdeC8HowgD/x7CtgueB7l0eo4BMWEQbPzQkaO1FiQ=)
                          2: D8B6AE628B7211F18C52B0985511F970.roa (hash: Tyldns6YlFiHD84mlWWmrD/ipBQh/3NigUuHVUTz170=)
                          3: A73E47B6646611F092E66D56C4F9AE02.roa (hash: +5AmxF2Ot32SjYb4sD4AklzsQoQaBKOXNwxkLnzUCxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
                          rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
        Validity
            Not Before: Sep 23 06:22:56 2026 GMT
            Not After : Sep 30 06:22:56 2026 GMT
        Subject: CN=6ab37041-87ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b2:14:12:51:86:c0:4e:2d:f1:bd:03:ac:f0:
                    b2:73:e6:b5:c4:b6:9c:f6:1c:2e:ea:05:37:be:77:
                    e7:43:b2:3e:cc:4f:92:e2:97:64:eb:ec:2c:e7:e4:
                    9b:1c:74:e0:d5:63:19:98:f2:ac:fb:64:3e:d7:52:
                    46:77:fd:d1:43:3f:0d:ac:e1:ab:4c:a1:8f:93:0d:
                    4a:5e:1c:57:b4:53:ef:11:cf:07:6f:dd:ba:37:3b:
                    1a:3d:de:13:d3:d8:c3:35:8f:bc:a6:58:a7:51:b5:
                    2d:2a:ab:bb:e0:72:ba:a7:1f:7b:cf:d3:3f:54:a7:
                    c1:70:4c:fd:b1:44:84:24:c9:d7:24:62:c0:ce:8e:
                    d2:66:5b:c7:5e:e6:64:07:75:56:53:94:0e:e4:d8:
                    e8:5e:69:2a:ec:92:96:18:fb:e4:e4:a5:37:c2:6e:
                    68:7f:89:70:80:6b:f4:c1:19:d9:36:42:c3:c3:3f:
                    32:87:8d:cb:66:62:2f:fe:92:26:00:c3:b9:dc:af:
                    16:8a:8b:df:9a:65:aa:18:00:fb:7d:65:64:3d:f7:
                    86:f2:34:32:dd:aa:b1:66:72:f5:b4:d8:d9:79:59:
                    4d:e5:8b:4f:21:ab:f3:ca:fe:e6:3b:78:94:03:1f:
                    75:60:01:ef:b8:dc:97:12:e6:65:2c:e4:b1:87:70:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7D:C8:FE:8B:7C:C1:84:BA:65:3D:81:4C:AD:BE:55:2F:96:A1:0C
            X509v3 Authority Key Identifier:
                keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9a:ac:9b:bd:0b:f0:5c:81:50:7c:af:ab:ff:5f:59:fa:58:
         6d:c3:28:49:73:9f:c5:ee:a7:8d:f5:94:9c:89:19:b1:ec:38:
         17:c1:19:43:12:70:b2:40:35:08:15:0a:04:32:35:7e:ef:84:
         e1:16:ac:9a:4c:10:e9:b7:20:54:7c:f6:c8:6c:39:76:95:50:
         80:a6:56:bc:28:e9:66:45:df:36:f3:f5:f9:5b:ca:42:ad:c5:
         10:9e:5d:95:aa:92:59:c4:f9:8d:80:ef:9a:12:4f:98:ee:f1:
         63:b3:9a:1c:b8:2e:40:51:83:58:5e:7f:27:fa:73:ec:48:10:
         f1:6c:a9:c0:24:3a:a8:2f:d9:18:f2:c4:f2:ad:19:48:ae:ce:
         3a:5a:bf:ba:0c:96:73:51:7f:9a:3e:96:16:ab:b8:82:5a:ce:
         a2:73:17:fd:ef:8f:29:d2:84:69:8b:af:9c:40:7f:4f:66:48:
         aa:c8:21:06:a7:b1:82:4e:eb:63:bc:8c:11:12:ee:45:d6:74:
         f8:08:24:62:37:0b:4a:bd:a2:c6:e0:2f:47:4d:32:b9:f9:92:
         64:5e:84:6e:18:67:e1:94:3c:98:64:a0:51:99:90:3f:d7:73:
         c6:1b:b7:e5:37:0c:3a:51:ba:3b:9f:82:7f:16:da:da:b8:b5:
         4a:8f:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:04:37 2026 by rpki-client