Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File:                     Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier:          qo1GhMdZ2WwV4SvJEwO4QriLjUYAAxaf6ANx5OQnoAk=
Subject key identifier:   A7:DC:EE:B7:22:73:17:CA:23:21:37:FE:E6:D3:7F:C3:18:07:09:DC
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer:       /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial:       1218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number:          120C
Signing time:             Tue 22 Sep 2026 17:03:47 +0000
Manifest this update:     Tue 22 Sep 2026 17:03:47 +0000
Manifest next update:     Tue 29 Sep 2026 17:03:47 +0000
Files and hashes:         1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: 0LK35W8gG9MQeZ1HD4xfCGz4A3TZkt5P2a0hezUCpqo=)
                          2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: p2avfwbA5rKR8w+8rtSYTQz3CfMf5vT3jgg0mIj4V8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
                          rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4632 (0x1218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Validity
            Not Before: Sep 22 17:03:47 2026 GMT
            Not After : Sep 29 17:03:47 2026 GMT
        Subject: CN=6ab2b4f3-28ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:62:e9:69:20:fd:33:e4:8d:66:dd:f2:b3:
                    b2:e7:21:34:e7:7c:38:e4:39:d0:58:7c:14:31:c0:
                    4a:bc:d8:2b:bb:90:7a:8b:b7:f8:5e:ea:d5:17:c2:
                    15:29:2c:50:da:3e:46:f6:3e:b5:a5:df:7b:6d:ca:
                    89:1f:db:db:1d:4b:5e:78:7b:c6:83:d8:7a:7f:59:
                    3e:83:a7:b6:52:61:06:81:76:46:c9:f3:49:2b:5d:
                    d8:f4:4c:9b:d8:5e:a7:e1:70:46:d0:94:ef:b7:b8:
                    02:f6:ce:ea:ec:4f:e9:ef:35:67:35:7b:78:a2:ce:
                    59:19:85:59:0a:d7:37:4c:cc:31:f7:28:4d:80:7a:
                    5f:61:52:ff:35:6b:f1:d2:18:a1:0b:eb:e5:34:86:
                    01:da:8c:7c:69:2b:a6:0c:6f:cd:78:a7:ba:88:2a:
                    89:55:98:13:83:ac:0e:73:5e:e7:b3:d4:c1:38:42:
                    76:a1:8a:e9:b8:61:86:75:54:d8:6f:06:d0:c1:a4:
                    97:dc:8b:52:81:00:ce:c9:80:68:fb:ed:d8:a3:bb:
                    2b:1e:37:04:01:8a:c5:6b:52:56:9e:38:91:60:b4:
                    e9:7b:88:6f:bf:b6:87:1c:ec:d4:1c:47:55:86:9e:
                    e2:c6:77:9d:f6:5f:df:2c:7e:57:36:5e:c3:61:3e:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DC:EE:B7:22:73:17:CA:23:21:37:FE:E6:D3:7F:C3:18:07:09:DC
            X509v3 Authority Key Identifier:
                keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d2:af:02:78:0e:bd:8a:8b:a7:36:71:1a:75:a4:f2:7b:45:
         1a:9b:6e:d3:9d:86:71:bb:35:bc:54:9d:fa:e4:bc:3e:de:b5:
         c9:d6:5f:05:d0:f8:7d:69:ec:ee:55:8f:a8:f2:ed:68:cb:c2:
         3f:5f:ce:d7:30:14:e9:2d:88:ec:1e:cb:b1:9d:b4:52:f4:76:
         3c:ea:ac:d3:45:0a:c4:97:97:ef:8e:a8:f5:db:93:3d:a5:64:
         06:3f:f8:3d:87:17:0a:eb:46:7d:6d:64:e5:3c:00:c4:12:aa:
         79:4b:e6:27:35:fa:fd:a5:9a:53:5b:89:62:15:03:4c:9a:4b:
         4b:1c:0b:d2:e1:8d:ef:ba:06:4d:d8:9b:51:2b:08:8e:61:d5:
         6a:23:80:5e:c0:6a:cf:6d:b5:d1:64:32:8b:de:1f:7f:b7:0e:
         3d:27:e7:32:63:61:67:d9:fe:a2:fa:90:e0:dc:52:55:73:3e:
         96:f7:8f:2f:24:ef:d0:52:eb:c9:1c:24:94:8c:96:bc:03:10:
         10:b8:66:0b:72:c3:e0:56:f0:bc:be:11:5c:83:bb:9a:65:07:
         3d:ae:ac:85:7a:9c:2a:48:ce:6b:5e:01:c0:de:97:ec:2f:f3:
         cf:d5:44:31:52:b8:4e:22:db:cc:c6:14:d5:a9:ea:71:5c:9a:
         45:cb:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:12:48 2026 by rpki-client