Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File:                     qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier:          wpnuLDoQqYgtNAl/lQ2UDXjZFZ3k27UfoSRgK0ortXg=
Subject key identifier:   6D:40:1F:F7:34:5F:B0:54:8A:46:51:62:CB:53:61:E3:87:FB:CD:A1
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       02FD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number:          02F0
Signing time:             Tue 22 Sep 2026 21:29:43 +0000
Manifest this update:     Tue 22 Sep 2026 21:29:43 +0000
Manifest next update:     Tue 29 Sep 2026 21:29:43 +0000
Files and hashes:         1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: UF0hFj2TaDQN6xaS3U2/CHwCx0N30DoUe83/l7cyi+s=)
                          2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
                          3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Sep 22 21:29:43 2026 GMT
            Not After : Sep 29 21:29:43 2026 GMT
        Subject: CN=6ab2f347-d2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:cb:49:77:34:19:b4:48:41:a6:40:10:e4:
                    be:e5:8c:b2:89:59:46:37:9d:b1:12:24:47:b7:04:
                    1e:98:ae:20:3b:b7:95:93:f5:4f:ce:7e:d4:52:d0:
                    8d:6e:ab:57:ec:15:61:bb:fb:77:fe:22:35:f9:a2:
                    4b:cd:80:b9:34:b9:22:44:18:a2:9f:64:3d:e9:ae:
                    bf:23:30:f2:50:7f:f3:4e:7f:2c:19:b7:4b:b9:e4:
                    fd:0c:8d:b6:be:50:4d:05:46:69:7c:88:26:e7:9c:
                    cc:9e:12:a1:c4:89:b7:cf:0d:01:bb:88:8a:54:02:
                    69:5e:82:4d:cd:7b:7e:80:33:8c:26:57:05:18:5e:
                    9f:e7:28:9d:31:5d:53:7f:79:97:74:ee:c1:05:5f:
                    ed:5a:2a:2e:a2:dd:76:75:a9:f6:ee:ad:13:09:60:
                    ff:84:b8:38:4d:84:ee:72:16:1e:e9:1f:5e:55:5a:
                    e9:0d:2e:53:96:43:cb:bc:c9:e2:ea:56:88:93:36:
                    82:23:2d:fd:6d:8e:ac:78:74:08:37:a6:d8:3b:9b:
                    6a:97:fd:25:e5:5e:9a:b6:c9:91:72:00:44:46:fa:
                    f9:f1:b2:45:88:84:3e:5d:7c:32:5c:10:84:b1:5a:
                    e7:16:82:04:6c:b5:b3:6b:49:48:d4:0c:58:4d:5e:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:40:1F:F7:34:5F:B0:54:8A:46:51:62:CB:53:61:E3:87:FB:CD:A1
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9f:46:cf:af:f5:b8:fa:3a:3a:c7:4f:79:04:29:d0:14:11:
         2c:82:67:e9:8e:31:cb:ae:5e:ea:3c:8c:81:98:50:44:bb:ec:
         61:7c:74:40:5d:6c:03:60:91:16:e4:e6:1e:e5:b9:f1:43:b3:
         c4:1a:3f:15:36:98:8e:10:f1:45:bb:21:a4:9b:bc:4e:f4:92:
         39:26:de:7a:0d:93:ff:93:3e:5f:e7:5d:50:3f:b6:52:3b:29:
         21:a1:6b:04:20:f3:53:36:6a:aa:92:83:8f:88:79:97:94:72:
         8f:cb:8d:d1:e7:56:0d:91:2f:b5:73:3f:80:29:f9:50:b5:0a:
         1c:40:28:76:9d:ec:2a:4e:45:fe:11:86:15:88:2d:96:5c:0a:
         04:5d:3f:12:23:1d:09:86:ab:c0:a8:23:39:00:20:01:99:eb:
         27:9f:ab:83:7e:21:07:45:e1:21:40:d7:32:ae:77:f9:22:0d:
         9e:95:3e:f7:fb:59:05:5c:91:fd:63:05:c6:53:c1:8d:53:11:
         7f:68:ba:f7:f5:6d:75:6c:e3:d9:fe:ba:5c:11:5a:5a:58:a1:
         04:2f:88:20:52:e1:dc:79:a9:58:f4:40:3f:56:84:1c:a3:3b:
         54:37:b4:4c:8e:8e:cb:b4:27:7c:b0:44:22:9a:d9:2e:93:b4:
         f8:2c:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:45:28 2026 by rpki-client