Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
File:                     qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft (raw, json)
Hash identifier:          Dg/jbql7AsBWxjgJDAUE/+SHNpBs+kDndtW14m9zstI=
Subject key identifier:   34:35:DE:F9:2B:42:56:D4:37:69:9C:17:6D:48:15:8F:A4:D3:BF:40
Authority key identifier: AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84
Certificate issuer:       /CN=A916DFDD/serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
Manifest number:          F0
Signing time:             Wed 23 Sep 2026 06:09:38 +0000
Manifest this update:     Wed 23 Sep 2026 06:09:38 +0000
Manifest next update:     Wed 30 Sep 2026 06:09:38 +0000
Files and hashes:         1: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl (hash: VABg4jqcS7Zo3O3copj+TnVcej5FkoUpSKo9QtAgBI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl
                          rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DFDD, serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884
        Validity
            Not Before: Sep 23 06:09:38 2026 GMT
            Not After : Sep 30 06:09:38 2026 GMT
        Subject: CN=6ab36d22-6cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:c6:a5:06:7a:e9:92:b8:71:4c:48:6e:7b:
                    d6:e1:26:64:80:e5:08:9d:5c:7b:14:86:26:22:b8:
                    27:2d:b6:7a:03:2d:bb:4c:37:18:e1:ec:f9:f2:8a:
                    1f:cb:b5:81:dd:27:8f:a2:54:c7:30:c6:e6:03:60:
                    7f:7d:e4:26:5c:02:e6:e0:bf:ab:71:b8:1c:6b:d1:
                    6e:ca:32:67:61:6f:c0:ae:9e:79:a3:10:4e:f0:ba:
                    bb:84:ff:db:7c:ff:89:c0:43:5b:79:d1:28:a0:77:
                    13:84:0a:d4:fd:eb:a7:d9:88:86:d0:52:b8:9c:8b:
                    b7:f2:62:94:84:d0:50:f3:3e:7e:36:dc:7a:df:be:
                    dd:12:2a:42:65:88:95:7e:a4:2a:97:7b:5d:85:2f:
                    28:97:11:d1:08:d6:52:95:d4:7f:e0:98:59:69:1f:
                    75:08:ac:f6:58:96:65:fd:b2:96:41:78:27:81:18:
                    6a:5c:e3:05:ce:b2:99:cf:e5:05:09:7c:2e:e0:9b:
                    92:95:00:21:db:6a:13:b0:9c:a6:bc:c8:92:f6:b5:
                    7c:56:67:b1:40:42:a6:42:0f:f9:b5:99:ca:46:35:
                    2d:b3:83:a6:d6:67:fc:f6:04:d6:c4:07:a5:e0:39:
                    4f:dc:cb:6d:39:ca:5f:ae:30:61:49:a4:6e:13:2b:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:35:DE:F9:2B:42:56:D4:37:69:9C:17:6D:48:15:8F:A4:D3:BF:40
            X509v3 Authority Key Identifier:
                keyid:AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:91:e0:e9:24:94:87:73:0f:6b:f6:15:5d:82:48:19:f0:78:
         e2:18:15:5f:90:28:a0:93:9d:29:f4:fe:91:d4:a9:40:c9:38:
         1b:bc:4d:f3:c0:99:0c:ce:3a:74:2a:f1:31:d3:bb:9c:c5:f9:
         8f:eb:c3:fd:b1:06:8e:cf:87:fb:ed:1b:6f:77:6b:e7:f8:81:
         34:41:2c:df:9f:96:00:29:95:1c:5d:fa:96:5a:41:c7:df:cf:
         2c:84:8e:c1:21:23:01:2b:5f:a3:a2:92:bf:9e:29:6b:5c:a9:
         04:19:e4:80:5f:d6:95:f8:2c:e0:c7:fc:44:fc:62:5d:94:0a:
         db:ec:9f:3e:ce:41:4b:79:d9:15:1c:d7:1c:f5:49:9f:b5:e3:
         7a:f5:29:7a:4a:ec:cf:ba:0f:ee:b5:12:9e:14:19:ec:e9:c1:
         c2:98:65:95:f2:6e:27:5a:d3:cf:f6:e6:ab:36:fb:9b:d2:92:
         ee:a8:2e:d1:83:2f:cd:4a:d5:c7:64:6b:32:e3:a4:b4:e2:43:
         31:2d:c7:b5:92:6b:9d:68:22:2c:f8:f8:74:a0:0d:c5:7c:d1:
         f7:d7:c9:53:86:ea:81:e9:9e:81:ce:cb:64:0d:b7:32:3c:97:
         c9:93:67:a7:73:13:17:10:8a:51:d9:3a:f4:a7:2e:b5:cd:13:
         34:d2:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:03:27 2026 by rpki-client