Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File:                     QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier:          6WvUHIOzxnNdMxkmawOz+t2WMcghLlqBCgXYGNmsclM=
Subject key identifier:   AE:F8:BB:3B:C7:47:A0:9C:96:C6:4E:B3:33:2D:5A:93:69:FD:F1:A2
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer:       /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number:          01E0
Signing time:             Sun 27 Sep 2026 04:05:40 +0000
Manifest this update:     Sun 27 Sep 2026 04:05:39 +0000
Manifest next update:     Sun 04 Oct 2026 04:05:39 +0000
Files and hashes:         1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: dDaWNiDcLeIc2X9NFuRTQh3kA89BkWUn47sw4OahaXE=)
                          2: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: rKGQBFsWBoXRwkkEHmzJU4DziCIyRjQTWeYrnr/z7fc=)
                          3: 810265C29F8011F1A87DFCCB3B11F970.roa (hash: zEY+APVLW4gBdXNT2IbS0X3FvTuHb5f84oamsnoooSc=)
                          4: 47142068221311EFB680F113C4F9AE02.roa (hash: R9+W9Vd8vNJv6BZYi/psQ14Bv23TuvOa9qtjBXGBpmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
        Validity
            Not Before: Sep 27 04:05:39 2026 GMT
            Not After : Oct  4 04:05:39 2026 GMT
        Subject: CN=6ab89613-0393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:8e:3e:d2:32:72:08:f9:eb:8e:aa:8a:8d:
                    91:2e:97:47:5b:3d:0f:cc:30:8b:26:c2:ff:d1:51:
                    a9:37:07:d4:16:58:c2:9d:46:ec:de:4e:3c:60:5f:
                    93:ec:d3:9e:e8:f2:4b:8c:03:36:45:6f:ee:c5:d1:
                    27:63:c4:23:fc:f2:7a:57:26:92:cc:c7:2c:d6:d6:
                    3a:51:cb:ca:0c:1b:30:91:92:39:f1:a2:2a:71:e3:
                    0e:e1:4e:b1:7e:18:6b:65:31:bf:69:ff:08:1b:96:
                    f1:af:82:cd:38:13:32:b8:b5:93:28:48:78:44:8f:
                    86:c5:d0:3b:8c:f6:af:fc:ac:3c:1f:86:2a:b6:91:
                    7f:0a:c7:41:d6:b2:de:88:b3:2a:c5:d0:06:e7:d9:
                    a9:6d:2a:69:aa:1c:29:da:88:9a:19:7e:67:90:52:
                    13:f2:68:d7:f0:72:b5:0a:fa:4f:bd:6a:11:cb:18:
                    f7:35:1e:eb:c5:a6:a4:f9:1e:52:8f:56:a5:d0:5a:
                    5e:81:e0:e4:cf:da:4a:64:70:75:31:ca:ec:71:5c:
                    84:ab:73:8f:6a:0e:17:ce:8e:b1:42:39:6b:a2:24:
                    25:d8:8b:a9:89:81:0f:5c:f9:8a:25:b3:9e:51:ed:
                    9d:dd:40:5a:b1:91:e3:fb:a4:8b:9a:6a:10:4a:e5:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F8:BB:3B:C7:47:A0:9C:96:C6:4E:B3:33:2D:5A:93:69:FD:F1:A2
            X509v3 Authority Key Identifier:
                keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0a:5c:f3:62:40:db:bf:2b:30:14:38:db:d6:14:d3:8f:40:
         d9:9e:34:d6:bc:7c:e4:0e:87:9c:dd:a4:1d:ef:e6:00:a7:d1:
         ec:b9:dc:0b:1e:11:57:4f:25:8a:19:48:50:c4:4d:16:ba:74:
         30:64:5b:f2:a5:f9:a4:75:4e:39:19:28:53:6e:6d:8f:47:13:
         c2:40:ba:57:04:9c:1f:10:d8:2c:c4:81:82:c5:b1:83:c2:2b:
         48:f0:73:38:ca:b1:7f:0e:d5:17:7d:84:54:72:7e:aa:94:21:
         9d:ea:2f:08:a1:65:53:92:8e:52:3c:d1:36:93:ec:49:1c:55:
         27:51:a2:48:28:85:47:c2:54:7b:c5:b5:94:61:29:f1:5e:ad:
         52:84:cc:13:5a:40:fc:00:88:38:00:60:00:76:ba:0a:49:01:
         b1:a0:db:fa:8b:fd:ba:3b:9a:aa:d0:2e:e0:e0:8c:7c:91:e9:
         d6:c8:e5:e9:42:78:31:d7:61:c8:1b:8a:dc:57:9a:da:dd:4a:
         bd:71:f5:49:47:10:02:33:d6:ce:7c:da:2d:5a:3e:b8:61:94:
         a7:60:5c:7b:9c:f3:15:93:41:17:fe:3a:d3:12:db:ef:dd:79:
         6e:54:c3:07:c7:b9:9a:e0:79:36:6a:86:73:48:96:6b:80:b0:
         11:ff:a7:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2
NDAyRkVCNjkwHhcNMjYwOTI3MDQwNTM5WhcNMjYxMDA0MDQwNTM5WjAYMRYwFAYD
VQQDEw02YWI4OTYxMy0wMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLGOPtIycgj5646qio2RLpdHWz0PzDCLJsL/0VGpNwfUFljCnUbs3k48YF+T
7NOe6PJLjAM2RW/uxdEnY8Qj/PJ6VyaSzMcs1tY6UcvKDBswkZI58aIqceMO4U6x
fhhrZTG/af8IG5bxr4LNOBMyuLWTKEh4RI+GxdA7jPav/Kw8H4YqtpF/CsdB1rLe
iLMqxdAG59mpbSppqhwp2oiaGX5nkFIT8mjX8HK1CvpPvWoRyxj3NR7rxaak+R5S
j1al0FpegeDkz9pKZHB1McrscVyEq3OPag4Xzo6xQjlroiQl2IupiYEPXPmKJbOe
Ue2d3UBasZHj+6SLmmoQSuUwOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK74uzvH
R6CclsZOszMtWpNp/fGiMB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy
RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTdDQi80NTlCMEM2NEYyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tm
d3lqc1AwNlYxWWhrQXY2MmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXwpc82JA278rMBQ429YU049A2Z401rx85A6HnN2kHe/mAKfR7LncCx4RV08l
ihlIUMRNFrp0MGRb8qX5pHVOORkoU25tj0cTwkC6VwScHxDYLMSBgsWxg8IrSPBz
OMqxfw7VF32EVHJ+qpQhneovCKFlU5KOUjzRNpPsSRxVJ1GiSCiFR8JUe8W1lGEp
8V6tUoTME1pA/ACIOABgAHa6CkkBsaDb+ov9ujuaqtAu4OCMfJHp1sjl6UJ4Mddh
yBuK3Fea2t1KvXH1SUcQAjPWznzaLVo+uGGUp2Bce5zzFZNBF/460xLb7915blTD
B8e5muB5NmqGc0iWa4CwEf+njQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:03:07 2026 by rpki-client