Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
File:                     qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json)
Hash identifier:          IABQEeTEEf7+D69a22iNGylgDbJZE5yGsMKwtaKmWRw=
Subject key identifier:   26:02:34:ED:9B:6C:D2:2C:A2:1F:3C:AC:38:D6:24:6D:69:78:E5:97
Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
Certificate issuer:       /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
Manifest number:          0150
Signing time:             Wed 23 Sep 2026 05:08:03 +0000
Manifest this update:     Wed 23 Sep 2026 05:08:03 +0000
Manifest next update:     Wed 30 Sep 2026 05:08:03 +0000
Files and hashes:         1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: evLFRI4j9x1sSW46e0YlzbqJYN8s4spmBbRXlPhXkZg=)
                          2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: aCExDuGa6YujX3JL0arcNyOR8mwam9J29+GY2ZdNl4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
                          rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
        Validity
            Not Before: Sep 23 05:08:03 2026 GMT
            Not After : Sep 30 05:08:03 2026 GMT
        Subject: CN=6ab35eb3-dbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3f:33:e8:a3:a1:8f:86:19:3b:9b:94:4f:e3:
                    9c:8d:02:3f:0f:b5:42:52:cf:cc:a7:4c:d0:f0:e2:
                    14:62:fe:96:04:a0:b5:34:73:56:b1:b1:93:70:5b:
                    b8:06:3b:38:7d:42:24:79:57:55:6b:6d:a8:88:bd:
                    61:58:4b:8c:16:e4:12:d8:1f:17:d9:6f:14:ef:99:
                    55:75:2e:8f:73:85:46:96:12:99:31:ad:d0:c1:b6:
                    c0:b1:aa:97:b3:5f:e8:17:3a:cd:92:ef:a0:61:5b:
                    47:c9:52:58:86:10:c0:1f:32:fa:9e:8e:7b:98:cf:
                    1d:a8:89:6d:c3:eb:0d:52:b1:1b:8a:e6:b9:f7:53:
                    62:68:d9:53:44:8e:3f:06:9b:cb:c2:b0:a1:33:08:
                    9d:ab:64:8b:10:79:eb:63:4d:eb:5f:5a:5c:ea:24:
                    cc:c2:9f:1c:04:8b:13:ea:44:bc:88:ca:8e:0b:65:
                    84:41:45:4b:89:98:de:d0:77:64:73:3f:fb:ac:0f:
                    b2:b0:bd:cd:fd:c1:e7:d2:86:a3:e3:9a:20:6a:cc:
                    09:4a:fb:a0:5b:07:b9:fa:e5:6c:7f:24:5f:e7:9a:
                    a9:b7:50:c8:6b:83:aa:34:d2:b7:dd:fe:e7:f7:b1:
                    09:c9:ce:45:f1:70:bb:31:10:35:e2:4d:79:3d:b9:
                    ef:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:02:34:ED:9B:6C:D2:2C:A2:1F:3C:AC:38:D6:24:6D:69:78:E5:97
            X509v3 Authority Key Identifier:
                keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:1c:8f:57:09:56:90:c3:01:6d:a3:f5:8a:c1:cb:7c:57:
         79:b1:86:a2:45:31:55:ed:4d:74:3b:27:0c:35:1c:5c:77:4f:
         f2:e1:a2:49:1c:23:62:0e:0b:fa:f3:c1:b9:d7:ea:e6:e0:34:
         71:f6:37:9b:ba:32:b4:42:38:7c:2b:d2:47:c5:db:65:f2:15:
         f3:06:a5:d9:e5:05:ea:9f:7b:36:9f:a2:b4:88:d3:0a:46:cf:
         20:4f:9e:78:7d:97:40:da:49:e3:63:7b:40:07:cb:df:83:b4:
         eb:d8:b2:f2:93:35:1a:58:75:dd:6c:73:99:80:96:e6:ee:5b:
         3b:37:7e:b7:70:92:60:1c:03:df:6c:c8:2a:50:41:a6:d2:3f:
         8d:21:3a:8e:f6:46:14:51:e2:7e:2c:81:fe:11:60:b1:13:c5:
         38:7d:17:a3:83:59:0e:c1:c1:f0:79:e2:15:b8:b8:04:7a:12:
         b7:54:bb:f6:75:ee:3d:fc:03:2c:da:bc:36:b5:bc:c1:a8:ba:
         ee:da:b9:dd:9f:71:65:13:f7:f7:cb:68:80:4f:52:59:f2:ca:
         7f:69:22:1f:51:3c:90:46:05:92:ad:ff:85:10:4c:45:84:42:
         1c:bf:71:ab:5a:68:a5:f1:ac:dc:b9:71:0e:21:19:e3:df:b4:
         66:65:a8:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M5MDkxMTAvBgNVBAUTKEFBMEI3ODJEQjk5MzJFMjJGRERFRjBDM0Y3NTU5NkVF
MDk0NUUxMkQwHhcNMjYwOTIzMDUwODAzWhcNMjYwOTMwMDUwODAzWjAYMRYwFAYD
VQQDEw02YWIzNWViMy1kYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1D8z6KOhj4YZO5uUT+OcjQI/D7VCUs/Mp0zQ8OIUYv6WBKC1NHNWsbGTcFu4
Bjs4fUIkeVdVa22oiL1hWEuMFuQS2B8X2W8U75lVdS6Pc4VGlhKZMa3QwbbAsaqX
s1/oFzrNku+gYVtHyVJYhhDAHzL6no57mM8dqIltw+sNUrEbiua591NiaNlTRI4/
BpvLwrChMwidq2SLEHnrY03rX1pc6iTMwp8cBIsT6kS8iMqOC2WEQUVLiZje0Hdk
cz/7rA+ysL3N/cHn0oaj45ogaswJSvugWwe5+uVsfyRf55qpt1DIa4OqNNK33f7n
97EJyc5F8XC7MRA14k15PbnvhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYCNO2b
bNIsoh88rDjWJG1peOWXMB8GA1UdIwQYMBaAFKoLeC25ky4i/d7ww/dVlu4JReEt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS8wNzc5N0ZFNEMw
REMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExpTDkzdkREOTFXVzdnbEY0
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FndDRMYm1UTGlMOTN2REQ5MVdXN2dsRjRTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzkwOS8wNzc5N0ZFNEMwREMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExp
TDkzdkREOTFXVzdnbEY0UzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhNwcj1cJVpDDAW2j9YrBy3xXebGGokUxVe1NdDsnDDUcXHdP8uGiSRwjYg4L
+vPBudfq5uA0cfY3m7oytEI4fCvSR8XbZfIV8wal2eUF6p97Np+itIjTCkbPIE+e
eH2XQNpJ42N7QAfL34O069iy8pM1Glh13WxzmYCW5u5bOzd+t3CSYBwD32zIKlBB
ptI/jSE6jvZGFFHifiyB/hFgsRPFOH0Xo4NZDsHB8HniFbi4BHoSt1S79nXuPfwD
LNq8NrW8wai67tq53Z9xZRP398togE9SWfLKf2kiH1E8kEYFkq3/hRBMRYRCHL9x
q1popfGs3LlxDiEZ49+0ZmWoGA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:26:26 2026 by rpki-client