Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File:                     cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier:          DJish4dvppdDqORI87sBg9UlVHkrsnrGCu/CJcKdVo8=
Subject key identifier:   B3:3C:23:05:AB:06:16:0E:24:B0:2C:AF:5E:70:47:C2:66:4E:36:75
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer:       /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial:       0890
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number:          0886
Signing time:             Mon 28 Sep 2026 20:55:31 +0000
Manifest this update:     Mon 28 Sep 2026 20:55:30 +0000
Manifest next update:     Mon 05 Oct 2026 20:55:30 +0000
Files and hashes:         1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: ttiag2o4YJcnRZaEaeAArdQBEJC9WzQP1RcSO6cWmnI=)
                          2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
                          rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 20:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192 (0x890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
        Validity
            Not Before: Sep 28 20:55:30 2026 GMT
            Not After : Oct  5 20:55:30 2026 GMT
        Subject: CN=6abad442-f534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:1d:86:84:3b:ac:e2:b8:9c:c8:75:fd:dc:
                    61:7f:24:63:6a:50:30:ce:cf:3f:8e:62:85:27:e2:
                    aa:6e:79:05:3e:51:49:98:8b:00:93:a5:6f:29:89:
                    ab:d6:77:e9:db:c7:5e:32:5a:7f:3f:1a:3b:44:16:
                    80:64:89:66:4f:78:e3:a0:d3:cf:6d:11:7b:a9:ab:
                    30:34:68:fb:c1:61:75:9c:3c:93:2d:92:47:24:8e:
                    b3:dd:52:7a:5e:c8:c9:13:4b:9f:8a:3f:eb:b0:5a:
                    13:bc:25:ba:cc:54:4d:ea:35:18:7b:55:ae:12:6b:
                    95:67:0f:c0:f4:df:d4:49:7d:b4:f6:7b:34:70:58:
                    a5:05:f5:0f:8d:47:36:e5:ba:11:a1:65:b6:f5:9b:
                    6d:0a:63:05:64:00:be:c0:a5:42:d6:9c:c9:3d:4f:
                    f8:84:38:b0:69:a3:73:4f:dd:4b:ff:3c:bc:7a:52:
                    82:29:55:7a:d9:b6:69:6b:74:92:b6:1d:5d:e2:51:
                    71:06:a5:88:b4:df:43:ec:05:5d:8a:c9:af:bb:fd:
                    c2:e6:a0:2f:c8:70:57:c3:43:0a:df:28:62:33:42:
                    8d:a6:c4:6b:71:08:a2:70:7d:7f:de:1d:e6:2d:91:
                    3a:42:29:b8:bf:53:b5:63:a4:ba:5a:29:9e:cb:f3:
                    10:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3C:23:05:AB:06:16:0E:24:B0:2C:AF:5E:70:47:C2:66:4E:36:75
            X509v3 Authority Key Identifier:
                keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e7:8f:1b:fc:c6:c2:8d:11:38:1c:f3:e7:cb:28:6b:f6:8f:
         c0:3b:c9:d1:38:a0:dc:3c:03:95:ad:7c:bb:2a:10:b1:e2:cf:
         58:00:ab:ca:48:08:67:57:03:11:57:c3:6e:cb:af:d6:55:e8:
         5a:21:ed:78:1d:a7:e6:2d:2f:3f:67:a3:df:4e:3b:9d:f6:19:
         3e:11:dc:29:4e:7b:d1:ca:40:c4:46:9c:2a:10:1c:9f:91:b5:
         82:66:ed:b6:4c:93:d4:d0:01:ab:fe:eb:88:c9:cd:8d:35:ac:
         8d:30:02:57:7e:da:f0:6f:66:54:ce:b1:e7:ce:e8:f9:4a:db:
         61:ed:2e:6b:e8:91:62:bb:b1:74:1b:49:12:4a:ab:08:5f:2d:
         21:e2:de:db:0a:d1:56:92:d7:9b:4a:d5:34:91:d9:81:7b:a3:
         a3:dd:61:04:f4:39:65:32:b3:33:c4:d3:80:57:af:98:ea:21:
         c4:b1:3f:14:90:40:83:fd:ef:d8:fb:6d:17:0a:59:ff:41:0e:
         06:dd:be:3b:71:7d:06:b0:ee:79:a3:81:6e:b0:fd:81:9a:fd:
         83:69:1b:c5:65:0a:5d:16:3a:91:9e:ae:1d:8d:ea:66:0e:95:
         f2:62:ca:a2:a4:b0:41:3d:d9:28:51:c4:3c:b4:75:d4:6b:6b:
         1d:60:5f:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix
QUU1NDQyMzkwHhcNMjYwOTI4MjA1NTMwWhcNMjYxMDA1MjA1NTMwWjAYMRYwFAYD
VQQDEw02YWJhZDQ0Mi1mNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWEdhoQ7rOK4nMh1/dxhfyRjalAwzs8/jmKFJ+KqbnkFPlFJmIsAk6VvKYmr
1nfp28deMlp/Pxo7RBaAZIlmT3jjoNPPbRF7qaswNGj7wWF1nDyTLZJHJI6z3VJ6
XsjJE0ufij/rsFoTvCW6zFRN6jUYe1WuEmuVZw/A9N/USX209ns0cFilBfUPjUc2
5boRoWW29ZttCmMFZAC+wKVC1pzJPU/4hDiwaaNzT91L/zy8elKCKVV62bZpa3SS
th1d4lFxBqWItN9D7AVdismvu/3C5qAvyHBXw0MK3yhiM0KNpsRrcQiicH1/3h3m
LZE6Qim4v1O1Y6S6Wimey/MQEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLM8IwWr
BhYOJLAsr15wR8JmTjZ1MB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF
QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM
Y3pidV8zcDZXTXNhNVVRamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArOePG/zGwo0ROBzz58soa/aPwDvJ0Tig3DwDla18uyoQseLPWACrykgIZ1cD
EVfDbsuv1lXoWiHteB2n5i0vP2ej3047nfYZPhHcKU570cpAxEacKhAcn5G1gmbt
tkyT1NABq/7riMnNjTWsjTACV37a8G9mVM6x587o+UrbYe0ua+iRYruxdBtJEkqr
CF8tIeLe2wrRVpLXm0rVNJHZgXujo91hBPQ5ZTKzM8TTgFevmOohxLE/FJBAg/3v
2PttFwpZ/0EOBt2+O3F9BrDueaOBbrD9gZr9g2kbxWUKXRY6kZ6uHY3qZg6V8mLK
oqSwQT3ZKFHEPLR11GtrHWBfNg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 04:00:03 2026 by rpki-client