Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File:                     qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier:          vufgzE+8KjuUnYb7yQDUUol3mLbXpUqXX8Dk89tPMeU=
Subject key identifier:   0F:AE:11:FD:04:AC:79:B1:D2:CE:D1:B5:33:23:CB:BB:28:D0:45:DA
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer:       /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial:       0BD4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number:          0BC3
Signing time:             Wed 30 Sep 2026 19:18:35 +0000
Manifest this update:     Wed 30 Sep 2026 19:18:34 +0000
Manifest next update:     Wed 07 Oct 2026 19:18:34 +0000
Files and hashes:         1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: kNa4jIAITG4nv2fwm04GcZ6eLsb7Y4nBN6f99emPu5s=)
                          2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
                          rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 19:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3028 (0xbd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
        Validity
            Not Before: Sep 30 19:18:34 2026 GMT
            Not After : Oct  7 19:18:34 2026 GMT
        Subject: CN=6abd608b-c061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:62:06:ab:45:ec:f9:4c:82:a2:0a:12:ee:
                    a1:e6:54:be:f6:98:15:2e:53:17:03:de:cb:78:8d:
                    68:13:13:54:e9:1a:de:2b:22:83:bf:52:31:43:e0:
                    99:d4:e4:7b:86:d6:21:ef:80:4b:5b:32:62:0e:08:
                    a0:a5:6d:bc:dc:1a:90:21:05:a1:02:fc:d8:40:4b:
                    94:a9:08:3c:79:f9:e1:c1:32:bf:7a:83:52:c5:ff:
                    7b:40:ea:25:9f:22:78:3c:f9:99:6a:fe:bc:8d:5f:
                    a8:10:84:a7:ab:6d:0a:83:21:68:af:25:8c:2b:e5:
                    dd:7c:f9:ed:d3:cd:61:27:81:a1:be:d5:65:83:14:
                    3d:3a:07:64:93:82:1f:4d:13:4b:c2:32:72:4c:2f:
                    2e:14:d8:a8:6d:53:96:4c:22:df:1d:47:ed:a9:8d:
                    6f:5a:89:f1:0a:36:bb:08:21:f7:83:05:ac:b9:37:
                    ca:85:7e:90:06:13:4a:d6:9c:cd:58:55:6c:f7:c6:
                    cf:33:1a:df:48:50:91:56:8a:7e:9e:81:8e:f8:86:
                    b8:ee:d8:5e:3c:44:12:a5:31:d7:8e:98:a8:fc:2b:
                    af:4f:1d:d1:97:f2:e6:0a:c7:ea:92:14:de:87:1b:
                    45:92:3d:f1:31:10:8f:e8:48:93:76:f0:30:3b:96:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AE:11:FD:04:AC:79:B1:D2:CE:D1:B5:33:23:CB:BB:28:D0:45:DA
            X509v3 Authority Key Identifier:
                keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:96:bc:8b:30:52:8d:bc:66:80:f7:1b:54:8d:bb:26:e7:2f:
         1f:11:3d:8b:7d:ab:66:99:83:a1:8d:68:b4:02:6d:4d:90:74:
         81:af:25:20:8c:9c:1f:f1:60:a4:6a:3b:a1:a2:f0:89:f3:2e:
         9f:67:38:a2:3a:26:77:5a:b1:cd:83:14:de:9c:0d:96:a1:f6:
         0f:a1:ad:56:ff:a1:89:a3:43:44:51:ba:f1:53:76:bc:c9:6a:
         90:a3:38:63:be:6a:88:aa:02:1f:32:50:66:aa:c5:ed:36:05:
         4a:f3:25:c1:43:6f:d1:47:37:b6:e7:4b:96:85:aa:ad:02:b3:
         a4:bc:06:d2:00:af:75:e1:49:f5:85:11:ff:64:3d:bd:ac:52:
         3b:5a:dc:3d:8f:4b:cf:33:20:3b:3d:d2:9b:45:ec:96:5c:7d:
         e7:e1:d1:ad:01:ae:03:59:e5:7e:ba:fc:76:ca:c7:03:64:c0:
         08:b1:e2:4a:e7:1c:e1:42:a3:33:c8:7b:eb:80:0f:0d:b2:5c:
         45:d4:05:45:e4:cd:a3:65:30:72:e9:4e:bf:37:f5:1c:5e:3b:
         0e:92:76:aa:b3:1b:ba:89:3f:e0:ca:e8:58:7e:d2:37:91:8a:
         ae:d1:60:3e:06:62:56:65:80:3e:d8:75:3c:f2:48:ef:ed:0c:
         9c:b1:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:26:50 2026 by rpki-client