Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
File:                     qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json)
Hash identifier:          Jp19uI3q78wSqgtMSLljIbZ0L78R39a5SQ4C9/g2JjY=
Subject key identifier:   9C:29:C4:F9:8C:61:E1:0B:08:FF:2B:F6:B6:20:51:15:2D:C6:19:24
Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
Certificate issuer:       /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
Manifest number:          017D
Signing time:             Wed 23 Sep 2026 04:33:00 +0000
Manifest this update:     Wed 23 Sep 2026 04:33:00 +0000
Manifest next update:     Wed 30 Sep 2026 04:33:00 +0000
Files and hashes:         1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: RE0Egsk2mYVnzkapjo5kD0iVvijVWp9t1a5U55WdrrE=)
                          2: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: FTfGtoGrUVwrnxaveaM8/TkkP8CeSjEWf8+UAR8ONdk=)
                          3: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: OtWdgE0NfWAtdp3sq2GPul7fJB1+qypIA/v5t4925Qw=)
                          4: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: u+AOQs7swlbtyTKzbGqH0JVVjQoXfbRTN0aGMPHqYwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl
                          rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
        Validity
            Not Before: Sep 23 04:33:00 2026 GMT
            Not After : Sep 30 04:33:00 2026 GMT
        Subject: CN=6ab3567c-3745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:90:52:27:50:8d:e4:ab:37:ec:4b:39:30:
                    96:41:f6:d0:4f:a0:a9:59:47:ff:9a:d7:64:71:17:
                    06:1a:0e:51:a9:43:9c:f4:2f:10:63:0f:ab:b9:ac:
                    37:d9:56:d8:70:23:d1:28:fd:0c:f7:bb:38:4c:e2:
                    c0:9c:85:9f:50:67:2a:e9:78:91:bc:45:cc:0a:27:
                    b2:f7:4b:00:b8:6a:f0:a4:83:2f:cf:aa:02:f9:1d:
                    be:90:7e:dd:a2:db:ae:11:39:1b:6a:cf:51:d8:c1:
                    40:7f:83:25:ad:6f:8b:98:7b:2c:d8:72:bb:a7:1d:
                    3a:88:d0:49:71:7d:87:09:24:46:ba:05:6f:a3:0d:
                    0a:24:4a:34:d0:de:71:eb:2f:32:ae:36:34:fa:79:
                    6b:21:02:a7:59:15:02:cf:fa:8c:31:38:4b:10:b9:
                    c1:a5:a6:5a:e5:ae:97:0f:5d:a5:51:1d:cb:75:f5:
                    31:d3:c8:0a:3c:b6:fc:f2:20:49:70:63:29:e1:72:
                    c2:c5:2c:a1:5d:45:b0:5e:df:14:69:a3:0a:e1:a8:
                    f0:b8:6e:1b:5d:89:5c:ab:2c:45:c3:ff:fa:b1:9b:
                    25:e2:a9:1e:46:26:1b:b5:b4:1a:2a:51:c0:83:5b:
                    f1:d5:be:5f:b8:f3:2b:88:f2:e6:31:00:9a:90:48:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:29:C4:F9:8C:61:E1:0B:08:FF:2B:F6:B6:20:51:15:2D:C6:19:24
            X509v3 Authority Key Identifier:
                keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:75:1e:30:0c:15:02:b7:03:da:17:12:a3:1c:e3:5e:6b:97:
         ae:a7:71:f7:b3:9d:6a:ae:1b:d3:aa:22:2c:0e:e4:06:5c:22:
         f1:7c:5c:4d:be:1b:cf:ca:13:e2:09:54:20:fb:9a:04:66:e7:
         37:f1:16:08:04:7d:2e:12:fb:a7:9e:20:e8:cc:66:c7:1e:ca:
         4d:4d:37:2c:a0:7a:02:51:ec:8b:2c:22:ce:db:08:72:c4:69:
         33:3d:0f:23:38:e9:ac:ac:4b:1a:2c:a0:e5:78:01:fb:04:4a:
         2f:99:ce:49:71:91:3e:40:aa:62:c8:3c:db:90:4c:6b:74:ed:
         4f:af:14:9a:70:a8:c6:d1:6c:d9:f9:ab:b4:ad:39:b0:81:20:
         45:98:4b:c8:e5:c8:b0:3a:de:05:31:98:0d:0e:53:6f:68:fd:
         8d:5e:b2:20:4e:d1:ba:d9:2e:dd:b3:2c:fc:59:ad:da:7f:2b:
         d3:b4:31:1b:c2:99:3f:8b:ea:18:d4:03:e6:38:e8:b8:09:93:
         c7:0d:fd:bb:a0:7c:9e:3a:8b:5e:37:75:eb:7b:d7:f4:3c:91:
         93:fc:a5:df:9d:21:7f:c4:88:f5:4e:fb:a0:89:ac:a7:3a:f4:
         13:f0:e3:26:a3:a5:25:9c:38:80:db:03:84:31:11:7d:e5:d1:
         10:1f:f2:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQzMjQxMTAvBgNVBAUTKEE4NTY4RjUyNzkzQ0MzNDg1Nzg1MEM0RjJFRDM4QUUw
QjE4OTcwRjgwHhcNMjYwOTIzMDQzMzAwWhcNMjYwOTMwMDQzMzAwWjAYMRYwFAYD
VQQDEw02YWIzNTY3Yy0zNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWuQUidQjeSrN+xLOTCWQfbQT6CpWUf/mtdkcRcGGg5RqUOc9C8QYw+ruaw3
2VbYcCPRKP0M97s4TOLAnIWfUGcq6XiRvEXMCiey90sAuGrwpIMvz6oC+R2+kH7d
otuuETkbas9R2MFAf4MlrW+LmHss2HK7px06iNBJcX2HCSRGugVvow0KJEo00N5x
6y8yrjY0+nlrIQKnWRUCz/qMMThLELnBpaZa5a6XD12lUR3LdfUx08gKPLb88iBJ
cGMp4XLCxSyhXUWwXt8UaaMK4ajwuG4bXYlcqyxFw//6sZsl4qkeRiYbtbQaKlHA
g1vx1b5fuPMriPLmMQCakEgcQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwpxPmM
YeELCP8r9rYgURUtxhkkMB8GA1UdIwQYMBaAFKhWj1J5PMNIV4UMTy7TiuCxiXD4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDMyNC9FQUE5Q0NENDdC
MUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcwaFhoUXhQTHRPSzRMR0pj
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi9xRmFQVW5rOHcw
aFhoUXhQTHRPSzRMR0pjUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANXUeMAwVArcD2hcSoxzjXmuXrqdx97Odaq4b06oiLA7kBlwi8XxcTb4bz8oT
4glUIPuaBGbnN/EWCAR9LhL7p54g6Mxmxx7KTU03LKB6AlHsiywiztsIcsRpMz0P
IzjprKxLGiyg5XgB+wRKL5nOSXGRPkCqYsg825BMa3TtT68UmnCoxtFs2fmrtK05
sIEgRZhLyOXIsDreBTGYDQ5Tb2j9jV6yIE7Rutku3bMs/Fmt2n8r07QxG8KZP4vq
GNQD5jjouAmTxw39u6B8njqLXjd163vX9DyRk/yl350hf8SI9U77oImspzr0E/Dj
JqOlJZw4gNsDhDERfeXREB/yiw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:42:40 2026 by rpki-client