Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
File:                     qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json)
Hash identifier:          /qbwi7Ha/s/nGeQ0orVS5NdqT+20W5qfJoovwbei2j0=
Subject key identifier:   71:49:2B:2F:39:7F:ED:E9:90:B7:05:E6:D7:8B:B7:F0:6A:48:39:02
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Certificate issuer:       /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial:       08F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
Manifest number:          08A3
Signing time:             Sat 26 Sep 2026 21:11:04 +0000
Manifest this update:     Sat 26 Sep 2026 21:11:03 +0000
Manifest next update:     Sat 03 Oct 2026 21:11:03 +0000
Files and hashes:         1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: 0mjWw/CxvusRKYn1HjFPfTd+R5dfHoyfH9sRLFYaeM0=)
                          2: 54EE7326A80F11F18C0522946B11F970.roa (hash: 2bxAWvxSp4Q1OtM3ABhhN9Qmgeh5OF6qCpvnoPz0S34=)
                          3: 4CAE21E8A80F11F1B862E5936B11F970.roa (hash: MSYpWP4583BwiCkIv1gou3Zl4ibmuTy8PTOvgxGbRRM=)
                          4: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=)
                          5: 2FF53AF2A76811F1902C56043911F970.roa (hash: 0nCIpbx0cZSLgZnV2ZLspg0PdVVrZOLg3DNBm3/V48Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
                          rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2297 (0x8f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
        Validity
            Not Before: Sep 26 21:11:03 2026 GMT
            Not After : Oct  3 21:11:03 2026 GMT
        Subject: CN=6ab834e8-5288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:f3:c5:3f:67:00:06:37:24:1d:c1:92:6e:
                    13:88:22:c7:c8:b5:cf:30:02:43:8d:b6:c7:ef:78:
                    50:ba:f8:c0:aa:94:ee:0a:1b:cb:8d:af:e7:9b:99:
                    2b:71:76:33:e8:2b:1f:1d:9b:0e:93:77:fd:3a:da:
                    fe:db:23:b5:cb:3b:63:2e:e4:44:2f:a4:b7:5a:43:
                    a8:c6:79:a3:fa:c2:9c:fd:3e:20:43:93:fc:93:7f:
                    49:b3:f1:24:61:e3:31:ac:df:cb:42:99:d5:18:14:
                    5a:46:aa:ac:1d:c7:2a:95:4e:9c:fa:44:82:76:34:
                    2a:13:15:d2:08:d4:68:5c:fc:c1:5e:9b:a5:ef:93:
                    2f:02:e9:4f:46:55:be:48:bc:19:45:04:a6:66:aa:
                    da:c5:62:74:e5:2a:6f:a2:aa:51:83:41:64:80:e3:
                    ac:ac:90:fc:fb:c2:68:12:b9:4e:2f:72:ac:57:99:
                    ce:53:20:49:e4:2f:a5:1d:99:91:6d:28:92:cd:2a:
                    d5:c0:70:d0:8a:5a:e1:37:c3:23:7c:50:c5:d8:9d:
                    42:62:93:c3:0d:4e:75:99:d7:45:43:cc:ff:2c:18:
                    e9:98:5a:e1:74:47:2e:60:46:c5:00:f0:87:cb:ec:
                    11:c1:db:ca:13:16:cd:8a:e0:37:7c:a7:c4:a6:0f:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:49:2B:2F:39:7F:ED:E9:90:B7:05:E6:D7:8B:B7:F0:6A:48:39:02
            X509v3 Authority Key Identifier:
                keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:5e:13:2f:78:2c:d4:27:39:f7:f5:50:5a:c8:f6:03:ea:
         af:33:47:b3:b8:87:0b:4a:58:0c:fe:45:70:4b:b0:e9:92:61:
         2d:bd:af:f0:8c:43:d9:f3:71:e4:8a:9f:b9:d7:82:5e:5b:e2:
         e6:b8:4e:f3:d0:97:f9:46:72:3e:12:53:ee:00:21:db:95:3b:
         90:3e:f1:50:34:b0:96:bd:ed:49:25:c1:80:13:12:73:1d:5a:
         4e:0e:31:50:54:92:55:52:60:ce:e5:e3:c0:c5:5c:0a:b3:81:
         e5:24:1d:6f:33:48:3e:21:ba:cb:f3:a9:bb:f4:54:22:73:82:
         dc:7f:70:fc:83:83:f9:a4:42:11:da:67:e2:44:b0:a2:8f:8e:
         7c:ca:96:35:39:9a:d5:c7:88:37:b4:a2:df:ae:11:17:77:6e:
         2e:46:0f:a2:cc:b7:1c:54:cb:54:ee:17:ff:00:3f:ff:3b:cf:
         7f:40:30:a7:f0:86:a5:11:dd:82:f8:91:43:77:e3:09:34:d8:
         1a:9e:b8:73:54:b6:91:7a:f9:ad:b2:01:96:cd:f3:e3:bb:f2:
         1b:48:5d:da:14:b8:09:db:ea:6e:cb:8a:8a:20:9d:ce:39:0a:
         93:e6:c7:d9:e1:12:68:da:22:53:01:73:23:96:d1:d7:4b:08:
         3d:9c:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:15:57 2026 by rpki-client