Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
File:                     QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json)
Hash identifier:          wRN5Kbbeaw2jimgrOo3MuEcfze7c53T4fwlp3AcChDA=
Subject key identifier:   D4:5F:B2:CA:80:82:B8:C0:FA:FF:5E:66:98:97:E4:0F:B6:B7:A9:D0
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Certificate issuer:       /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial:       0D70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
Manifest number:          0D5B
Signing time:             Tue 22 Sep 2026 17:54:37 +0000
Manifest this update:     Tue 22 Sep 2026 17:54:36 +0000
Manifest next update:     Tue 29 Sep 2026 17:54:36 +0000
Files and hashes:         1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: l0edhk7HD2UNqBdXg2LnjCHNYiFMHW1+tAywoBih+c0=)
                          2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=)
                          3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=)
                          4: PtP-fur7WG3ysGUWu5IRviC8kGY.asa (hash: 7LQqZ7Ln2Du4KxmToCpdfq+Si7SKUbeaRwHLgR89/jU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
                          rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3440 (0xd70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
        Validity
            Not Before: Sep 22 17:54:36 2026 GMT
            Not After : Sep 29 17:54:36 2026 GMT
        Subject: CN=6ab2c0dd-8e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:36:36:a9:b4:d0:35:ec:08:9e:94:fa:37:
                    76:25:89:13:eb:f9:f2:0c:c5:6f:70:0f:ab:35:da:
                    b0:0b:0e:58:c5:d4:aa:58:9c:a4:1a:1d:ac:5d:1e:
                    df:18:3c:c1:54:22:20:47:ea:79:bb:00:c3:ea:f7:
                    ce:0e:97:6e:a9:ec:84:a7:16:be:17:db:b3:41:21:
                    62:63:d4:5c:91:89:f5:65:35:e6:4d:27:ca:1c:dc:
                    d2:ed:d0:1a:24:77:3e:20:b9:e8:ed:66:61:1b:25:
                    16:39:0c:c1:bd:f6:09:47:cf:3a:cd:ec:ef:02:b0:
                    c3:a6:5f:4b:96:72:2b:91:ff:60:67:94:b9:60:39:
                    c0:b3:77:3f:a5:fd:20:1e:2e:50:9a:ba:f1:91:f3:
                    9d:33:0d:af:16:b9:a6:87:4e:fb:47:84:d1:dc:b6:
                    b8:ee:3a:22:3d:fe:51:e6:d9:fa:25:63:cc:f6:80:
                    33:46:10:7f:96:a0:70:03:f8:8b:26:b6:51:36:8c:
                    e7:46:60:3a:92:05:48:a0:47:c8:a7:02:91:46:06:
                    68:f9:d4:9c:3b:45:94:23:a6:f7:5b:41:b7:a7:1b:
                    f2:11:3f:f2:b9:ee:11:d6:eb:fe:80:56:26:e4:5d:
                    9a:3b:53:54:ab:c6:42:ed:4a:41:93:bb:2f:5d:3d:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5F:B2:CA:80:82:B8:C0:FA:FF:5E:66:98:97:E4:0F:B6:B7:A9:D0
            X509v3 Authority Key Identifier:
                keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:98:d6:01:f0:4a:fc:99:25:e2:67:0f:35:41:dd:aa:3a:
         05:1c:fd:a0:0c:7a:cb:d2:9a:19:2f:6b:a0:1a:04:cb:37:70:
         7d:12:8f:40:95:bd:3c:86:41:66:35:72:f0:58:6a:a1:4f:b0:
         0b:bc:b1:97:64:dc:c3:eb:f6:0a:34:69:f5:16:1e:a5:53:00:
         24:a6:eb:68:f2:12:4e:0c:c3:89:c1:b9:d4:9b:fc:0b:c0:44:
         82:14:71:0b:cd:d2:22:9d:05:0b:20:4a:4d:ad:dd:ce:df:36:
         56:00:cd:87:0a:31:61:29:38:a4:41:f6:ce:e0:d8:65:20:18:
         57:d2:af:eb:99:b0:2b:6a:25:1c:6f:57:ec:f9:de:90:2a:c0:
         10:39:77:4d:8b:cf:b8:76:0f:66:66:57:69:f2:9c:2b:84:b7:
         e7:fd:32:e7:3b:5f:f7:42:3e:e4:dd:e6:e2:99:f7:41:d5:aa:
         4f:4d:73:a9:0b:78:8f:8d:d8:63:64:8c:fb:34:d6:fa:4c:d4:
         51:76:cd:7c:35:7f:b5:57:26:88:21:b3:d8:87:9c:56:b2:7f:
         f6:35:11:17:d5:df:c7:78:a5:32:d0:f2:1b:ce:42:95:16:c5:
         c1:ea:b4:d5:e8:26:bc:e6:a5:5c:ae:f5:a1:d7:a4:79:9d:1f:
         4f:49:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:16:27 2026 by rpki-client