Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
File:                     Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json)
Hash identifier:          7WzDZwecYn3V3y2ukeIYcsJTV6x+DwIK5OaG9VPqDWw=
Subject key identifier:   25:D5:3F:1E:FB:F8:CE:8F:D5:49:8B:4E:E6:22:1D:81:FF:8A:4A:65
Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C
Certificate issuer:       /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
Manifest number:          CF
Signing time:             Sat 03 Oct 2026 07:25:22 +0000
Manifest this update:     Sat 03 Oct 2026 07:25:22 +0000
Manifest next update:     Sat 10 Oct 2026 07:25:22 +0000
Files and hashes:         1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: AtNs7ZfwqrrlCZS2ypgKpoTCFWLDlq8s4ikKaQxThkY=)
                          2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: cPnYWMNQVMlUCzK+IYFg8KOYZlfdR0D1X+BkfCqpA3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl
                          rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
        Validity
            Not Before: Oct  3 07:25:22 2026 GMT
            Not After : Oct 10 07:25:22 2026 GMT
        Subject: CN=6ac0ade2-1a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:31:f6:5e:e2:9c:2a:c5:97:5a:81:53:73:
                    d6:2a:6b:c4:53:35:07:0e:ad:14:dd:7c:91:39:de:
                    20:61:84:1a:fe:2e:d5:c3:5b:1a:91:25:35:cf:50:
                    63:f5:f2:21:58:82:fe:d8:f4:a1:c0:bc:88:ca:2d:
                    a4:7d:0b:69:1c:25:db:0d:bf:48:0c:42:89:37:8c:
                    d9:ac:ed:1e:07:72:ae:32:03:04:68:d6:f1:72:1e:
                    ab:f6:c3:bd:3d:f4:81:ed:72:b2:c4:84:65:bc:a3:
                    63:6b:03:1d:cd:2f:76:71:c2:18:29:4b:85:2e:ff:
                    c5:30:eb:71:d6:d6:cd:df:f7:de:9e:1f:5b:29:24:
                    ad:17:ef:59:42:8d:f3:7b:94:3f:e6:61:ef:da:6a:
                    4e:27:34:4c:6d:ad:07:87:b0:16:36:17:58:cf:04:
                    85:20:3e:21:c5:a2:7c:6f:5f:e9:fd:5f:b1:23:c2:
                    ed:1c:d2:67:e6:22:34:38:e2:47:30:0b:96:d9:27:
                    fc:cb:b2:57:34:74:8d:5c:5a:74:da:56:da:16:cf:
                    a3:fb:c0:ec:b2:ff:96:a9:c3:5e:9d:f0:b8:2b:ad:
                    02:7f:03:8f:55:2d:b7:5a:b6:43:98:aa:9d:5c:e7:
                    26:70:83:90:e7:15:34:e6:fa:34:e3:b5:da:9b:77:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D5:3F:1E:FB:F8:CE:8F:D5:49:8B:4E:E6:22:1D:81:FF:8A:4A:65
            X509v3 Authority Key Identifier:
                keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:71:48:1c:5a:45:19:75:67:ae:70:e9:4c:d4:97:00:17:c4:
         39:63:ef:6b:6a:b2:29:9f:bf:c4:6e:48:bc:44:4e:58:99:1b:
         49:d5:91:71:a8:10:5f:a3:fb:72:22:81:d3:04:9f:94:4d:74:
         34:96:b5:e9:2b:39:51:2b:26:c1:03:1c:b6:49:31:67:29:e8:
         ae:45:18:8a:51:9f:9d:34:5f:1d:ea:55:6f:9a:83:37:98:03:
         48:ce:17:f0:eb:7e:03:d1:9c:b2:17:e6:cb:47:ad:0f:e7:db:
         05:e2:86:82:2d:0b:44:fc:89:2f:43:35:c1:48:c4:e1:a0:87:
         f4:9d:fe:c0:ee:30:ad:ec:8d:5b:57:de:e9:fd:3d:e9:32:4c:
         28:d0:38:30:da:fe:7f:ab:a4:b4:37:9b:1b:ba:3e:3b:79:43:
         59:46:23:a2:37:73:d9:92:ed:35:70:d3:55:4c:68:de:06:7f:
         a0:20:7c:34:c6:80:9d:cc:ce:8f:26:3a:8f:76:11:a9:b7:01:
         11:87:da:f4:3d:19:ab:d1:9e:d5:d2:bc:53:c8:e8:83:78:74:
         74:e1:e6:df:3f:d1:a7:26:57:3b:fd:18:13:93:a8:a4:34:be:
         6e:34:d5:e0:59:6b:0f:e6:7a:8a:6f:ce:71:e0:db:a5:96:7d:
         72:86:e8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:39:53 2026 by rpki-client