Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
File:                     QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft (raw, json)
Hash identifier:          7FnYTOD2Z7qkjGRvuz1ib9IHgU8E1EsxaDCU3yhA43c=
Subject key identifier:   E8:68:CB:59:10:E7:2C:E6:CD:FE:3F:ED:FF:2C:15:FE:3D:6F:6E:EB
Authority key identifier: 41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
Certificate issuer:       /CN=A91A25DF/serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 06:18:56 +0000
Manifest this update:     Wed 23 Sep 2026 06:18:55 +0000
Manifest next update:     Wed 30 Sep 2026 06:18:55 +0000
Files and hashes:         1: QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl (hash: ZD17a/n95QTPkNF+NLVnFk4SO37CQwSsG+C+W/KldWI=)
                          2: C5B717905EDA11F0A5EAB579C4F9AE02.roa (hash: QMKJuZ7u5H3meG/M2oUJBI1bKAy18Acbebk2aAAz4oI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
                          rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A25DF, serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
        Validity
            Not Before: Sep 23 06:18:55 2026 GMT
            Not After : Sep 30 06:18:55 2026 GMT
        Subject: CN=6ab36f50-9def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:19:eb:ec:74:29:3e:37:5e:32:50:fd:51:
                    61:9b:f0:38:12:80:83:d2:fa:fe:95:ed:65:0e:95:
                    11:2a:2f:73:a7:27:12:f2:9c:0d:2e:04:c0:21:58:
                    f1:47:52:4f:0f:16:51:43:f4:00:96:23:6b:fb:47:
                    3b:ae:06:30:dd:aa:09:2a:ad:93:b9:93:04:ff:57:
                    11:e2:d8:3f:47:25:34:3c:76:33:fe:ee:33:3a:6a:
                    64:35:cf:f6:20:55:bd:c0:45:ec:17:1b:dc:b3:e1:
                    91:cc:33:e0:5c:a2:69:2b:73:2b:7c:b7:04:8c:c6:
                    59:41:3d:98:b5:a9:6c:bd:8c:59:2c:fd:9b:4b:b0:
                    b7:66:6c:08:9b:70:ee:5a:31:fc:07:06:1a:22:df:
                    f1:38:2b:01:cb:ee:02:bf:4d:88:92:81:80:81:f4:
                    f2:35:0d:f4:c2:69:5f:d1:d0:a1:cc:54:52:d4:d0:
                    36:de:e4:bc:39:72:3e:77:81:c4:a3:03:73:3e:4e:
                    09:9f:3b:55:36:fd:8e:5a:69:2e:45:94:21:4f:a8:
                    22:b5:83:ee:2f:a0:24:6a:be:f8:3a:f7:fa:c5:b6:
                    3b:e8:49:4a:f7:69:de:39:f7:0f:41:6b:21:12:dd:
                    c2:f9:b5:83:e0:6d:22:8a:7d:a7:64:eb:5c:72:6a:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:68:CB:59:10:E7:2C:E6:CD:FE:3F:ED:FF:2C:15:FE:3D:6F:6E:EB
            X509v3 Authority Key Identifier:
                keyid:41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:43:39:30:0a:c8:3c:74:72:4f:b6:ad:23:cf:e1:43:d5:3b:
         45:ec:80:a1:ae:e1:c1:f6:af:f8:ba:a8:17:5e:86:62:c6:80:
         8e:e8:10:aa:36:65:3b:f7:6d:02:3b:e1:f5:37:d7:31:58:8d:
         69:9a:4e:ea:20:3c:57:63:b1:44:ab:51:93:7e:23:a7:a9:19:
         b0:e6:62:45:40:19:33:82:ca:ba:af:66:9a:3e:13:d9:52:38:
         7c:b3:c9:f6:8f:a8:0d:63:92:4e:2b:e7:3e:87:b7:6e:f2:2f:
         b6:86:5a:63:1b:42:83:d5:65:1c:cc:bd:9e:38:af:ed:ad:7c:
         d3:20:1e:37:91:c3:a4:0f:34:92:e5:af:b1:39:a7:24:b2:27:
         3b:72:26:e1:24:46:78:94:70:18:e6:bc:b8:ff:cf:6c:11:ea:
         69:e0:b9:e5:16:db:55:d1:fc:fa:f3:85:25:6e:18:64:16:81:
         b9:bc:12:ad:e7:3c:34:ea:8c:b0:ee:6e:ad:00:3b:1f:be:70:
         cf:29:1f:51:a9:52:98:fe:7a:6d:34:25:bc:11:86:fe:8f:86:
         bd:4e:e5:9d:1e:09:50:d1:5d:5c:64:94:53:ca:6b:26:01:e1:
         51:7b:ca:75:df:10:92:23:d7:4e:9e:14:69:fa:75:48:f1:75:
         54:b0:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:02:48 2026 by rpki-client