Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
File:                     2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json)
Hash identifier:          9WLU1hfpQSCuU+FzEHxMt+1OxViH0eR7jPrGuRYNauw=
Subject key identifier:   57:E8:4F:75:BF:CF:04:8D:21:89:74:74:61:B1:E8:EB:D6:BB:59:9A
Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1
Certificate issuer:       /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
Manifest number:          0101
Signing time:             Fri 25 Sep 2026 06:14:23 +0000
Manifest this update:     Fri 25 Sep 2026 06:14:23 +0000
Manifest next update:     Fri 02 Oct 2026 06:14:23 +0000
Files and hashes:         1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: FBCIFv90sbqi6FlW7wkxHCKmXlRcEg0brzpwzRHxXrY=)
                          2: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: EOyR31nb50n9WnNlb3rcrt1TfJ23uFl543E7Owa7HQI=)
                          3: 7C0B5320D61411F0877B8D3FC4F9AE02.roa (hash: KpQfxiJyvIICVPsdtuLBwSdbonk+CBS6pnKnS4H/dIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1
        Validity
            Not Before: Sep 25 06:14:23 2026 GMT
            Not After : Oct  2 06:14:23 2026 GMT
        Subject: CN=6ab6113f-905a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:7b:41:28:d1:fa:2e:76:e1:6c:94:0c:22:
                    ed:44:f1:b9:45:9a:c1:71:31:b7:2a:b9:e9:0b:e1:
                    8b:a4:bb:0b:e0:db:3c:ed:bf:8a:49:1f:51:ae:c6:
                    ab:8b:b7:e3:02:da:ec:20:e3:c9:31:dd:f8:57:02:
                    25:6d:32:73:80:ef:cf:46:41:3b:25:9b:aa:6d:a5:
                    38:60:26:88:34:e9:cf:f0:d6:33:2f:49:c8:0f:fc:
                    0e:3f:20:93:8c:a4:2e:61:33:e5:28:24:d9:30:8f:
                    2d:d4:74:06:3b:aa:81:d2:03:40:84:f2:92:26:ed:
                    e6:ca:83:13:5e:93:90:e9:d8:56:88:97:11:be:33:
                    d4:1a:93:ea:39:55:a4:f8:21:07:44:13:96:ed:6b:
                    51:ab:57:77:e8:a2:21:9d:1a:80:dc:68:50:8b:99:
                    1c:d1:30:e2:f5:8f:52:6b:25:94:20:b3:0c:ad:2b:
                    79:75:d0:1f:93:10:d8:6d:41:bb:cc:f5:0d:34:83:
                    a5:57:44:02:d1:ad:5f:9a:4d:1c:c2:ea:93:13:ce:
                    35:cf:e8:27:39:9f:42:51:6d:87:cd:51:62:4d:7c:
                    df:d5:b5:a8:2b:e9:67:0d:21:55:a5:e5:78:fa:d4:
                    5c:b9:6f:54:c8:60:78:fe:b1:eb:ac:b9:d9:3a:46:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E8:4F:75:BF:CF:04:8D:21:89:74:74:61:B1:E8:EB:D6:BB:59:9A
            X509v3 Authority Key Identifier:
                keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:54:68:83:50:53:15:6f:35:f5:cd:0f:79:1a:82:fa:d1:c1:
         4a:28:b7:ed:f4:53:ff:5e:d9:b8:7f:12:77:17:f0:63:3d:01:
         b1:06:4c:8b:12:f4:b0:d9:90:26:62:b0:d0:30:96:1c:88:c0:
         71:d8:b5:24:f0:5b:52:2f:17:6e:1a:c1:fc:5f:fb:92:46:6e:
         0d:f0:b4:47:e5:d5:a9:8d:0b:8d:ad:e8:5f:1f:91:43:82:12:
         72:7d:1b:a6:e2:a6:96:d7:73:e1:0e:28:50:75:53:e6:78:98:
         70:5f:c5:78:73:c5:ce:67:fd:0f:1d:43:b0:fc:be:90:41:4b:
         69:cc:bf:c8:42:21:3f:89:35:fd:33:e0:74:3b:b4:af:49:41:
         46:05:43:d9:44:be:7a:a6:81:aa:51:88:8e:5c:6d:b4:7a:06:
         13:50:df:ac:3e:d3:f7:04:34:fc:56:0c:78:13:8f:13:15:7d:
         05:20:21:30:9c:b0:d2:01:f7:51:44:cc:33:6a:62:2e:47:c8:
         1e:56:ca:08:4a:8f:f1:16:a5:7e:19:f3:6e:58:ea:1a:b4:74:
         52:a3:22:92:68:09:d8:ac:a1:bb:5a:ef:ab:62:2b:e2:e2:bc:
         6d:2f:50:c4:a2:57:8b:5a:9b:7d:73:91:4e:3e:08:92:af:dc:
         b7:0b:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:50:27 2026 by rpki-client