Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
File:                     rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json)
Hash identifier:          vqt+7mblQMeRxrJiEda8SPmZvsl7hRsFDtOykulGMaI=
Subject key identifier:   EF:49:6D:4A:C1:03:EE:47:45:46:C8:4D:7D:FF:11:D6:A4:EF:D0:F0
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Certificate issuer:       /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial:       032E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
Manifest number:          031C
Signing time:             Wed 23 Sep 2026 00:41:38 +0000
Manifest this update:     Wed 23 Sep 2026 00:41:38 +0000
Manifest next update:     Wed 30 Sep 2026 00:41:38 +0000
Files and hashes:         1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: kl3R8U4iijdWebqF31b0jJka7FhHoi2125uVQD24E18=)
                          2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: x/yz1V4NDuS6R8Q19YYrXkxZ59RztmqTLn+CKfG3QlQ=)
                          3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: BJ0AXwywDrh3L6h1jOokV2ePgsQC41EcTflOVzlWuFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
                          rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
        Validity
            Not Before: Sep 23 00:41:38 2026 GMT
            Not After : Sep 30 00:41:38 2026 GMT
        Subject: CN=6ab32042-0a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:60:bb:28:27:52:b2:d4:53:62:49:62:31:
                    72:d4:f2:3c:2f:bf:7e:27:11:0a:71:c7:4c:2d:5d:
                    a0:28:ff:a2:85:16:ba:76:bb:85:a6:ac:fb:79:f5:
                    c7:a8:58:2e:8c:d7:b0:b7:39:6f:c9:4a:dc:21:24:
                    f0:f9:b6:aa:fb:0f:8d:6d:42:c1:b2:c6:5c:02:32:
                    2e:94:42:91:1d:36:50:0d:cb:99:86:e3:e1:af:d2:
                    e7:97:22:e3:94:84:fb:3f:f1:13:44:72:6e:78:d8:
                    72:a5:47:e4:6f:e8:7f:31:ea:09:ea:8c:07:b5:fa:
                    14:fa:5f:62:a6:e2:8a:1f:3e:f4:64:e7:02:92:3b:
                    c5:4e:6e:4a:87:f6:aa:07:63:dc:2f:45:81:4c:f8:
                    22:fc:55:2e:5b:75:ff:a1:f1:f9:66:9e:fd:f9:03:
                    84:4b:43:41:a8:2a:13:54:04:ec:f3:c5:0c:55:64:
                    c9:0d:2d:29:bc:ff:9e:23:c8:8b:ab:cd:46:cc:57:
                    c8:1e:ff:db:de:27:c3:63:d6:0b:13:bb:f1:9c:ea:
                    a7:e1:92:cb:e8:09:86:5a:4e:d7:8e:a0:0d:7c:78:
                    8c:63:4d:75:02:63:bc:6f:8a:07:fe:1f:ac:a2:26:
                    f5:ce:3b:5c:f7:bd:3a:d2:a2:da:fd:ca:b9:44:21:
                    78:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:49:6D:4A:C1:03:EE:47:45:46:C8:4D:7D:FF:11:D6:A4:EF:D0:F0
            X509v3 Authority Key Identifier:
                keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:92:74:7b:f2:3f:23:94:ef:8c:5e:c9:0a:c7:d5:22:dc:fa:
         d8:6f:2c:4f:7b:95:88:fd:5b:85:92:de:48:1b:a4:ac:46:8d:
         82:b9:3f:62:b5:14:35:f4:ab:49:d4:8c:31:72:cd:9d:b7:c0:
         ca:7f:c9:48:df:43:93:1e:c6:4a:f9:71:c7:43:55:4c:73:b3:
         3a:53:52:95:cc:a0:f2:f1:a4:bc:18:a9:2d:e3:9c:da:68:6c:
         0c:40:02:71:aa:5a:3c:da:fd:3a:db:1a:d8:3d:65:10:9a:89:
         ea:85:38:ab:b2:50:1c:d3:3c:1f:4f:98:c9:7e:eb:37:97:4e:
         a2:47:93:9c:6e:c7:27:ad:35:6d:fd:0b:3f:1a:e0:82:6d:d0:
         4d:35:88:74:ca:2e:5e:58:77:7f:8c:d1:3c:97:13:df:b3:7b:
         0c:88:e3:b1:bb:4c:a3:e6:01:82:73:bf:2a:99:a5:44:3d:c8:
         6f:95:e9:49:ca:c4:8e:32:cf:84:54:4f:7c:d5:c5:93:6c:75:
         66:e7:dc:34:3a:5b:9d:05:61:3b:67:b7:20:2e:56:73:a4:d0:
         1c:7a:ce:b0:a7:04:29:c3:7d:55:d8:9f:05:71:51:60:b2:72:
         6d:01:3a:93:60:36:c2:36:46:27:c2:b8:f9:d1:1d:3f:67:5b:
         6d:50:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:14:52 2026 by rpki-client