Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File:                     -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier:          Nya4XZW2oGTzuEoe1Tv/MVADHOuP5XHZL9agW20VEVQ=
Subject key identifier:   98:75:B8:10:57:05:11:86:FE:A6:13:1F:DC:28:49:66:70:6D:7C:5C
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer:       /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial:       04C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number:          04BA
Signing time:             Tue 29 Sep 2026 00:01:00 +0000
Manifest this update:     Tue 29 Sep 2026 00:00:59 +0000
Manifest next update:     Tue 06 Oct 2026 00:00:59 +0000
Files and hashes:         1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: A7STCZCCRwQ0+8BfaZ815oB750iRnoa1/8e5/z1vB/I=)
                          2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
                          3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224 (0x4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
        Validity
            Not Before: Sep 29 00:00:59 2026 GMT
            Not After : Oct  6 00:00:59 2026 GMT
        Subject: CN=6abaffbb-bc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:56:c8:91:c0:9e:72:f2:f0:eb:14:fb:69:d8:
                    2a:ce:13:59:a1:90:bf:7f:50:d2:3f:a8:47:7e:50:
                    0e:30:53:54:23:dc:fa:20:22:d5:50:41:77:6d:49:
                    3d:37:84:6d:48:4d:69:b1:56:47:fe:45:3c:9f:8d:
                    7e:d2:64:83:c8:0b:54:5d:4e:ba:41:0e:e4:c1:c7:
                    15:98:72:8d:46:7f:02:3c:35:d0:86:29:39:fe:14:
                    bd:2b:b7:11:12:76:80:7f:76:52:dc:ca:8f:0f:f8:
                    a8:74:3c:f1:e2:90:79:82:9d:63:e8:e8:48:9f:1c:
                    e1:60:62:f8:92:2f:c0:e8:2b:6a:94:28:7f:3b:95:
                    7f:de:bd:3f:9c:79:56:2c:8f:05:33:61:49:47:eb:
                    6f:ca:20:e7:6c:a2:aa:f6:78:5f:cf:a7:33:76:0e:
                    3f:60:f8:e5:b1:15:42:1d:ec:fd:69:de:5b:01:c5:
                    40:2e:62:26:09:71:42:6f:3f:0e:47:22:82:0c:0e:
                    df:d3:f1:a8:d5:dc:36:3f:bc:f3:82:cb:8a:46:0e:
                    d0:26:0b:5b:76:ce:86:88:0f:1f:8e:d5:16:52:75:
                    06:06:35:fb:65:ef:54:a0:7b:33:b5:ef:b2:34:48:
                    94:ea:47:d5:00:d1:e0:a7:29:ff:82:e6:cd:fa:0e:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:75:B8:10:57:05:11:86:FE:A6:13:1F:DC:28:49:66:70:6D:7C:5C
            X509v3 Authority Key Identifier:
                keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:5f:bd:5a:e7:a9:00:af:82:0a:d6:76:67:b0:4e:b2:dd:
         4d:bb:58:af:85:15:af:37:f4:27:4f:ab:6a:a1:5f:9e:01:af:
         1f:0a:d2:d7:99:64:8c:e2:7b:77:a1:74:bf:61:08:df:ed:8a:
         47:2d:ad:55:09:00:0d:72:5f:fe:ab:75:30:b1:12:8e:ad:34:
         b2:75:f1:e3:9e:e0:27:b9:65:88:db:8e:ce:4b:0b:1b:12:e3:
         ea:9e:8d:39:c3:85:ac:1b:8c:f7:e2:e7:3a:fd:d2:c4:82:98:
         cd:20:3e:16:27:28:0d:fe:b1:38:64:2b:55:00:b1:fb:f9:c3:
         09:b8:2c:08:eb:38:b0:30:fe:40:52:1f:47:9f:dd:66:c5:c1:
         d9:c5:14:01:f7:f2:81:09:43:df:e1:a2:ed:bc:42:6d:3c:68:
         fc:fd:e6:a3:bb:27:15:19:16:2b:a1:69:fd:bc:83:a5:6b:ff:
         ed:f7:53:f1:60:0c:d2:ad:d2:bb:22:b1:c7:ed:c3:b0:f4:ee:
         ee:da:f2:b8:97:ff:6b:83:c6:af:9d:3d:76:20:ae:4a:f6:30:
         82:c7:72:5f:b9:72:b3:f9:64:97:f5:4d:31:c7:d4:d0:f5:b0:
         32:73:e9:cf:98:20:82:ae:e9:32:b9:2f:18:a7:d7:ee:1f:42:
         a0:d4:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 06:01:53 2026 by rpki-client