Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File:                     QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier:          V/tcminQyS61CrMcbcCHcOn5RJFQVZcfF9jwP7sxyCA=
Subject key identifier:   B9:A5:77:B9:4D:21:D7:BB:BB:E6:01:99:24:CB:9C:72:68:FD:04:8E
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer:       /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial:       091E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number:          090C
Signing time:             Fri 02 Oct 2026 20:32:34 +0000
Manifest this update:     Fri 02 Oct 2026 20:32:34 +0000
Manifest next update:     Fri 09 Oct 2026 20:32:34 +0000
Files and hashes:         1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: +qxcE80iewrNUCpMVcdLXK9d8IXeUm0OC96U6fBeO0c=)
                          2: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: o0LmnO6BRRhTDWaoNS/Q5OWs6Jcg83zmkTbdMtTDeh8=)
                          3: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: 2jwBYmuNP2NNLno7BqXwfK/it4OfmPsU7sV8gqZB+Kk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2334 (0x91e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
        Validity
            Not Before: Oct  2 20:32:34 2026 GMT
            Not After : Oct  9 20:32:34 2026 GMT
        Subject: CN=6ac014e2-4941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:a4:3e:c8:76:52:4c:1b:32:cd:55:95:de:
                    95:1d:b9:0f:ea:04:7f:70:db:59:9c:95:cf:30:ed:
                    f2:89:33:7f:5b:cd:1d:c1:54:76:5b:fd:c3:dd:80:
                    e7:c9:57:63:8f:cd:9d:9d:1f:76:7c:51:aa:02:35:
                    2b:ad:04:57:08:58:ef:13:79:00:0e:27:85:5b:ff:
                    98:d6:8c:a1:68:36:00:1b:d2:9d:50:d3:fe:66:00:
                    f6:dd:9c:c7:72:9f:69:e3:dc:15:0f:51:b8:62:6f:
                    a8:2b:a7:46:3b:c0:ba:46:0e:10:79:6a:9f:55:07:
                    46:39:f2:77:45:ef:c8:03:b2:97:f8:c5:f3:00:f3:
                    0d:e7:99:8c:d8:9b:15:a6:10:48:81:17:12:37:e1:
                    89:4b:76:fa:4a:ac:b0:57:d7:82:85:be:b4:c6:40:
                    fe:1a:92:fe:2f:3c:02:96:0f:ae:41:47:e1:ae:f0:
                    a2:64:31:10:f8:0a:01:c6:0e:4b:94:a6:d2:95:9e:
                    c0:37:78:d9:e8:f9:9b:d1:e4:ab:b5:4f:b0:4d:29:
                    83:c6:e3:70:ef:08:b4:c8:22:07:c5:75:67:93:1a:
                    f0:0a:da:d7:1d:3c:d7:cd:54:12:01:b1:e3:8a:2a:
                    74:79:f7:0d:9a:49:0c:5a:b2:74:e0:17:37:52:6a:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A5:77:B9:4D:21:D7:BB:BB:E6:01:99:24:CB:9C:72:68:FD:04:8E
            X509v3 Authority Key Identifier:
                keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:81:bd:c1:cf:49:34:05:df:3c:0d:55:2a:dc:fa:eb:d7:
         13:12:dc:8e:32:27:bb:76:c1:64:2e:83:68:da:ae:ca:92:2a:
         44:65:0a:69:07:5b:94:7c:a6:ef:8b:8f:96:bb:b7:5c:aa:40:
         2b:20:53:90:59:41:50:c9:90:e7:50:a2:e7:1d:98:a4:79:44:
         92:b7:6d:c2:d0:2b:7a:33:09:47:21:60:4b:ea:d9:26:c0:77:
         dc:08:bc:51:d7:a7:1d:ba:c2:d6:44:dc:96:d8:a4:8b:9e:19:
         1d:a9:1f:21:d2:b9:28:92:17:dc:2a:6d:25:c0:cc:86:d0:ee:
         a3:1c:d1:88:40:90:92:68:42:99:13:44:3c:aa:1c:f9:28:0e:
         38:20:f0:51:f8:94:81:06:cb:33:6c:fe:4d:f4:99:dc:0a:58:
         e4:50:be:d5:e4:46:38:ae:86:94:fb:8b:12:4b:63:58:44:0e:
         b7:15:03:8d:2f:6d:55:c6:76:0b:39:41:33:c4:76:45:ad:72:
         32:cd:5f:82:4c:c4:d4:86:b3:e6:35:d6:64:9a:7e:ae:3b:04:
         18:2d:29:2d:de:06:08:44:4c:4f:44:d9:16:65:0d:18:b7:69:
         4e:7e:75:8f:41:71:8d:b2:78:9b:79:8c:7e:cb:71:69:6d:9b:
         99:e2:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:23:04 2026 by rpki-client