Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
File:                     QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft (raw, json)
Hash identifier:          NeWLthDAL9wXA9hcB/o6oZ9znDj0YXo3oThouPVmPJU=
Subject key identifier:   17:6B:F6:E8:07:CA:E3:92:5B:AE:29:7C:E6:86:52:4C:0D:45:04:3E
Authority key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
Certificate issuer:       /CN=A91BB492/serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
Manifest number:          0119
Signing time:             Mon 21 Sep 2026 05:55:21 +0000
Manifest this update:     Mon 21 Sep 2026 05:55:21 +0000
Manifest next update:     Mon 28 Sep 2026 05:55:21 +0000
Files and hashes:         1: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl (hash: UIS88BOFoSpECXWb6QT2WrnAG5gRZS2+BH3jhwBr7c4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
                          rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB492, serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
        Validity
            Not Before: Sep 21 05:55:21 2026 GMT
            Not After : Sep 28 05:55:21 2026 GMT
        Subject: CN=6ab0c6c9-f3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1c:f8:27:c8:54:44:61:bb:80:b8:ad:f2:e4:
                    b8:4e:e9:9c:74:16:0f:89:28:40:96:3b:d5:70:8c:
                    18:29:84:30:a0:a5:d5:02:22:3e:21:f6:d4:e7:6f:
                    d3:a3:41:dc:1e:78:00:50:3d:7c:0f:0f:4e:7e:8c:
                    d6:ea:52:3b:c4:21:ea:03:cf:7d:02:be:5c:54:e3:
                    a8:9c:6a:25:ec:a3:ff:f0:fd:db:c6:6e:c8:0a:f3:
                    54:ee:f4:16:a0:5b:d2:7d:40:1b:a0:c5:e4:bc:84:
                    25:1a:fb:80:10:ef:92:98:5a:8f:31:ea:9e:d0:52:
                    6d:7f:dd:35:a8:a7:25:da:ab:3d:f7:55:b5:a6:3a:
                    09:02:fb:5c:06:d1:9e:81:bc:d8:07:1a:87:18:e2:
                    52:0c:bd:b3:9f:36:b8:cd:5a:ef:d5:f5:39:ab:c3:
                    ca:98:05:2e:a2:d1:76:52:ad:cd:6d:0b:16:b6:0e:
                    02:64:87:85:ea:0f:03:f0:05:de:97:34:36:05:9e:
                    9b:ff:3c:fa:fa:a2:a7:4c:db:6b:fa:2a:0b:56:43:
                    65:37:9f:73:18:3a:9a:2a:e1:5d:25:6a:41:a0:9c:
                    a7:46:a8:02:d7:67:60:40:da:8e:04:5a:c0:41:15:
                    4c:68:79:9f:fe:04:23:3c:82:c1:8f:04:c7:05:3b:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6B:F6:E8:07:CA:E3:92:5B:AE:29:7C:E6:86:52:4C:0D:45:04:3E
            X509v3 Authority Key Identifier:
                keyid:40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f5:4b:d3:e5:fa:69:cb:2f:9e:2d:99:5f:26:b8:13:d1:50:
         cf:06:21:0d:94:d8:29:57:18:65:6e:85:a3:a4:45:a1:00:d1:
         f7:16:c8:c8:39:08:1b:13:ed:d7:f2:a2:94:fc:30:a7:19:3b:
         98:e4:af:45:5c:5d:a9:c6:9a:1c:df:bd:ce:97:c8:cb:4f:6d:
         11:7d:a1:89:62:40:08:05:ee:7e:dd:ca:ae:26:ff:15:5c:fb:
         c3:a4:ab:03:89:84:89:a0:1c:ad:dc:02:63:5e:ef:6d:d1:ef:
         f7:7b:76:15:35:b0:14:96:88:03:69:18:6d:e1:a6:63:7d:21:
         35:10:81:a9:cb:7b:a4:8b:fc:37:93:26:fa:e2:9c:11:a4:a5:
         2e:04:ad:c5:1a:35:23:a8:8b:b5:e5:e9:41:9e:d0:66:42:7b:
         50:5a:bd:43:42:4f:00:7d:78:0d:43:b8:43:24:ed:66:41:39:
         17:39:2d:31:ae:d3:42:d7:9c:f6:ce:e0:41:27:73:c2:ee:03:
         aa:ea:66:a0:a6:a0:48:47:ef:f8:c8:0e:c9:78:78:88:71:66:
         ca:34:0a:d6:48:a8:c0:af:b7:a6:b4:2d:b7:b1:7d:c8:d7:29:
         63:c4:e7:34:07:7f:a5:2b:20:0a:05:50:69:23:e5:6f:41:14:
         63:29:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:21 2026 by rpki-client