Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File:                     Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier:          6MQMJLk5zzSUeiS4XpKziV22TtPwLxjsraqq4+Z0w9c=
Subject key identifier:   FE:86:47:67:51:26:A6:7E:3E:0D:07:CD:C1:C5:60:5F:E5:A7:61:15
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       0706
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number:          06DF
Signing time:             Sun 04 Oct 2026 22:22:00 +0000
Manifest this update:     Sun 04 Oct 2026 22:22:00 +0000
Manifest next update:     Sun 11 Oct 2026 22:22:00 +0000
Files and hashes:         1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: bHHiXqBLFm5XVWi2CqiJr7OtXaBKX6WuI9LemTaymzM=)
                          2: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: Z+LqzSewpL/vsWqtL6Yo0e38jLGpTvdUpJpiQgt4Cd8=)
                          3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: EFEc1hVxBqjFK9K+ebpd9IGqjsMNpFNe4DREx1aJacU=)
                          4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: rievK77P9KymGMboQx/oO1KggXD+jRQIf3Q9O4SujfY=)
                          5: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: n0xr/j2GP/MNMRFa7lf1tZ5ywaM4ttYHv9arSET9eaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 22:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798 (0x706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: Oct  4 22:22:00 2026 GMT
            Not After : Oct 11 22:22:00 2026 GMT
        Subject: CN=6ac2d188-6786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:76:5a:08:88:96:66:b8:42:18:30:d3:1b:
                    a5:bb:41:cd:a5:ad:4a:f7:13:a3:99:65:e2:81:27:
                    6a:0d:7d:9a:52:a2:b6:43:ee:5e:d7:d6:31:51:cb:
                    59:6b:83:2a:b4:2b:ba:8c:6f:15:5c:1f:b0:d0:0f:
                    39:3e:a0:79:c3:87:36:61:13:c6:0b:ae:c6:8a:49:
                    30:9f:dc:6f:ee:f2:2b:5f:4b:a9:9f:3d:5c:36:59:
                    cc:a1:e4:1a:a3:bc:b8:38:f1:bd:31:f9:54:6a:9e:
                    3c:f1:ca:ca:80:38:61:4d:5c:72:42:ac:ae:8c:13:
                    fc:0b:d3:6c:70:bf:02:e4:02:1d:ae:4c:e9:25:f0:
                    0d:7f:76:0d:4f:75:46:cf:9b:7d:ce:5f:52:5b:57:
                    17:45:38:4d:fc:51:c3:3c:ee:f0:55:0c:9f:89:ce:
                    33:fd:db:15:e7:32:9f:7f:98:a1:a7:e0:02:3d:e8:
                    54:f2:0d:6c:a1:a9:e6:82:a9:67:ff:49:7f:8c:69:
                    c1:98:74:21:ec:54:8e:d7:6c:4d:57:c0:47:4f:63:
                    b6:3c:c9:57:45:f9:5e:ff:45:f2:f8:8b:5c:2d:d5:
                    4f:8c:db:15:b4:81:a1:96:49:b1:0c:f8:0c:f4:15:
                    8a:71:00:af:cd:b1:fb:1c:31:f7:b7:bc:23:59:84:
                    24:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:86:47:67:51:26:A6:7E:3E:0D:07:CD:C1:C5:60:5F:E5:A7:61:15
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1e:f7:75:b9:37:59:6d:86:57:a8:85:51:85:8c:86:a3:e8:
         45:3e:5c:f2:79:a6:b7:ed:c3:92:0e:11:06:e7:ca:c9:78:34:
         93:23:0e:98:cb:6f:b2:9f:83:45:82:14:c9:fc:f2:b8:12:bc:
         35:11:4b:69:94:fb:5d:86:c6:af:72:5b:d4:4d:2c:46:ab:4f:
         c4:74:9f:b0:30:82:1f:ab:2f:a5:7c:49:7b:37:9c:d6:cd:2b:
         96:9b:90:33:cd:6e:87:a4:0b:4d:a1:3c:11:ff:bd:45:fc:7b:
         04:78:b1:e6:14:ff:72:bf:02:1b:06:95:34:2c:a1:ce:de:b2:
         23:8d:b7:24:6d:7d:70:78:24:ca:5f:bb:d4:7e:57:9f:12:ab:
         b9:bf:76:5b:b8:12:b8:e1:67:a2:a0:73:17:a2:75:37:ea:6f:
         26:99:db:f7:ec:dd:a6:96:5f:33:93:c7:75:bc:09:11:2a:5f:
         62:4a:f4:25:48:72:e8:07:76:a4:85:49:d6:f9:16:64:6d:60:
         d3:b4:07:02:09:3f:17:35:09:1d:b1:d5:57:2f:f6:61:91:75:
         58:b6:58:2c:cd:b1:f1:c2:57:a8:a7:ec:9c:af:6f:76:e9:7e:
         43:1e:9d:16:5d:a1:f0:a0:83:fe:54:c2:88:52:93:7f:d0:79:
         4d:2d:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:47:44 2026 by rpki-client