Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
File:                     qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json)
Hash identifier:          +s2ZS4NDZ0vY4hTXKpElF+YnktE2+GiXEKFu3ruMsV8=
Subject key identifier:   6F:70:BF:0C:E8:70:41:0D:A9:DB:B8:8A:54:28:E7:6C:CA:B1:5D:B1
Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29
Certificate issuer:       /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
Certificate serial:       06F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
Manifest number:          06E9
Signing time:             Tue 22 Sep 2026 21:55:24 +0000
Manifest this update:     Tue 22 Sep 2026 21:55:24 +0000
Manifest next update:     Tue 29 Sep 2026 21:55:24 +0000
Files and hashes:         1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: GrQMpXPlgohC8Jufd4BJHPKl+sewVmTisg8q/tMQdtk=)
                          2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: /ULmSnSTdH0/f1q4tjs1akmKQxqjyakkSOX6RXEjmGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776 (0x6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BE1, serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
        Validity
            Not Before: Sep 22 21:55:24 2026 GMT
            Not After : Sep 29 21:55:24 2026 GMT
        Subject: CN=6ab2f94c-cf36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fa:53:2f:a1:0f:b4:89:64:58:df:a9:4e:03:
                    fc:fa:2d:60:6f:b9:1e:b7:60:62:91:16:02:fd:bb:
                    51:52:ef:2f:6f:40:15:17:72:28:c1:ce:20:82:77:
                    b6:b7:e3:81:47:5d:41:53:a3:59:70:31:f1:9a:81:
                    3e:de:39:01:57:a6:c0:ab:58:cd:81:a7:4b:39:f6:
                    ce:25:de:49:4d:e1:5d:40:af:32:d6:e9:df:4d:bd:
                    73:32:57:48:c1:8c:43:6d:31:aa:10:94:aa:ed:42:
                    d6:dc:33:39:5e:4a:95:ab:30:c0:3f:fc:e3:ab:6a:
                    ba:dd:af:56:59:a3:80:4c:6f:9a:2c:98:26:b0:5e:
                    f9:53:2c:30:d0:97:67:08:02:8e:44:bc:30:aa:30:
                    b2:c1:a0:86:01:00:1f:ab:8c:87:ea:a2:a4:15:7d:
                    55:02:ed:c3:8a:2d:6d:7e:89:eb:5f:88:d7:73:7f:
                    aa:7b:ef:04:d6:6a:6b:03:a0:32:39:36:1f:29:9f:
                    8f:f5:2d:82:bd:53:be:82:de:ab:6d:c6:dd:da:ad:
                    8a:aa:3f:6f:8f:95:ba:99:69:21:9d:92:a1:3c:0a:
                    c7:70:a3:3a:01:93:b8:76:16:90:59:d1:cc:68:67:
                    94:c3:58:dc:69:2e:f2:4f:6c:ee:13:9e:fb:e4:31:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:70:BF:0C:E8:70:41:0D:A9:DB:B8:8A:54:28:E7:6C:CA:B1:5D:B1
            X509v3 Authority Key Identifier:
                keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:03:fe:50:6a:5d:48:90:db:8f:e8:ea:b3:00:35:1d:aa:
         e5:8d:e1:7e:d5:87:d3:99:e2:e4:99:47:04:0f:9c:10:ba:42:
         2c:52:4c:2b:2d:b4:9b:b8:5f:09:a5:46:f9:45:39:69:37:2d:
         ae:3f:c4:64:73:56:35:c0:da:f5:b1:f3:8e:72:d3:09:2c:8d:
         6f:59:b1:df:75:09:3e:50:03:51:0d:6f:66:90:7e:78:bb:5c:
         9b:37:37:f6:44:5d:df:60:21:bb:99:3a:b9:34:6f:d8:98:ac:
         50:fc:78:5d:db:5c:e0:bf:42:e7:fa:55:ac:56:1f:a9:ab:0f:
         f6:7a:e8:ba:de:ac:9c:60:cf:83:d5:12:15:bd:e5:0e:36:66:
         17:84:8e:ef:a0:a6:ee:b6:bf:26:73:cd:fc:74:fc:9c:a6:00:
         8a:d6:cb:a9:23:90:9b:33:3f:54:dc:43:8e:d3:dc:7e:2e:44:
         30:e8:10:7a:68:43:b3:94:b7:b1:a5:ba:d3:96:bb:77:bf:53:
         18:4c:38:9f:ae:65:44:2e:76:e7:60:e9:7a:79:23:ae:83:dc:
         63:51:9c:da:83:89:7e:8b:7a:1b:e4:e7:bd:fc:08:66:50:0b:
         36:73:86:0c:d8:b6:ba:5e:71:50:e7:21:20:88:e3:53:5d:aa:
         f9:43:12:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:35:21 2026 by rpki-client