Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          rzY7ve7F7ny1O+QWbjxOWqNVt1t4/pqeJpX7VdfMuHg=
Subject key identifier:   B0:53:58:26:F0:FE:7C:07:5E:52:28:5A:3F:0C:5B:8F:2E:F3:70:33
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          0178
Signing time:             Tue 29 Sep 2026 05:14:40 +0000
Manifest this update:     Tue 29 Sep 2026 05:14:40 +0000
Manifest next update:     Tue 06 Oct 2026 05:14:40 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: TDq30jS2wV/7oBmOOWBIOc/dtQWZ3arJGACs35x3BEE=)
                          2: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=)
                          3: seq8-XfoYrOCR6EkbEhoMmQ6lJw.asa (hash: U3MnqEK5oZXdu+wnt4i+4YQYf3RwJwKZMoXdMxQr7TQ=)
                          4: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 05:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: Sep 29 05:14:40 2026 GMT
            Not After : Oct  6 05:14:40 2026 GMT
        Subject: CN=6abb4940-cff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:04:6a:70:77:ff:9e:eb:ab:3e:2b:10:4b:
                    80:27:0d:ba:19:19:a6:c3:16:db:bc:32:99:ff:78:
                    af:74:d2:3a:1e:d3:3e:bb:e1:45:28:a1:52:a8:d6:
                    b6:0b:c8:21:0f:be:93:d3:73:71:38:ba:72:a9:49:
                    7f:f5:2b:22:2d:5f:3d:b4:69:be:0a:ac:2a:7b:86:
                    24:bc:f5:27:81:a7:bb:c6:63:28:5d:53:8a:6c:fe:
                    1f:08:fe:e3:5b:e3:2d:e0:5a:9f:09:69:fe:52:87:
                    c0:09:3a:38:aa:7e:9d:7e:a1:0f:f8:07:e3:a1:c7:
                    c2:14:65:ca:f8:9f:89:9d:45:25:31:23:ac:cc:e2:
                    3d:e5:45:57:c3:1f:01:f4:ab:39:5c:dc:bf:d9:54:
                    90:86:05:a8:e0:f9:cf:df:4b:ca:c8:00:54:e4:e2:
                    ad:8a:fb:8c:c6:c2:88:d8:a4:41:71:51:85:76:51:
                    6d:a3:9f:3a:cb:7e:05:d0:57:2c:10:24:33:ab:df:
                    f2:73:f3:af:74:a1:64:00:06:c7:df:8f:ee:0a:84:
                    a8:82:2e:04:17:4a:d1:34:64:aa:d9:03:92:80:a9:
                    f5:b0:3e:b7:e9:b7:00:1d:db:ba:0a:a7:db:f6:d2:
                    de:54:54:7b:12:25:da:73:41:81:19:c8:90:f6:9c:
                    05:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:58:26:F0:FE:7C:07:5E:52:28:5A:3F:0C:5B:8F:2E:F3:70:33
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b7:03:83:d7:93:74:31:0d:72:f7:2b:e5:be:b0:8a:6d:c6:
         51:76:a7:16:3c:ed:03:1e:44:a8:57:57:b9:4f:e2:e0:5c:90:
         1a:8c:34:e9:87:8a:57:98:85:04:52:b1:16:4b:8d:6b:b4:f8:
         58:95:fb:3f:d1:55:7b:f4:e3:fb:0c:63:0a:b2:d3:be:b8:be:
         33:48:c4:83:12:bb:62:aa:9e:3e:82:72:48:29:52:a1:a6:28:
         91:d4:10:7a:be:3a:15:06:30:02:ac:5c:0e:4d:66:31:1a:f8:
         19:52:89:7b:fb:97:44:2a:38:45:89:8b:0c:ce:60:56:70:6c:
         c8:11:eb:e3:70:a8:cb:d4:cf:8d:1b:1e:f3:26:84:dc:b2:86:
         70:a0:7c:54:e9:19:fe:83:e2:fc:3f:ae:08:6e:af:ea:4b:3e:
         6a:f2:b7:7f:7a:a1:43:05:af:51:4b:57:02:eb:bc:5c:b2:07:
         72:71:43:3f:4a:0c:53:f3:c8:6b:13:2f:47:b5:df:ef:b3:99:
         32:0d:91:17:99:55:47:f8:e8:c8:3f:5f:23:e2:21:e0:ad:33:
         8c:4e:6e:6a:bb:5f:d7:1e:e7:f1:b0:62:d8:0b:b6:4b:ed:0e:
         8c:04:da:60:d0:fe:4e:5d:fd:d8:ae:23:45:2a:9e:05:1e:55:
         71:be:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:20:30 2026 by rpki-client