Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
File:                     QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json)
Hash identifier:          iIvrSa6M3j7503sfCav8sPt51tGu8yyBWo68bE35Pfs=
Subject key identifier:   C3:E3:42:74:DD:B2:DB:2B:E7:06:49:D1:41:40:C6:F0:14:64:DD:58
Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
Certificate issuer:       /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Certificate serial:       0535
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
Manifest number:          051F
Signing time:             Thu 24 Sep 2026 23:28:20 +0000
Manifest this update:     Thu 24 Sep 2026 23:28:19 +0000
Manifest next update:     Thu 01 Oct 2026 23:28:19 +0000
Files and hashes:         1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: XAUljTk9+GKz/vpweQMPYkBuVsAGN8/RKfi+x1EibNg=)
                          2: 65798E8A1F7D11F18F98CA06223D8C67.roa (hash: RZFsnQn6HA9v12vUgYh/78hGLqlY8AmjxFGu89yIv54=)
                          3: F3B1927A1E0511F1841549681E3D8C67.roa (hash: KFJazkmvnPBoQlHt7NJ9M2Eg3tsyR0kZTa+OC7vwIGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
                          rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333 (0x535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
        Validity
            Not Before: Sep 24 23:28:19 2026 GMT
            Not After : Oct  1 23:28:19 2026 GMT
        Subject: CN=6ab5b214-0522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:8f:a8:1c:67:8c:d6:14:ff:22:fc:75:eb:
                    f2:5f:69:c6:03:99:20:ba:da:32:39:77:db:e8:1a:
                    d3:0c:9a:dd:c4:62:15:19:38:ff:55:80:61:08:2a:
                    b8:5a:e1:bb:2b:7e:ab:35:7e:3b:02:b5:46:c4:90:
                    a2:9a:07:87:48:bc:37:53:46:2d:44:89:ef:63:31:
                    d4:05:1a:90:95:6d:ac:23:66:67:69:e7:dd:84:84:
                    c5:71:6f:48:ca:f5:6e:2f:a1:e1:7a:4a:b7:44:f7:
                    f7:44:2b:a1:17:a5:6b:88:fa:ee:38:c2:35:81:b8:
                    49:86:a2:1c:08:85:37:c1:c1:e5:9c:be:d1:f4:a3:
                    b7:9e:ea:1d:c9:7e:77:3d:c3:dc:a0:62:27:4b:9a:
                    04:d6:71:f3:59:52:e6:70:20:ff:07:7f:6c:57:65:
                    a1:76:ee:e5:60:a5:2f:5f:4d:cd:36:20:84:6a:b2:
                    43:1c:26:46:03:82:76:21:dd:7a:a4:5f:5b:de:9a:
                    c6:89:19:9d:76:48:99:8b:5c:35:01:39:c9:75:03:
                    bb:fa:23:0f:00:31:c1:15:67:62:d4:e5:0e:7f:57:
                    01:1e:f8:dc:b7:09:71:8e:a5:e9:85:2e:f7:2b:34:
                    2f:85:19:b0:c3:2e:35:23:b1:cf:0a:72:33:33:f0:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E3:42:74:DD:B2:DB:2B:E7:06:49:D1:41:40:C6:F0:14:64:DD:58
            X509v3 Authority Key Identifier:
                keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:01:f6:c0:e0:98:91:b8:bc:15:af:57:69:0d:40:f6:c6:99:
         ad:19:e6:2d:47:9e:cd:fa:aa:7f:8e:a2:14:a1:32:89:f9:49:
         80:79:b2:74:59:46:ad:fe:ea:5b:86:59:04:37:51:1e:1e:a3:
         e9:0c:cf:a3:45:83:da:7d:8c:79:7c:ca:d5:c6:99:b9:53:54:
         9f:a3:4a:d5:41:8d:3a:20:b0:1f:5c:8f:02:1d:6a:1e:9a:70:
         ee:7b:c2:ff:06:7c:fa:39:4b:42:03:c4:ae:bd:77:a4:6b:39:
         db:57:1e:ef:6d:c9:fe:f8:99:ef:ad:27:27:07:6f:f3:da:75:
         cd:48:10:e1:e3:10:22:2e:54:ce:5e:ae:8e:9b:54:4c:d8:98:
         1e:32:cc:b1:ea:f1:e4:e0:ac:86:4f:fc:17:10:22:5f:f0:6e:
         9c:68:ec:3e:d1:3a:c8:e2:73:b9:9f:6f:c3:ea:95:c1:91:38:
         db:67:72:a1:fa:8c:0b:28:da:da:cb:b0:52:85:61:3e:cf:3c:
         2d:74:51:cd:f8:44:60:5e:fa:7e:b1:d1:5b:fc:c2:c7:ae:11:
         88:b0:0f:61:64:be:94:01:b4:49:06:f8:cf:67:30:d3:2c:42:
         c4:b0:d4:8d:13:e8:46:cf:22:9c:c4:ae:08:68:e9:3f:e4:a7:
         a9:08:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:42:37 2026 by rpki-client