Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
File:                     qwZIgiREAh7nNyCgReCpRPXXf-M.mft (raw, json)
Hash identifier:          X/1GSWN2JQoa+2DRpQAK35RGa60tQU++r9k6M7sZquo=
Subject key identifier:   DF:4D:29:15:DD:3F:D3:2F:72:47:F5:E7:4B:FD:57:34:A0:CD:A5:2B
Authority key identifier: AB:06:48:82:24:44:02:1E:E7:37:20:A0:45:E0:A9:44:F5:D7:7F:E3
Certificate issuer:       /CN=A91CE4A1/serialNumber=AB0648822444021EE73720A045E0A944F5D77FE3
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
Manifest number:          0508
Signing time:             Thu 24 Sep 2026 23:36:21 +0000
Manifest this update:     Thu 24 Sep 2026 23:36:20 +0000
Manifest next update:     Thu 01 Oct 2026 23:36:20 +0000
Files and hashes:         1: qwZIgiREAh7nNyCgReCpRPXXf-M.crl (hash: 0tvLI7AO2FzM1gzs+fFiwpu1AisK9JiccbBKOoI97ms=)
                          2: CE6F2E9C97BC11F18CB49434A2EE528E.roa (hash: Nwt+OMKG4b1+bsIf5bbnfPAQc5s5GLqlwpqO4m2VZos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.crl
                          rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE4A1, serialNumber=AB0648822444021EE73720A045E0A944F5D77FE3
        Validity
            Not Before: Sep 24 23:36:20 2026 GMT
            Not After : Oct  1 23:36:20 2026 GMT
        Subject: CN=6ab5b3f5-f913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:f5:98:7d:61:7b:57:8e:0f:1c:9f:92:d7:
                    b1:70:29:6b:30:86:55:15:79:89:ac:07:f9:c9:77:
                    36:15:a6:89:08:8f:de:50:d2:96:aa:4d:e5:a1:74:
                    71:be:a0:79:c8:da:3a:e3:92:7f:48:ac:43:dd:e8:
                    34:66:e0:1c:b3:0c:2c:98:84:27:52:e2:f0:c7:f1:
                    f1:25:d9:c7:a3:03:d4:0e:26:b4:7f:d5:ba:84:f7:
                    99:44:44:51:c8:c2:89:5c:1c:6f:73:0e:2b:5f:ea:
                    1c:be:4e:03:72:59:dc:9f:7b:6f:44:8a:95:3f:17:
                    18:25:f6:68:f8:53:7f:b6:44:dd:cc:35:b6:cc:0e:
                    85:d7:95:ff:1e:4a:a0:e6:cc:46:2f:fd:29:ca:68:
                    74:3e:f5:bc:c7:86:a1:3d:87:0a:00:9a:6b:e1:72:
                    0c:0d:be:9b:c6:95:db:14:29:0c:14:05:a2:72:be:
                    cc:6e:94:09:bd:da:2a:ac:54:5d:1d:49:f6:e2:b5:
                    b0:70:b5:60:c4:d0:a4:9f:e3:77:48:eb:68:19:cc:
                    53:86:8c:b0:13:e6:97:3f:70:1d:f5:a6:96:a5:36:
                    3a:6e:93:1d:ca:2d:49:20:b9:c5:26:66:d8:b5:1b:
                    d8:e4:56:32:64:98:19:81:a1:94:8b:a8:4c:ba:fe:
                    4b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:29:15:DD:3F:D3:2F:72:47:F5:E7:4B:FD:57:34:A0:CD:A5:2B
            X509v3 Authority Key Identifier:
                keyid:AB:06:48:82:24:44:02:1E:E7:37:20:A0:45:E0:A9:44:F5:D7:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qwZIgiREAh7nNyCgReCpRPXXf-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/qwZIgiREAh7nNyCgReCpRPXXf-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4f:5a:de:9f:5d:aa:28:e7:ab:ee:9e:85:fb:fb:9c:e7:62:
         cd:f5:a5:24:bd:db:c5:77:56:05:6b:3e:30:4c:a9:ff:e6:4c:
         0d:bd:08:45:35:42:46:56:0e:ae:3b:12:40:3c:74:d5:4c:99:
         eb:6f:3e:c5:e7:5d:62:0c:43:09:ef:13:46:0e:45:fd:5d:ec:
         1c:0b:ab:e6:c5:9c:c4:68:f0:6b:8f:80:4b:47:5b:de:85:f9:
         bc:d2:a8:7e:10:b7:34:0d:2b:52:14:5a:e9:17:7e:d6:45:5e:
         61:ed:0c:7a:91:c3:ce:46:10:22:9a:03:ac:92:40:6a:be:2f:
         1b:14:eb:06:b8:ea:7e:7c:b2:f6:8d:02:3b:a5:08:36:14:37:
         01:4c:4f:c1:ba:39:31:53:3b:52:6a:43:52:ca:7c:4a:90:17:
         8e:97:f7:88:cb:f3:08:b5:4b:d1:1b:1e:eb:02:01:49:cb:69:
         0b:01:a7:8f:26:9c:c7:53:88:04:62:46:ee:b4:6d:2d:51:5d:
         28:7e:e1:c2:4d:33:b3:e2:12:46:71:bf:8a:0f:f9:cb:a5:b0:
         8b:20:1c:2d:04:3a:0b:13:4c:96:5c:03:46:bd:ca:97:f5:6c:
         b3:fa:2f:64:03:7f:35:55:ce:69:bf:24:0e:1e:91:60:67:19:
         fd:10:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:25:09 2026 by rpki-client