Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
File:                     Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json)
Hash identifier:          aUD8QsiXL7Ximkab5fU3+BHXuLE1DMv7UflGCHdG4+g=
Subject key identifier:   1D:B2:21:89:F3:1B:4C:3F:48:0E:7C:99:1E:88:D3:07:F3:35:64:99
Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4
Certificate issuer:       /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
Manifest number:          0630
Signing time:             Mon 28 Sep 2026 22:53:38 +0000
Manifest this update:     Mon 28 Sep 2026 22:53:38 +0000
Manifest next update:     Mon 05 Oct 2026 22:53:38 +0000
Files and hashes:         1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: vkUl4tOPjEyqCu1XKuwiqqRvxqwCIDrp0dEsLQ9twWs=)
                          2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: XNmP7Zo2Gu2ysZZkwdUo+plqL0kQKyZ4CkwaD9acTw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 22:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4
        Validity
            Not Before: Sep 28 22:53:38 2026 GMT
            Not After : Oct  5 22:53:38 2026 GMT
        Subject: CN=6abaeff2-9cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:ef:e3:bd:b8:17:be:9d:b1:df:fa:6b:10:
                    38:23:c9:e8:da:6c:9a:99:4a:75:c9:9a:f8:54:e4:
                    8f:72:01:9f:7c:96:21:f6:89:c0:3a:45:51:c4:4f:
                    ae:fa:31:3d:41:28:ae:e9:a7:0a:bc:a4:06:de:a3:
                    21:4f:a8:4f:6a:32:dd:74:64:b9:11:f1:bc:c5:f0:
                    fe:fe:11:2f:8a:8a:26:b4:f5:8c:39:c8:9e:32:55:
                    07:34:dd:18:29:0b:25:63:cf:ab:f2:3c:85:19:f9:
                    f9:f5:fd:aa:98:31:c4:c2:91:23:45:15:f4:af:c9:
                    2b:2f:fb:59:39:bb:8c:53:50:2c:49:cf:59:1b:06:
                    0e:09:67:51:f0:c9:ca:52:d7:02:e8:f0:10:64:37:
                    9c:62:3b:24:4e:9d:05:1e:2a:22:fd:26:54:eb:96:
                    bd:3d:13:27:0f:45:24:ad:b2:78:95:a9:4f:9d:ac:
                    33:d2:9b:7a:15:e8:bd:5f:bc:5a:fb:63:df:29:29:
                    13:92:c4:41:53:90:9a:25:51:0e:cf:f2:cd:64:7c:
                    7e:47:61:b4:4e:36:52:e9:ea:59:fd:34:c8:6d:e0:
                    6e:cf:db:0b:fa:0d:c8:b4:27:01:0c:e3:8f:ac:4e:
                    7c:67:1a:c7:ee:ce:5c:f5:c4:fe:ae:36:c5:6c:f2:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B2:21:89:F3:1B:4C:3F:48:0E:7C:99:1E:88:D3:07:F3:35:64:99
            X509v3 Authority Key Identifier:
                keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:54:ae:8a:9f:fe:2b:75:7a:35:64:94:28:13:44:82:13:d3:
         4d:98:4b:9f:3d:a7:67:fb:d3:4e:73:6b:66:85:4c:8d:f9:7e:
         7d:62:95:7e:3d:4b:ba:38:09:22:f5:40:c7:a5:91:d7:8e:a7:
         fc:c3:3f:de:a0:c5:8a:9f:a9:21:11:f5:69:50:98:a2:ff:8e:
         c8:b1:09:74:3f:8a:14:c0:83:bc:e5:19:50:21:90:8f:3f:25:
         95:a4:c6:38:47:78:44:68:9d:de:c9:e5:e4:45:da:eb:10:89:
         cb:aa:23:af:5a:a2:b5:48:3d:99:ab:a3:58:61:67:b7:5c:fb:
         ae:47:ea:a5:0f:f8:ea:77:0d:ee:4e:5a:0f:7b:c8:8d:6e:83:
         52:e9:c5:fa:65:16:7c:8b:ca:ba:3b:86:9e:4b:d2:ec:71:be:
         ab:73:38:17:2d:3c:a3:4f:4e:3c:1c:64:21:be:96:fc:8c:57:
         d6:f4:92:3c:e7:d9:c1:b8:c6:ce:da:f1:3b:15:46:a9:b9:4c:
         02:aa:a0:d9:7c:5c:78:e1:1c:73:94:64:b6:3c:f9:1b:ae:a4:
         bf:f3:f3:9b:74:26:2f:7b:38:84:56:1f:8c:25:6c:ea:89:c4:
         4d:d7:1a:69:c5:5c:f2:20:06:4c:54:fd:70:19:29:ec:38:66:
         40:c8:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:54:58 2026 by rpki-client