Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
File:                     qEIODiButOkMWHKN1D91Dc_DzIY.mft (raw, json)
Hash identifier:          GrdlzcOFwgPENJrutoMb/vwbyzdk9rOaPNsmDDMJFwk=
Subject key identifier:   61:A2:E5:C5:52:4B:CD:48:B1:4D:47:44:62:09:75:E0:75:45:C6:8F
Authority key identifier: A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86
Certificate issuer:       /CN=A91DCF4D/serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
Manifest number:          24
Signing time:             Wed 23 Sep 2026 08:34:26 +0000
Manifest this update:     Wed 23 Sep 2026 08:34:26 +0000
Manifest next update:     Wed 30 Sep 2026 08:34:26 +0000
Files and hashes:         1: qEIODiButOkMWHKN1D91Dc_DzIY.crl (hash: fAda8iEePE1iH0AzomMOtZse96lb8xrcvaueYznIhZk=)
                          2: A41A30BE866011F191F4B56496A30FBC.roa (hash: AJVM8QB8v9wW9C2GIwYSkWw279MNg5CiJGgU0E7i/bE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl
                          rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCF4D, serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
        Validity
            Not Before: Sep 23 08:34:26 2026 GMT
            Not After : Sep 30 08:34:26 2026 GMT
        Subject: CN=6ab38f12-c081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:48:b9:68:b6:3b:e9:f9:29:94:2c:4d:f4:
                    be:5f:64:53:12:58:58:58:e1:3f:f5:69:d5:3f:63:
                    4b:d7:b1:c6:81:c7:1d:11:aa:ba:26:2f:47:8e:a5:
                    e0:43:5a:13:7c:01:4e:8b:a6:c6:97:eb:a1:a3:bf:
                    cb:0f:75:87:d7:25:84:3f:4a:fc:72:09:69:9f:f9:
                    5a:1e:1b:dd:f7:db:34:4e:f5:39:2c:b7:45:9a:5e:
                    f5:cd:95:a9:5f:94:2e:23:60:b5:8a:f3:fd:42:96:
                    83:ca:97:a8:11:c8:51:9a:45:93:82:8c:0a:e1:83:
                    47:4e:da:9c:bd:03:9b:22:a4:48:bb:d9:06:4c:23:
                    f4:dd:27:be:96:e7:3a:ff:b6:b5:7e:82:6b:f2:77:
                    5c:2b:1b:82:80:28:51:21:01:f6:51:a1:93:45:a6:
                    59:b7:01:e9:ae:15:1f:35:53:0b:38:79:ee:50:9f:
                    b7:df:bd:34:33:e4:37:24:db:bd:43:1e:74:38:54:
                    af:a6:63:64:2a:73:fb:9a:16:01:80:dc:75:1c:72:
                    66:ca:19:34:98:f8:bd:e5:60:ee:0b:ae:a3:6c:85:
                    6d:7e:54:29:84:27:c5:45:1f:c6:2f:9d:73:cc:c4:
                    e7:05:6f:e8:75:fc:e1:a7:3e:26:15:8b:7b:94:07:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A2:E5:C5:52:4B:CD:48:B1:4D:47:44:62:09:75:E0:75:45:C6:8F
            X509v3 Authority Key Identifier:
                keyid:A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:e8:c3:c7:93:c6:52:9f:9d:d5:c5:8b:29:0c:2e:b3:6d:28:
         75:c7:ea:87:26:9e:ba:23:a4:52:27:bd:e0:8b:46:81:00:a5:
         9e:54:1e:12:15:71:5a:e0:79:d0:19:2c:d5:f0:9a:a2:c4:78:
         b1:e3:15:3b:02:87:d8:b9:3b:d0:74:8b:7e:72:bc:a1:a7:98:
         e6:16:7c:90:57:d9:5d:83:06:3c:a4:12:f6:1c:d9:35:10:21:
         8c:5f:0d:34:05:cb:65:0b:9c:0e:50:66:75:ad:68:94:ee:23:
         a1:c1:33:28:3c:2b:5e:ba:d8:7a:50:4e:63:ac:91:43:3b:59:
         84:22:76:09:0a:c7:be:02:b0:36:88:20:ee:7d:17:83:e9:2e:
         f9:f0:7d:c4:01:ca:88:c3:de:3e:d7:54:41:1d:d0:85:99:67:
         61:11:4a:d6:e1:ac:89:47:19:3b:0d:ff:aa:14:3a:e0:ba:c1:
         f3:8c:de:b2:3d:a7:9b:a4:9c:30:6d:fe:2c:cc:3c:ec:f8:b8:
         48:7f:fa:24:d2:7f:2e:4a:ae:a6:9a:28:78:bd:07:be:f9:1e:
         76:a0:f8:8c:78:44:1b:18:70:e6:1a:d9:25:b4:cd:3a:1a:b2:
         4c:66:32:67:6a:40:54:70:4b:e4:64:b8:60:77:92:1d:51:f5:
         cb:8e:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:35:16 2026 by rpki-client