Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
File:                     QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json)
Hash identifier:          n5cshiuDd5LblSbOJJpJMxKSAAVVx2YgPJHAnrGvIbM=
Subject key identifier:   57:DB:1F:FC:DC:88:9C:5B:F5:6B:7F:87:CF:AA:DD:AC:B8:AB:09:41
Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
Certificate issuer:       /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Certificate serial:       1397
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
Manifest number:          4940
Signing time:             Thu 24 Sep 2026 14:21:16 +0000
Manifest this update:     Thu 24 Sep 2026 14:21:16 +0000
Manifest next update:     Thu 01 Oct 2026 14:21:16 +0000
Files and hashes:         1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: 6WRBoSl4aHK08BPb5Ja+izyKQl8l2q37QnfXYp6RM6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5015 (0x1397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
        Validity
            Not Before: Sep 24 14:21:16 2026 GMT
            Not After : Oct  1 14:21:16 2026 GMT
        Subject: CN=6ab531dc-043f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:fb:05:4e:89:4d:64:ac:f7:17:6f:09:5a:
                    5a:3e:d0:36:5e:00:87:a8:1c:41:36:10:de:a4:0a:
                    84:92:43:4b:6d:9f:e4:0a:6f:2a:6c:ee:12:d9:51:
                    89:b8:4c:b3:9b:fb:04:ca:c0:d5:db:16:6f:a1:01:
                    8e:c5:e0:96:b6:1b:7f:ae:2f:75:38:89:89:21:15:
                    3b:21:25:35:5a:06:be:00:c4:e7:98:32:80:9b:f2:
                    bf:dd:3d:94:30:85:f6:ea:12:20:53:de:85:22:76:
                    77:99:8f:b8:fe:0b:e7:76:1c:b7:d1:6c:0c:a9:48:
                    5c:88:c3:e5:78:55:4c:0a:45:7c:7b:59:1f:15:17:
                    93:7b:a6:ad:2e:dc:a7:29:d1:c9:f1:e6:17:27:a6:
                    5c:65:d6:96:63:80:d0:d7:bf:2b:53:0d:e3:6d:ea:
                    e5:11:76:ba:30:5d:af:3f:6e:4c:1c:92:8c:38:0e:
                    2d:de:e5:3b:62:eb:35:71:ce:b5:9b:f6:a5:c4:10:
                    5f:10:1f:e7:82:d4:83:66:bb:a1:4d:38:b3:64:6d:
                    e9:e9:70:be:6c:6b:52:31:40:ac:94:cd:d2:85:24:
                    1b:ab:80:4d:a8:f9:a2:c7:bf:7a:f3:e5:10:e8:1a:
                    a3:db:98:dd:cb:7a:3e:9a:b4:ce:b1:fb:59:c9:bf:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DB:1F:FC:DC:88:9C:5B:F5:6B:7F:87:CF:AA:DD:AC:B8:AB:09:41
            X509v3 Authority Key Identifier:
                keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:c2:66:b2:6e:b6:66:e8:ba:ef:fc:92:37:f5:81:32:3e:21:
         ee:43:f1:4f:16:a8:51:aa:35:ed:db:6a:cf:41:61:88:86:65:
         dc:33:d2:fc:a2:3c:a8:97:bf:30:2a:32:bc:c3:97:83:eb:74:
         15:a3:a2:e0:53:40:a1:3f:8f:98:31:d9:54:e4:dd:be:b2:71:
         7e:5a:01:e1:52:36:25:96:ac:19:c2:78:4f:de:03:82:9e:97:
         d3:cb:50:92:0d:c7:6c:ea:5e:bd:fe:ee:f9:2e:4a:41:bb:d3:
         02:13:5b:79:47:94:68:47:35:33:d1:db:ed:dc:e8:b9:26:a8:
         01:ab:86:1f:2d:6e:34:b1:78:13:32:40:50:15:f8:cd:a0:1a:
         d8:8b:3a:9c:4e:d0:89:18:8f:a8:84:d4:2a:30:ab:26:19:fb:
         59:c0:f6:6f:09:1d:96:eb:8c:1f:f8:0b:b5:87:5d:70:b8:24:
         d4:9a:2f:34:fc:07:ee:0c:af:03:3f:89:b6:48:0d:13:f5:17:
         3a:42:f4:00:83:0b:f6:c6:ef:28:6a:06:63:d1:85:63:b7:29:
         c1:fc:dd:a8:53:c1:82:c7:67:5c:23:93:84:58:85:21:1e:7b:
         fc:47:e1:46:6a:e5:88:79:3c:e3:99:c5:93:58:e0:c4:02:96:
         13:44:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:37:19 2026 by rpki-client