Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
File:                     QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json)
Hash identifier:          9RbmZIq98OcCxILCiTkGfLT6Em88Wgl+LnFPUEuBIFg=
Subject key identifier:   12:20:E8:E1:B0:8D:45:E6:30:EA:F2:5E:F6:97:2B:07:B6:33:34:3B
Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
Certificate issuer:       /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Certificate serial:       04BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
Manifest number:          04A8
Signing time:             Tue 22 Sep 2026 23:33:48 +0000
Manifest this update:     Tue 22 Sep 2026 23:33:48 +0000
Manifest next update:     Tue 29 Sep 2026 23:33:48 +0000
Files and hashes:         1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: J/23gKX7EvK1ZyJVCiMTyrelETqLbvb7QugytV1rMFg=)
                          2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: KtIufux/j8uZsLjUbLPfpnJOkVL/4Ue5N16JttxJrtA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
        Validity
            Not Before: Sep 22 23:33:48 2026 GMT
            Not After : Sep 29 23:33:48 2026 GMT
        Subject: CN=6ab3105c-8927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:62:5f:8c:05:f0:8d:5f:93:fc:2f:c6:29:73:
                    82:d5:83:62:5b:6a:f3:bc:0b:4d:75:fd:26:07:1c:
                    15:99:81:67:b6:53:f5:4b:b0:68:5f:98:63:6f:30:
                    21:69:71:c6:f3:29:95:d0:ef:ca:57:a3:a5:ca:d2:
                    5c:23:ac:8d:d4:e1:3d:f3:d4:97:c0:6c:5a:71:c2:
                    99:5b:18:e1:8f:e5:0f:4b:31:56:5b:03:d2:c6:7e:
                    c6:b4:69:9e:03:09:bd:6b:bb:67:91:65:7a:b3:3b:
                    8c:83:0c:3b:ea:20:d6:e0:f7:70:b9:a2:aa:4a:64:
                    64:d2:e6:41:bd:cf:85:e5:8c:80:30:c2:62:f5:1d:
                    30:33:99:59:73:b5:ce:fd:85:f6:e3:ce:73:7b:b4:
                    77:1e:71:d7:ed:9d:19:a8:ae:4a:32:6b:ca:1a:c6:
                    3f:a2:13:ed:1d:19:12:54:99:7d:02:f2:68:20:72:
                    6f:51:4c:47:71:5d:5b:e7:0c:dd:1c:26:6f:10:e1:
                    26:f5:25:aa:18:8e:c4:7b:7e:36:eb:0e:9b:65:30:
                    31:f4:37:cf:5c:ab:48:f1:b1:a5:82:0a:8d:03:6d:
                    6f:65:62:a9:78:77:49:ab:f8:55:db:b4:46:33:30:
                    04:1f:19:60:b2:d2:db:4f:76:86:ed:b9:6e:aa:72:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:20:E8:E1:B0:8D:45:E6:30:EA:F2:5E:F6:97:2B:07:B6:33:34:3B
            X509v3 Authority Key Identifier:
                keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:91:42:7f:07:f5:5b:45:d7:8a:f0:8e:ba:9c:33:03:a0:f0:
         43:44:f7:c0:fb:87:0d:91:c0:d2:c1:3c:df:b9:88:39:6c:5c:
         65:88:72:47:72:67:ac:5a:90:8b:43:96:0a:82:f3:bb:f8:de:
         8d:88:97:70:39:f6:0b:97:46:c0:f7:c0:3c:8a:0f:4c:00:25:
         22:32:3d:e9:16:d7:7d:15:e0:f4:97:2b:45:ac:25:7e:70:76:
         44:4a:75:2f:83:87:3b:5f:39:ac:99:c5:6c:dd:03:fe:0b:69:
         91:eb:3e:24:4a:9c:3b:2a:d3:c4:21:f5:1e:5d:15:8c:6f:7e:
         2e:35:5f:5c:0c:fc:94:27:f8:80:30:1d:0f:71:21:23:bb:74:
         f7:54:cb:80:f0:d3:ec:14:19:08:ee:fc:db:47:f8:41:57:f0:
         01:1c:98:68:47:e6:34:3b:49:4b:f2:25:15:fb:73:f8:4a:5c:
         28:60:f2:2e:cb:90:c6:da:5a:1e:22:fa:99:c4:f4:81:09:2a:
         a2:7f:08:f6:98:53:39:e3:af:86:2d:7a:d7:9d:61:c1:b1:1e:
         81:84:de:91:ee:33:6f:60:ed:40:71:c8:04:01:0e:d0:49:dc:
         7c:94:d4:da:a3:2c:7c:4d:95:f3:91:6e:c5:f5:e2:46:94:95:
         88:1c:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:43:57 2026 by rpki-client