Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File:                     qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier:          LytwpXP1XPSv0LYiWsBcZxay7NbHrrzvdeNzIHcFUj4=
Subject key identifier:   E0:B9:CC:2D:53:3F:E2:66:A4:7D:73:04:2E:B0:17:89:F6:7D:0C:64
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer:       /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial:       0702
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number:          06CC
Signing time:             Tue 22 Sep 2026 22:03:17 +0000
Manifest this update:     Tue 22 Sep 2026 22:03:17 +0000
Manifest next update:     Tue 29 Sep 2026 22:03:17 +0000
Files and hashes:         1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: sHeHDAiJqgqRRiVpTFGsNY/VyKvf89T6fKgeeFm3+2M=)
                          2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=)
                          3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=)
                          4: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
                          rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
        Validity
            Not Before: Sep 22 22:03:17 2026 GMT
            Not After : Sep 29 22:03:17 2026 GMT
        Subject: CN=6ab2fb25-8a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:14:b4:9b:d2:37:4c:75:74:0a:9a:33:d0:
                    80:fd:5a:fa:f9:08:26:73:b9:43:6a:0b:45:bb:e4:
                    02:15:d7:8d:a6:67:0d:24:f6:1d:9f:63:8d:5e:c8:
                    09:aa:41:7b:71:1f:0f:fc:8d:6c:7f:9b:72:07:5c:
                    f2:8a:9a:0d:96:d7:2f:15:d2:44:04:68:4c:fc:59:
                    46:6f:8f:f4:cd:8a:77:cd:31:90:e4:02:34:22:0e:
                    81:88:8a:e1:0f:8c:87:e9:d8:91:69:79:6c:29:87:
                    19:ca:8f:3a:b8:fc:94:5d:6d:51:bd:ed:83:db:10:
                    80:62:01:e1:07:c9:95:5d:e5:9c:98:b1:78:d8:65:
                    3a:2f:9f:0c:c0:5b:52:ab:da:52:82:90:7a:4d:22:
                    6e:c3:b5:90:63:c7:78:95:76:ad:38:67:22:38:97:
                    f8:6d:2f:2f:d4:3e:a0:9c:5d:2f:7b:65:a9:b4:d7:
                    35:87:8d:c5:65:2e:e2:10:9d:b1:e0:48:dd:e7:1e:
                    01:29:a5:c6:92:b5:e3:65:18:28:3f:22:91:a2:40:
                    b5:64:e8:93:b9:c5:a1:22:4f:83:74:04:41:c8:d3:
                    2d:6f:a3:7e:16:23:5f:8e:b0:03:3d:6f:fd:c7:29:
                    25:ef:a1:14:94:58:d2:11:59:dd:38:34:b5:df:db:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B9:CC:2D:53:3F:E2:66:A4:7D:73:04:2E:B0:17:89:F6:7D:0C:64
            X509v3 Authority Key Identifier:
                keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:17:bb:55:5a:06:8a:f2:af:78:02:ef:e2:79:78:c6:05:21:
         77:65:7a:ad:7f:ef:37:d4:c9:eb:c9:b2:f5:67:93:ca:06:72:
         40:cd:61:99:9a:85:42:ea:ac:f3:e1:34:9f:a6:25:e3:b0:e5:
         74:1a:d2:83:e5:33:09:97:9e:43:a5:6b:8b:e1:04:33:94:68:
         61:70:b9:2b:43:07:ae:23:e6:d8:87:16:3d:8a:73:4b:cb:a2:
         e1:b1:06:fa:f0:c2:57:fc:2d:41:a7:4d:b3:ce:88:3f:cb:9f:
         20:54:85:ff:75:1b:8b:6f:a7:8f:43:c7:25:98:15:26:7d:23:
         f8:54:be:8e:ca:41:81:35:02:1e:a4:fe:64:9e:c4:75:d3:07:
         65:a2:f0:6c:53:75:e0:ff:54:53:f2:6f:fb:33:b5:c1:b3:66:
         48:f1:1b:22:aa:a4:c5:03:1b:5d:d3:e4:14:95:8d:1e:dd:ea:
         47:0c:d9:d4:24:1c:c2:23:a1:82:6a:1e:37:65:d9:ac:72:51:
         43:8f:44:1f:f3:65:75:f5:3c:31:cf:0b:5a:ea:d3:bc:0a:0b:
         78:a8:20:91:e1:38:96:f1:dd:5f:41:ae:95:53:ec:74:fc:5e:
         99:62:ac:ef:e1:63:98:2a:90:3a:7e:f7:72:f6:23:be:1d:9c:
         7f:8e:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:16:12 2026 by rpki-client