Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
File:                     QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft (raw, json)
Hash identifier:          WIWPjWX8a7cyggCXsEO4WUvYqF6t9fEhycPTtNAMjwU=
Subject key identifier:   E6:EB:4C:20:FE:AF:7D:57:A4:0A:5E:E6:83:BA:E0:61:82:DB:F9:34
Authority key identifier: 41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B
Certificate issuer:       /CN=A91F4F4C/serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
Certificate serial:       08C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
Manifest number:          08B7
Signing time:             Tue 22 Sep 2026 20:19:31 +0000
Manifest this update:     Tue 22 Sep 2026 20:19:31 +0000
Manifest next update:     Tue 29 Sep 2026 20:19:31 +0000
Files and hashes:         1: QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl (hash: Jq6cNbbCbX8iUZb/umYjwqJM29YyL66AQjpvQxptqaM=)
                          2: 770BCA98F97A11EAB938DA5DC4F9AE02.roa (hash: GIrtVeuGP7veqFSx6Nomw6WiVjLjba5dpZ46ETCea3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl
                          rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4F4C, serialNumber=41E380A0C9FABCC10F8EA3296352E6A7878D353B
        Validity
            Not Before: Sep 22 20:19:31 2026 GMT
            Not After : Sep 29 20:19:31 2026 GMT
        Subject: CN=6ab2e2d3-dd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0b:7e:79:85:cf:a8:56:48:fd:2f:98:69:9f:
                    c0:d3:ff:1b:ed:60:75:97:84:bc:31:c4:e4:29:26:
                    2b:47:f5:a6:9a:e7:e7:53:a1:f2:e1:86:a5:b5:66:
                    b2:03:ac:f7:12:0b:b0:84:9c:45:88:87:00:02:a2:
                    23:68:63:69:b3:fa:36:7a:e2:0c:1f:47:9c:eb:54:
                    1b:99:ad:b4:ff:ed:7f:b2:a4:bc:ae:bb:58:a0:fd:
                    09:6b:c8:01:eb:9e:60:95:ee:2d:e0:c7:51:84:69:
                    ff:50:85:2b:c2:20:74:34:d4:de:90:7f:b2:c4:f4:
                    b4:68:3d:13:36:1f:49:e5:85:07:c8:de:ad:a8:0c:
                    d1:99:52:45:3c:c4:f7:69:ea:07:3e:07:94:75:a4:
                    09:9f:5e:9b:9f:3a:d4:6a:cc:2e:0a:1f:b5:ff:e6:
                    3c:b8:19:fd:31:13:97:d3:d3:97:9f:88:71:df:20:
                    27:2f:cb:b0:fe:3f:01:23:bb:f1:de:d3:24:31:bd:
                    49:c9:a1:58:a6:bc:a2:75:95:e1:04:5d:96:31:71:
                    f2:a3:fe:31:4b:91:f6:09:1d:bd:84:04:80:3a:29:
                    f4:19:ff:3b:9d:d0:44:38:7a:54:1d:3b:02:0d:61:
                    d0:0e:d8:b9:11:b8:a8:c2:c1:4b:cf:d6:70:99:13:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EB:4C:20:FE:AF:7D:57:A4:0A:5E:E6:83:BA:E0:61:82:DB:F9:34
            X509v3 Authority Key Identifier:
                keyid:41:E3:80:A0:C9:FA:BC:C1:0F:8E:A3:29:63:52:E6:A7:87:8D:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F4C/940765FCF97611EA9534C043C4F9AE02/QeOAoMn6vMEPjqMpY1Lmp4eNNTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:18:3f:73:97:0d:2c:70:0f:bf:34:01:7d:a5:ee:93:cf:bf:
         59:67:ce:1e:70:7e:f4:21:ea:d8:8f:49:72:10:91:19:1d:c0:
         bb:df:eb:49:55:35:3c:84:ca:8f:5f:ad:6b:76:16:16:db:d8:
         ad:2b:a2:23:98:cd:af:62:5f:90:4f:39:c9:91:f0:a9:0a:85:
         0b:c7:17:d8:0f:65:e4:d7:97:99:2a:20:40:be:e4:31:24:1a:
         24:26:49:5d:ec:bb:b0:de:ae:dd:26:46:d6:e7:09:c5:11:6b:
         c4:eb:91:5d:7d:3f:67:aa:05:9c:25:33:71:22:7c:64:8d:94:
         e0:59:2c:21:8b:73:17:72:04:01:bc:92:06:da:52:b6:0a:e7:
         93:ed:2c:39:07:c6:7b:9f:44:4a:1f:60:c6:2e:34:76:71:41:
         9c:08:d3:24:6a:83:ee:f9:65:77:51:b2:f1:1b:02:ce:a5:4f:
         37:21:13:1c:14:c2:98:65:86:ff:5b:e4:13:96:8b:15:53:fe:
         d3:ca:ff:f0:78:0d:96:ed:ac:75:a6:27:04:3b:5b:f9:2b:04:
         c2:12:6e:0b:cf:db:33:e4:e7:af:c5:42:cb:b3:7d:b0:12:34:
         79:e0:7a:14:e2:3a:91:0d:cc:44:d4:9b:f8:40:85:01:cb:da:
         6f:68:76:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRGNEMxMTAvBgNVBAUTKDQxRTM4MEEwQzlGQUJDQzEwRjhFQTMyOTYzNTJFNkE3
ODc4RDM1M0IwHhcNMjYwOTIyMjAxOTMxWhcNMjYwOTI5MjAxOTMxWjAYMRYwFAYD
VQQDEw02YWIyZTJkMy1kZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuAt+eYXPqFZI/S+YaZ/A0/8b7WB1l4S8McTkKSYrR/WmmufnU6Hy4YaltWay
A6z3EguwhJxFiIcAAqIjaGNps/o2euIMH0ec61Qbma20/+1/sqS8rrtYoP0Ja8gB
655gle4t4MdRhGn/UIUrwiB0NNTekH+yxPS0aD0TNh9J5YUHyN6tqAzRmVJFPMT3
aeoHPgeUdaQJn16bnzrUaswuCh+1/+Y8uBn9MROX09OXn4hx3yAnL8uw/j8BI7vx
3tMkMb1JyaFYpryidZXhBF2WMXHyo/4xS5H2CR29hASAOin0Gf87ndBEOHpUHTsC
DWHQDti5EbiowsFLz9ZwmRO5fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFObrTCD+
r31XpApe5oO64GGC2/k0MB8GA1UdIwQYMBaAFEHjgKDJ+rzBD46jKWNS5qeHjTU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEY0Qy85NDA3NjVGQ0Y5
NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZNRVBqcU1wWTFMbXA0ZU5O
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FlT0FvTW42dk1FUGpxTXBZMUxtcDRlTk5Ucy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEY0Qy85NDA3NjVGQ0Y5NzYxMUVBOTUzNEMwNDNDNEY5QUUwMi9RZU9Bb01uNnZN
RVBqcU1wWTFMbXA0ZU5OVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjRg/c5cNLHAPvzQBfaXuk8+/WWfOHnB+9CHq2I9JchCRGR3Au9/rSVU1PITK
j1+ta3YWFtvYrSuiI5jNr2JfkE85yZHwqQqFC8cX2A9l5NeXmSogQL7kMSQaJCZJ
Xey7sN6u3SZG1ucJxRFrxOuRXX0/Z6oFnCUzcSJ8ZI2U4FksIYtzF3IEAbySBtpS
tgrnk+0sOQfGe59ESh9gxi40dnFBnAjTJGqD7vlld1Gy8RsCzqVPNyETHBTCmGWG
/1vkE5aLFVP+08r/8HgNlu2sdaYnBDtb+SsEwhJuC8/bM+Tnr8VCy7N9sBI0eeB6
FOI6kQ3MRNSb+ECFAcvab2h24w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:51:31 2026 by rpki-client