Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File:                     QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier:          g9Thkk3xAAhj3Hx6q/X/TmYuU+wioNE94pAn8mbmnz4=
Subject key identifier:   6A:BD:D1:FB:6B:B2:BC:4D:24:69:F4:84:DF:44:34:9B:0E:79:14:C2
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       04C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number:          04B9
Signing time:             Thu 24 Sep 2026 23:42:46 +0000
Manifest this update:     Thu 24 Sep 2026 23:42:45 +0000
Manifest next update:     Thu 01 Oct 2026 23:42:45 +0000
Files and hashes:         1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: +nXG3M87+MYn9Eg+CR5sGwIcMDDwVPXcuVX5ZOosCis=)
                          2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=)
                          3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Sep 24 23:42:45 2026 GMT
            Not After : Oct  1 23:42:45 2026 GMT
        Subject: CN=6ab5b576-1dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:db:63:7f:d3:e8:38:92:87:51:3c:d8:ec:
                    bb:8b:15:f1:f2:60:86:68:c5:b6:23:45:c9:3f:fa:
                    fd:ce:9f:d7:56:41:29:de:d0:88:c2:75:be:bb:3f:
                    85:4d:25:b0:8c:a1:08:7c:4d:77:c0:8a:15:3b:43:
                    52:3f:d9:b8:c7:63:ce:f6:db:79:34:98:f6:8e:64:
                    4f:48:a9:ef:ef:71:10:e1:93:62:2e:a0:fb:ee:ba:
                    8e:9d:07:68:c6:a4:33:82:fd:4a:77:9b:32:6c:6c:
                    4a:36:a2:2c:ca:87:56:ae:c7:07:c2:9f:bd:c5:aa:
                    e5:fb:61:8f:9f:4b:5b:cc:04:8f:e2:26:86:99:2a:
                    35:3d:df:51:66:af:78:07:4c:fc:b6:e4:cc:75:3e:
                    23:38:ba:c1:f2:54:01:8d:8f:54:01:c2:5f:18:86:
                    de:40:08:ea:23:d1:d2:d4:ba:a4:45:75:4e:68:16:
                    0e:33:c6:ac:f9:cf:65:44:d8:64:79:52:46:e2:6d:
                    52:d2:ce:43:8b:08:99:d3:9b:a2:1c:9d:22:d9:c4:
                    09:0d:c6:08:95:c9:ad:65:63:ea:10:a2:62:9a:b7:
                    17:8a:62:91:01:cf:53:d5:7c:6d:e7:47:b6:90:2a:
                    dd:dd:7a:b4:5e:f0:82:44:03:7e:32:2a:42:d7:7c:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BD:D1:FB:6B:B2:BC:4D:24:69:F4:84:DF:44:34:9B:0E:79:14:C2
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d4:ff:ff:0f:1a:2f:7f:c5:f1:b8:42:5e:45:25:1f:46:da:
         3c:d2:b6:8d:74:8c:41:88:c5:ea:69:40:a2:df:11:f2:a6:62:
         1e:d5:39:55:78:f9:16:fc:78:38:2a:45:3a:9c:2b:46:84:a1:
         66:93:1c:0f:05:f9:86:c7:1e:5c:19:8e:b0:6e:5f:1a:02:63:
         72:d8:5e:4b:61:84:1c:d1:09:7e:3a:5e:49:96:38:b7:90:35:
         8d:42:c2:db:f8:3a:39:46:af:c7:83:b3:29:46:00:21:31:06:
         07:1c:cf:7f:7b:8c:42:31:9e:06:14:a0:74:87:4a:99:05:76:
         1f:69:fe:93:5e:0e:8e:ad:84:1c:92:7f:87:50:90:52:9d:7d:
         f6:a8:8b:da:d5:94:b3:f8:80:16:74:a1:d8:ad:46:de:a4:2c:
         9c:79:b1:ba:1a:86:09:69:ea:dc:4e:8f:8e:6c:de:a8:99:e1:
         48:9a:75:8c:3b:be:8d:97:48:53:d2:84:c7:9f:37:e4:17:15:
         57:b6:75:e2:98:08:30:06:94:50:32:8d:9d:a8:67:a8:a2:aa:
         18:f3:ed:20:49:ad:26:23:d3:8e:ef:81:55:bb:db:50:a4:b8:
         80:1b:a1:3d:78:06:8d:b2:31:9c:e4:b9:1a:14:27:57:fe:55:
         8f:65:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:14:44 2026 by rpki-client