Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
File:                     qaamgasBulFfIZosreoJRbStWZ0.mft (raw, json)
Hash identifier:          Gbb9aXv5pX41VXR6HfZgR0LPgsJzDCl4F2E6rR0gzYg=
Subject key identifier:   FF:0F:6E:1D:40:9E:2A:CB:8F:F4:12:1E:EA:70:FF:72:3C:9D:DD:E4
Authority key identifier: A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D
Certificate issuer:       /CN=A91FF18F/serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
Certificate serial:       0BF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
Manifest number:          0BF7
Signing time:             Tue 22 Sep 2026 18:46:58 +0000
Manifest this update:     Tue 22 Sep 2026 18:46:58 +0000
Manifest next update:     Tue 29 Sep 2026 18:46:58 +0000
Files and hashes:         1: qaamgasBulFfIZosreoJRbStWZ0.crl (hash: aKXXzigxyHUqckCmGTnLHkMm07QvQl/UJhfnAKSTtWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3063 (0xbf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF18F, serialNumber=A9A6A681AB01BA515F219A2CADEA0945B4AD599D
        Validity
            Not Before: Sep 22 18:46:58 2026 GMT
            Not After : Sep 29 18:46:58 2026 GMT
        Subject: CN=6ab2cd22-5039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:00:00:69:60:aa:58:7c:54:12:f5:f8:0f:
                    0d:62:5e:bc:ae:91:ee:61:3f:4a:f7:90:00:91:ef:
                    af:1a:15:42:a4:23:8b:19:8c:a5:42:69:50:86:30:
                    a5:3a:1a:be:ce:c4:56:56:9d:3f:18:bc:92:06:06:
                    8a:20:42:fb:29:f9:0e:bb:c7:46:c4:f6:01:d8:98:
                    e7:16:79:19:f3:e7:6b:fe:c0:3b:49:35:7f:78:2c:
                    0f:5e:76:cc:cf:40:c2:c2:0e:ce:89:53:be:9e:87:
                    17:9c:43:7d:6e:7f:1a:9f:6e:15:6d:5e:db:f3:97:
                    2e:8f:57:69:6c:57:7f:9e:88:4f:16:5f:af:b1:04:
                    35:f4:cb:91:43:2e:b1:96:d3:b3:81:f3:0f:5e:d2:
                    f8:09:73:ec:84:ae:7b:da:32:52:14:e5:fe:8a:61:
                    70:79:09:09:a2:cb:0d:c7:f2:5f:9e:b7:cd:9b:9d:
                    f4:9a:e1:2b:91:fe:49:4c:4b:0b:a3:f2:c8:bc:70:
                    61:04:cf:ad:5f:aa:33:90:8d:30:2e:47:b9:b2:5c:
                    67:99:f7:ea:cf:af:13:c3:eb:00:3a:ef:99:15:e4:
                    71:d9:43:3c:7e:ae:9d:51:30:6d:37:96:c4:b1:a1:
                    40:c9:a9:cc:d2:31:af:be:83:f8:5e:ee:5e:51:e7:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0F:6E:1D:40:9E:2A:CB:8F:F4:12:1E:EA:70:FF:72:3C:9D:DD:E4
            X509v3 Authority Key Identifier:
                keyid:A9:A6:A6:81:AB:01:BA:51:5F:21:9A:2C:AD:EA:09:45:B4:AD:59:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qaamgasBulFfIZosreoJRbStWZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF18F/1683924843E811EA8AB65E35C4F9AE02/qaamgasBulFfIZosreoJRbStWZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:05:c7:72:63:c5:5f:f0:46:47:13:67:f5:22:85:7c:25:e1:
         26:96:c8:d4:c7:5c:6b:ad:a1:97:e7:6c:6d:81:87:b9:57:26:
         38:0f:61:81:2f:8d:43:71:50:b9:71:91:f4:2a:7d:bb:a0:87:
         f7:86:4a:d9:39:4b:36:ec:71:e7:31:97:d1:63:b6:81:63:6d:
         e6:34:f0:a7:be:d6:60:13:f7:d5:b6:7a:de:c9:c4:6b:e6:7f:
         e0:b4:b1:51:f6:a6:df:92:d4:3c:f0:f7:62:1b:93:11:50:59:
         fc:6b:75:e4:dd:3a:52:32:27:a2:7b:71:ab:43:e8:9a:77:2e:
         e2:b1:fb:60:2b:ce:d7:bb:f5:02:f2:c8:b6:a7:bc:5b:21:94:
         31:03:fb:8c:1d:48:f3:bd:65:42:b9:7a:ea:12:83:85:8e:fe:
         50:fd:b2:0c:79:b1:10:cf:17:92:39:38:d8:3f:a2:d5:87:60:
         25:6d:7c:85:90:4d:8a:07:7b:ee:04:1f:f9:f8:5b:e4:93:2a:
         2d:d5:4a:a0:af:6f:0f:79:97:17:1a:ce:4a:82:10:c0:bf:b4:
         03:96:f1:e2:c6:61:cb:9d:fe:82:b7:2f:20:22:38:47:f9:3c:
         c5:d8:a8:1e:f7:23:46:75:a6:06:85:4a:29:a4:63:db:ad:ef:
         39:8e:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:34:01 2026 by rpki-client