Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
File:                     QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json)
Hash identifier:          g2kxUpg58snfXvolHyzDEQGgbuAhMx1FohzQhCTeLXk=
Subject key identifier:   EA:18:92:21:DF:56:B1:28:B2:C4:15:05:F0:4A:1A:24:72:AD:3D:F4
Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
Certificate issuer:       /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Certificate serial:       0843
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
Manifest number:          0838
Signing time:             Tue 06 Oct 2026 21:14:45 +0000
Manifest this update:     Tue 06 Oct 2026 21:14:44 +0000
Manifest next update:     Tue 13 Oct 2026 21:14:44 +0000
Files and hashes:         1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: S/OsMW/wkqhzgaRRNoaOFwK2g13y02rxDVbh1sa4ZMY=)
                          2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: j8BYrRTXBbaeTTqgpqoP0f1iBbPMGpxA0WeG0MfgZmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
                          rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
        Validity
            Not Before: Oct  6 21:14:44 2026 GMT
            Not After : Oct 13 21:14:44 2026 GMT
        Subject: CN=6ac564c5-a2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:07:4d:2a:28:02:19:16:18:7f:0c:77:b5:2f:
                    87:79:c7:cc:65:2b:ad:84:21:98:57:eb:ab:d1:08:
                    b0:70:f6:9b:85:ad:7d:7b:27:b7:3e:30:f6:47:73:
                    58:34:e7:2f:d7:62:11:c4:10:3d:b7:ac:24:d5:e9:
                    3c:97:92:f3:8b:46:fd:31:3a:07:cc:0b:84:a3:e6:
                    c9:e1:50:7e:42:e8:3d:35:29:eb:6c:65:91:7d:63:
                    fd:aa:e6:97:dc:26:b5:90:55:ba:32:82:d7:e4:86:
                    0b:3a:ba:7d:be:1e:e9:a6:6d:02:02:dc:db:f8:03:
                    f5:a9:ef:b1:48:f3:aa:6b:72:4a:44:ca:b9:1c:92:
                    f1:d2:1e:51:33:d5:ca:82:e7:07:cf:fa:8e:5f:89:
                    38:a9:40:bf:1a:cd:29:9f:15:14:b5:dc:e9:36:ae:
                    36:7e:c1:a0:9f:70:b0:4c:a2:7c:5f:5f:8b:b2:b7:
                    c4:6c:84:71:7a:87:ec:10:72:24:1d:65:7b:94:37:
                    0a:70:39:52:4e:db:04:9d:0c:c7:ed:4b:23:ac:53:
                    49:49:08:45:92:6e:6b:7d:bf:3f:e8:22:bb:30:a6:
                    92:df:40:91:ea:20:18:64:8c:5f:dc:1c:7a:9e:ca:
                    a4:4d:bb:b5:c2:31:95:f0:33:fb:2b:6b:d6:f8:46:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:92:21:DF:56:B1:28:B2:C4:15:05:F0:4A:1A:24:72:AD:3D:F4
            X509v3 Authority Key Identifier:
                keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:7d:fb:1a:ad:41:6e:6d:2e:76:7d:29:f7:6f:8a:10:62:
         a2:ed:4e:dd:e4:db:23:0b:a5:fa:82:8f:50:64:00:e9:26:05:
         6b:77:5b:6f:69:a4:62:db:24:3e:58:0c:fa:7b:88:c6:98:2d:
         09:3a:96:b2:e4:aa:fb:18:83:92:c8:78:a1:41:06:b5:c0:32:
         bb:82:e4:30:9c:6d:9e:24:4f:de:32:73:f3:77:9c:47:2b:61:
         9f:5f:ef:c1:a5:e6:e8:ea:1d:0f:c0:dc:a8:9a:aa:11:95:76:
         ce:b6:13:41:71:02:70:8f:f6:a1:f4:86:04:8a:60:ff:fa:31:
         8f:e1:c7:4c:2f:41:75:63:df:6b:18:b8:eb:0a:07:24:c4:28:
         75:20:e1:21:ca:2c:78:82:b8:5d:8d:20:eb:63:4f:52:93:dd:
         0e:84:02:8a:c1:2d:55:f0:cf:e1:80:e3:1a:3e:33:89:ea:3d:
         63:f2:e5:8c:e3:97:fd:aa:5c:e3:32:be:3a:f7:a5:9e:a2:32:
         ce:79:00:57:71:8d:84:96:18:4a:25:7c:50:7c:41:b6:8d:b4:
         c2:71:bd:6b:58:7d:6a:8a:2f:3a:85:ec:fc:a7:83:4b:65:dd:
         e2:8a:b0:2d:80:ed:1d:60:fc:37:c8:09:5e:8b:0f:9a:2c:3c:
         e2:0b:9e:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0
MjEwMDMxN0IwHhcNMjYxMDA2MjExNDQ0WhcNMjYxMDEzMjExNDQ0WjAYMRYwFAYD
VQQDEw02YWM1NjRjNS1hMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3QdNKigCGRYYfwx3tS+HecfMZSuthCGYV+ur0QiwcPabha19eye3PjD2R3NY
NOcv12IRxBA9t6wk1ek8l5Lzi0b9MToHzAuEo+bJ4VB+Qug9NSnrbGWRfWP9quaX
3Ca1kFW6MoLX5IYLOrp9vh7ppm0CAtzb+AP1qe+xSPOqa3JKRMq5HJLx0h5RM9XK
gucHz/qOX4k4qUC/Gs0pnxUUtdzpNq42fsGgn3CwTKJ8X1+LsrfEbIRxeofsEHIk
HWV7lDcKcDlSTtsEnQzH7UsjrFNJSQhFkm5rfb8/6CK7MKaS30CR6iAYZIxf3Bx6
nsqkTbu1wjGV8DP7K2vW+EaJMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoYkiHf
VrEossQVBfBKGiRyrT30MB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG
RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf
d01nY1Q5OGNsOWRDRUFNWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAa19+xqtQW5tLnZ9KfdvihBiou1O3eTbIwul+oKPUGQA6SYFa3dbb2mkYtsk
PlgM+nuIxpgtCTqWsuSq+xiDksh4oUEGtcAyu4LkMJxtniRP3jJz83ecRythn1/v
waXm6OodD8DcqJqqEZV2zrYTQXECcI/2ofSGBIpg//oxj+HHTC9BdWPfaxi46woH
JMQodSDhIcoseIK4XY0g62NPUpPdDoQCisEtVfDP4YDjGj4zieo9Y/LljOOX/apc
4zK+OvelnqIyznkAV3GNhJYYSiV8UHxBto20wnG9a1h9aoovOoXs/KeDS2Xd4oqw
LYDtHWD8N8gJXosPmiw84gue9g==
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:55:36 2026 by rpki-client