Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
File:                     q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json)
Hash identifier:          jOIPJi9Kh02npFM2U/epPPB4W+BNNmUBFfRGp+HLYg4=
Subject key identifier:   1C:4C:8A:31:54:81:11:4C:95:32:56:2F:38:24:7B:13:6D:8F:61:D6
Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
Certificate issuer:       /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
Manifest number:          0111
Signing time:             Sat 03 Oct 2026 06:41:23 +0000
Manifest this update:     Sat 03 Oct 2026 06:41:22 +0000
Manifest next update:     Sat 10 Oct 2026 06:41:22 +0000
Files and hashes:         1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: PCD4NCxPYb1lHCf4dMh4pIyszX5b6MiYYKfrTl2OSTU=)
                          2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: uj9BtH+Gx30PB+Rd8YZACkYl9VczoWS9fHCOeF8FuCQ=)
                          3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: N+2dubiMuqB/4gWD0ppVA6QZJO1Q/1zqaBt+voV0zVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
                          rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
        Validity
            Not Before: Oct  3 06:41:22 2026 GMT
            Not After : Oct 10 06:41:22 2026 GMT
        Subject: CN=6ac0a392-32a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:ee:82:7b:19:8d:43:b0:b1:be:bf:32:e6:
                    01:6d:0e:b3:01:1c:ad:06:90:18:f8:f3:4b:b0:1f:
                    9f:7c:90:95:9d:d2:3b:6e:26:32:50:a6:9d:64:6a:
                    af:95:ff:3a:70:60:8a:fe:56:c7:40:f1:b4:f7:2c:
                    a3:cd:4f:fc:9e:33:17:62:e6:17:30:7c:2f:36:cf:
                    63:6a:0f:e7:77:50:52:69:13:b5:8f:67:9e:1f:7c:
                    39:dc:95:c7:ba:49:94:2e:4c:0c:df:94:dd:73:19:
                    b6:76:3e:63:62:e7:d6:20:9f:0e:ff:ad:76:3d:e4:
                    21:c2:0e:be:0c:00:bf:77:82:44:e6:2e:0f:bf:41:
                    91:17:74:94:ab:b8:e8:f7:f3:6e:5a:44:5d:1f:3f:
                    72:1f:c7:c6:a7:1d:49:32:a8:58:99:14:65:cc:53:
                    82:b8:e3:cc:b4:03:b9:03:70:45:21:30:de:31:81:
                    ba:06:4b:97:59:d1:5f:22:db:c7:2b:ba:e9:9a:71:
                    cf:46:2e:61:e4:88:0e:32:13:d5:34:ef:de:d9:0d:
                    c5:8c:92:ad:47:92:85:93:15:90:f2:19:cf:27:b8:
                    c1:b8:38:99:7b:9a:45:63:96:0a:e5:db:92:ca:17:
                    b8:fa:ae:62:dc:9d:92:9c:d2:c9:5b:6e:57:0f:c7:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4C:8A:31:54:81:11:4C:95:32:56:2F:38:24:7B:13:6D:8F:61:D6
            X509v3 Authority Key Identifier:
                keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ef:5b:45:d1:68:06:f5:18:70:ea:ba:ba:27:87:e1:a8:06:
         2b:c4:08:18:13:b8:d4:b1:c0:c8:06:8b:a4:9d:8d:f2:76:dc:
         ba:c8:a0:44:42:9e:ca:ec:1a:97:fa:28:39:0e:da:ba:f2:b5:
         6b:c6:dd:97:e1:3d:4c:0f:a6:2e:70:86:54:95:cf:54:e4:28:
         7f:be:8c:1c:0c:b3:c4:41:7c:a0:99:ce:1f:a6:df:75:6d:48:
         85:fb:3e:a6:ba:5a:0d:14:be:d2:7d:9b:77:b6:1d:d0:92:7d:
         5c:6b:31:a5:d5:2b:fb:48:a9:a9:b3:2d:14:5a:d1:76:a5:98:
         03:92:a3:d0:6e:83:2a:56:ea:30:f3:c1:1e:57:05:da:78:fe:
         5e:09:7a:81:28:49:12:09:04:5e:06:c3:ee:53:9d:71:ab:37:
         b0:f4:9e:a1:3c:d4:8b:2b:a1:12:a4:b5:aa:a6:66:a6:5f:ff:
         02:1d:bb:44:39:38:f5:7d:1e:dd:54:a5:69:05:c2:92:d5:ee:
         4e:e4:03:ec:42:97:c5:c4:dc:80:af:08:57:ce:e5:b6:3d:47:
         40:a0:37:6f:61:54:51:e4:03:e3:57:17:0c:67:a6:ce:34:e8:
         df:41:16:f4:1f:80:df:e3:98:85:0d:84:c3:b3:83:8d:c2:2b:
         32:31:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:21:04 2026 by rpki-client