Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
File:                     QG4t-6oOoAfdxmmT8sezCNoKGlc.mft (raw, json)
Hash identifier:          dytRALbh32CxxtXEN9J60x8AEKpG5aia0FyD+Ly7hlw=
Subject key identifier:   26:45:BA:3E:0D:3F:47:46:54:E7:CF:65:8A:F9:AE:23:E5:9A:5B:79
Authority key identifier: 40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
Certificate issuer:       /CN=A91315C1/serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Certificate serial:       0CD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
Manifest number:          0CCD
Signing time:             Sat 10 Oct 2026 18:33:13 +0000
Manifest this update:     Sat 10 Oct 2026 18:33:13 +0000
Manifest next update:     Sat 17 Oct 2026 18:33:13 +0000
Files and hashes:         1: QG4t-6oOoAfdxmmT8sezCNoKGlc.crl (hash: tLWX2hv9f2HgOtuGKiq4Zo7Xyz18dRe/svSTz1Y2g4k=)
                          2: 9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa (hash: g//qqw4vslub3wSOjjjwSfRWoS3+1KaYhkbV1Us5KAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl
                          rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3288 (0xcd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91315C1, serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
        Validity
            Not Before: Oct 10 18:33:13 2026 GMT
            Not After : Oct 17 18:33:13 2026 GMT
        Subject: CN=6aca84e9-b80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a6:af:b3:e2:d6:cc:6c:ef:f3:db:41:f9:d6:
                    29:df:9d:f2:94:45:47:47:b5:42:66:db:73:45:bb:
                    54:2f:cf:85:cd:e3:92:ee:3c:6f:d9:3e:fe:7d:b3:
                    e5:ee:34:71:a0:ec:02:81:c8:5f:c7:5b:2f:bb:47:
                    e4:e5:eb:cc:91:a7:76:e7:cb:0d:c6:a4:58:ef:07:
                    45:ff:64:f8:a5:30:31:08:b3:8b:50:c4:54:35:3c:
                    e4:d2:82:5e:ed:3c:82:be:87:92:9b:06:08:7b:45:
                    72:5c:87:c5:bd:80:41:5d:1e:a3:9a:12:ba:e2:88:
                    24:bb:9c:88:4a:48:57:7c:5c:60:f1:f1:30:73:0f:
                    ab:fc:df:aa:d1:a2:36:24:24:a4:55:2b:d2:21:67:
                    fd:2d:d0:5f:50:f8:97:8a:20:58:74:ad:9c:5b:7d:
                    09:9b:58:86:b5:f4:53:6d:65:ad:23:2e:67:e5:4c:
                    fa:8c:1c:42:79:4a:5c:dc:9e:db:d0:ad:ec:1c:a3:
                    74:5a:d3:97:5e:2c:10:73:87:fa:db:75:69:9b:98:
                    08:03:e2:07:aa:99:80:0c:42:5c:c3:a5:7f:a7:30:
                    62:9c:a2:0c:c6:18:e2:68:74:dd:c5:8a:b9:94:73:
                    17:4e:b0:59:a5:9e:de:37:82:9b:92:a9:e7:d5:c0:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:45:BA:3E:0D:3F:47:46:54:E7:CF:65:8A:F9:AE:23:E5:9A:5B:79
            X509v3 Authority Key Identifier:
                keyid:40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:56:d2:f3:ac:68:74:5d:73:88:77:e7:f0:1a:ab:d6:ff:16:
         b1:de:7c:a8:b1:ac:dd:cb:21:b5:82:a8:d7:f2:14:d4:3d:7a:
         0a:74:28:27:cf:32:2c:1d:02:0c:a5:9c:d2:03:4a:cf:d3:8e:
         12:f8:ac:33:82:14:e3:d5:32:10:da:bb:65:f3:f4:ad:f9:6f:
         66:1a:94:94:76:39:77:f8:e4:ca:12:ec:31:8f:a2:a1:fd:36:
         47:88:6c:19:73:1e:7a:a1:ea:65:b5:1a:f2:84:92:f5:5a:30:
         d7:ca:d8:c2:13:a4:6e:14:a5:73:62:5d:36:65:06:ac:76:c7:
         ef:53:34:9b:3d:0f:da:dc:08:35:d4:de:cc:83:06:b3:a7:e3:
         eb:63:74:d9:7c:08:6d:d8:2d:73:7b:c9:31:30:29:86:ed:1f:
         ee:06:1e:f2:81:a8:28:d0:a9:c7:4e:46:ed:0f:da:6b:41:4a:
         ab:fd:65:5e:00:a4:c6:06:7a:b1:31:0a:38:d7:27:72:d0:53:
         86:39:0b:3f:36:ea:32:b1:82:d5:df:88:18:ba:c0:df:a2:b8:
         b6:e9:8a:4f:c6:06:f0:a3:28:d8:8b:25:00:fd:24:0e:fc:ce:
         3a:f6:6a:d0:51:89:02:04:fc:1c:aa:10:a5:73:6c:60:91:b9:
         e8:57:9c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:12:50 2026 by rpki-client