Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
File:                     QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json)
Hash identifier:          dkvr9I5xYHty9Uhb7+ukdbqes2AH5LMYuynGy1FrXH0=
Subject key identifier:   6B:4F:1A:5B:DF:6A:C0:3A:E7:F7:2A:D9:34:37:17:3A:BA:71:12:16
Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
Certificate issuer:       /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Certificate serial:       3589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
Manifest number:          3589
Signing time:             Sun 04 Oct 2026 14:38:27 +0000
Manifest this update:     Sun 04 Oct 2026 14:38:27 +0000
Manifest next update:     Sun 11 Oct 2026 14:38:27 +0000
Files and hashes:         1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: AzObPYJe8LZPvbrp7zjho56MIMo7jQOMkaWhJ7pDoCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl
                          rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13705 (0x3589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
        Validity
            Not Before: Oct  4 14:38:27 2026 GMT
            Not After : Oct 11 14:38:27 2026 GMT
        Subject: CN=6ac264e3-956e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:08:75:cc:93:f3:09:0d:12:a5:5a:d7:f3:
                    4d:a6:87:31:37:5c:7b:e9:17:09:d7:7c:07:4c:3e:
                    58:7d:58:79:6c:2c:0c:1f:3d:25:b9:69:b3:1e:42:
                    5b:2d:31:a2:ca:30:b7:0a:85:eb:df:43:3a:5c:bc:
                    17:c0:63:4d:a2:f7:08:ba:fd:71:82:46:3b:6f:26:
                    e0:31:e2:0d:ac:7e:c0:eb:8e:b5:0d:22:94:41:e7:
                    b0:20:f3:5e:52:b7:4f:71:22:f1:b0:cc:b0:07:4f:
                    1b:99:5c:cc:9b:c0:c4:c4:50:4e:7d:2e:4e:9d:db:
                    36:f4:18:fa:2f:66:cb:4f:20:83:8e:9d:e6:a8:e0:
                    36:09:12:bc:3f:ec:20:f3:3f:b9:4b:ff:9c:7f:ec:
                    65:e0:21:fa:54:bf:ed:ef:90:32:2c:dc:1b:db:24:
                    5b:29:0d:76:61:0b:c9:85:b1:e6:56:3e:4c:2b:6b:
                    91:ed:69:10:a6:e0:e5:ac:b8:27:4c:da:13:6f:98:
                    15:5c:19:ba:6c:ce:02:ef:4a:1f:5d:5f:29:9f:51:
                    b2:f1:6f:07:0d:f6:1a:66:50:4d:d8:44:94:c8:dd:
                    50:ef:28:5a:cc:2b:a4:0c:53:10:68:6c:d5:52:cd:
                    de:55:da:a0:d3:1c:0c:8b:e3:b3:61:58:f5:73:4a:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:1A:5B:DF:6A:C0:3A:E7:F7:2A:D9:34:37:17:3A:BA:71:12:16
            X509v3 Authority Key Identifier:
                keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a0:57:3c:27:3c:28:8b:4d:52:e3:7a:56:65:e0:8d:9b:1a:
         45:63:88:5b:bd:0e:37:49:65:2d:05:b1:00:00:59:5d:1f:48:
         f7:71:e8:cd:a7:b2:61:d0:7b:4c:66:ee:8a:f3:d0:e9:46:0e:
         b1:df:0e:99:6e:8d:44:9d:77:8c:7d:4e:9a:5b:c4:f7:7f:09:
         f9:5f:18:c5:35:14:c5:55:d6:c2:1d:b7:7e:c6:22:87:42:40:
         f0:66:6f:7f:d2:a4:b1:4b:86:5d:8d:b8:0b:21:42:d9:8c:2f:
         a6:c8:ba:17:3b:9d:93:67:a0:95:86:66:72:a6:8d:e0:c8:32:
         e3:05:c1:2d:8d:f8:8b:5b:81:7c:ad:05:91:94:c2:1c:7c:0b:
         eb:5c:ac:d2:16:c2:16:3f:da:13:9d:9d:10:a9:4a:9a:13:56:
         6d:ee:fb:1a:2f:74:3a:5d:b4:7a:a9:8d:89:b7:7a:78:76:8f:
         d5:67:1b:06:a8:11:24:db:f7:e1:7e:d8:25:9c:07:4b:bb:9b:
         1e:14:c4:a2:ed:49:d0:cd:ef:1d:18:c6:1d:de:a1:aa:7d:d9:
         57:0e:d3:fc:89:d3:09:ba:bd:86:e8:dd:a8:64:9a:f6:80:f8:
         0c:22:2c:a4:ea:48:00:0a:b6:d0:a6:3e:58:b6:b4:05:5f:c2:
         f0:f8:56:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYwMkRFNjg0MDUx
NUI2RDgwNTgwHhcNMjYxMDA0MTQzODI3WhcNMjYxMDExMTQzODI3WjAYMRYwFAYD
VQQDEw02YWMyNjRlMy05NTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxykIdcyT8wkNEqVa1/NNpocxN1x76RcJ13wHTD5YfVh5bCwMHz0luWmzHkJb
LTGiyjC3CoXr30M6XLwXwGNNovcIuv1xgkY7bybgMeINrH7A6461DSKUQeewIPNe
UrdPcSLxsMywB08bmVzMm8DExFBOfS5Onds29Bj6L2bLTyCDjp3mqOA2CRK8P+wg
8z+5S/+cf+xl4CH6VL/t75AyLNwb2yRbKQ12YQvJhbHmVj5MK2uR7WkQpuDlrLgn
TNoTb5gVXBm6bM4C70ofXV8pn1Gy8W8HDfYaZlBN2ESUyN1Q7yhazCukDFMQaGzV
Us3eVdqg0xwMi+OzYVj1c0oThwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtPGlvf
asA65/cq2TQ3Fzq6cRIWMB8GA1UdIwQYMBaAFEIB5at9hrxoWvEfAt5oQFFbbYBY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRCMC8xQ0M0RERCNjFE
OEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZHaGE4UjhDM21oQVVWdHRn
RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnSGxxMzJHdkdoYThSOEMzbWhBVVZ0dGdGZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZH
aGE4UjhDM21oQVVWdHRnRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARqBXPCc8KItNUuN6VmXgjZsaRWOIW70ON0llLQWxAABZXR9I93HozaeyYdB7
TGbuivPQ6UYOsd8OmW6NRJ13jH1OmlvE938J+V8YxTUUxVXWwh23fsYih0JA8GZv
f9KksUuGXY24CyFC2Ywvpsi6Fzudk2eglYZmcqaN4Mgy4wXBLY34i1uBfK0FkZTC
HHwL61ys0hbCFj/aE52dEKlKmhNWbe77Gi90Ol20eqmNibd6eHaP1WcbBqgRJNv3
4X7YJZwHS7ubHhTEou1J0M3vHRjGHd6hqn3ZVw7T/InTCbq9hujdqGSa9oD4DCIs
pOpIAAq20KY+WLa0BV/C8PhWRA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:58:49 2026 by rpki-client