Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File:                     QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier:          6/rRRSBGQcsKU4qdlNYZoFHG9108mNsZsbeaODfgdc4=
Subject key identifier:   F6:3A:8A:3D:9D:1B:05:E4:02:A8:39:0E:6D:6D:4C:D6:FB:B3:AC:C0
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer:       /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial:       08E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number:          0824
Signing time:             Fri 04 Sep 2026 21:53:04 +0000
Manifest this update:     Fri 04 Sep 2026 21:53:04 +0000
Manifest next update:     Fri 11 Sep 2026 21:53:04 +0000
Files and hashes:         1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: 9+o5A87ph1YcY61ia9U9jjBqfntyuPTfCzbadlSI+Dw=)
                          2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: fu29/u9VpVu7rmcHbFU0N0wrb7076t3GVXEP5c8rVMA=)
                          3: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: SldeaCZGSwTt8m25XecGitCIUSJt0D3MD87GNQPgihE=)
                          4: 632982C478E411F0B36C2173C4F9AE02.roa (hash: qJHNInkkLUDjF8Std1fFlLs2dkTvsMn5hYhhfgfxfDk=)
                          5: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: tBd/IumJTmt6lgfO1XEOgc68XMugh0pEAslIa6KWSe4=)
                          6: 03BA8B36824411EF94479387C4F9AE02.roa (hash: yblVKBomAmKdFLx7E1GhA7lmIOLPIfTo5ijL1IDIgeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
                          rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 21:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280 (0x8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
        Validity
            Not Before: Sep  4 21:53:04 2026 GMT
            Not After : Sep 11 21:53:04 2026 GMT
        Subject: CN=6a9b3dc0-eb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:33:b1:87:f3:9d:b4:eb:74:50:40:48:0a:51:
                    cd:a9:70:23:e6:91:29:ef:cc:cf:5f:af:89:86:6a:
                    3b:96:90:02:2d:82:7b:15:9d:63:8d:24:40:c2:23:
                    35:a8:94:0a:96:05:47:ea:27:4b:4f:70:15:dc:1d:
                    2e:25:ff:9c:ed:64:0c:a9:ed:30:6b:a1:ba:81:72:
                    2d:ca:ac:e3:2d:e5:2b:c2:06:a7:d4:af:d5:89:c7:
                    bc:94:02:d3:ed:9e:07:b6:fe:f6:ff:7c:bf:33:8b:
                    d6:bb:31:46:ca:91:8b:aa:9a:7a:61:9f:96:a3:4b:
                    e7:a9:d7:35:06:b9:8c:fe:c1:b3:2b:cc:16:fc:1a:
                    4f:74:e6:ac:27:c0:b7:f4:17:46:b1:cd:e1:ed:b8:
                    73:6d:d1:94:c4:c9:f3:a3:fe:b3:50:3e:4b:a9:10:
                    9b:7e:78:0d:f4:69:e5:6f:56:b1:08:73:80:a8:87:
                    d7:be:aa:b4:bd:64:55:ec:72:ab:89:56:59:c9:18:
                    19:4f:26:93:32:64:69:5e:4f:b6:62:74:45:2f:e8:
                    d5:4d:90:cb:5f:0d:6b:66:2b:19:87:f2:54:74:d0:
                    21:55:7f:40:29:2f:22:69:37:10:14:b3:90:ab:4c:
                    09:43:5c:ff:c0:90:fa:b8:26:e2:44:3b:ea:f5:57:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3A:8A:3D:9D:1B:05:E4:02:A8:39:0E:6D:6D:4C:D6:FB:B3:AC:C0
            X509v3 Authority Key Identifier:
                keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:1e:26:8d:00:66:dc:cc:b5:7c:7a:e7:f4:b3:12:53:c5:
         09:04:6d:31:e8:12:61:c9:cc:37:04:3c:5d:88:ce:0b:de:e8:
         92:2e:47:6b:df:7a:d1:6a:99:09:da:cc:c2:36:fa:4d:b3:45:
         92:f1:8d:36:df:bc:c9:66:b5:d9:19:bf:c3:65:9f:b4:ff:d4:
         b9:9f:38:53:ac:b2:cd:26:5e:67:5e:de:ed:04:ce:54:0e:df:
         20:ba:64:59:fc:0f:fc:cd:49:f5:1a:ab:68:73:61:ba:60:dc:
         33:25:a7:e0:a0:2b:7b:41:ee:32:5c:dc:29:16:39:e2:8f:dc:
         6f:2d:65:cd:f4:82:1b:89:f6:32:22:1c:9b:67:62:5b:ab:31:
         1a:ef:72:b0:cb:6d:9e:d3:46:9a:d9:c1:ae:a5:ef:2d:bc:72:
         39:84:3a:53:16:b6:cd:e3:44:c9:53:fa:9f:0e:0e:bf:98:c8:
         a2:a0:d0:c4:0d:03:fa:a9:b7:43:3d:16:27:3a:75:ba:ce:cf:
         e8:1b:10:04:2c:99:d5:60:dc:13:b8:95:87:26:c0:31:8b:93:
         90:c4:62:20:11:c6:e8:df:23:a1:fc:78:bc:9c:1e:33:5b:62:
         90:b5:7c:41:e1:a0:ec:06:11:2d:2d:1b:3d:7e:1c:46:b4:f9:
         23:f8:93:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:56:46 2026 by rpki-client