Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft
File:                     Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft (raw, json)
Hash identifier:          3Sc8dkaz7B7AXiOsMQrmusav1Pk3VOWJpG8ao8gTM+w=
Subject key identifier:   3A:89:0F:F3:34:95:6E:AC:62:7D:59:6E:05:B9:C8:42:CC:A2:26:1D
Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9
Certificate issuer:       /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9
Certificate serial:       091A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft
Manifest number:          153E
Signing time:             Sun 04 Oct 2026 18:48:13 +0000
Manifest this update:     Sun 04 Oct 2026 18:48:12 +0000
Manifest next update:     Sun 11 Oct 2026 18:48:12 +0000
Files and hashes:         1: Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl (hash: uXzFUyo0O5GfJQh0AJtfvn58mmqPsTlzAeBSz9JEbZY=)
                          2: B65A4FACE18C11ECB1697F55C4F9AE02.roa (hash: PspzdOy4PTus2IqtlUC/P0k1pJS8B8TT6JJKRfUFbvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl
                          rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2330 (0x91a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91580A1, serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9
        Validity
            Not Before: Oct  4 18:48:12 2026 GMT
            Not After : Oct 11 18:48:12 2026 GMT
        Subject: CN=6ac29f6d-93ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:fa:53:49:d7:b9:ca:92:6b:0f:4f:cb:b3:
                    9a:84:d8:53:53:70:c5:60:3a:3b:f7:91:d2:19:1a:
                    fa:11:28:1c:e1:82:6a:47:b4:dd:3e:58:73:01:4d:
                    1f:36:bb:c5:63:bf:bb:be:ab:b0:de:b6:14:d0:43:
                    38:ed:f7:23:d3:ae:ee:56:9c:fc:8e:3f:6a:60:4e:
                    37:0e:3f:a1:81:0a:8c:52:ec:78:b3:c8:54:70:5e:
                    bd:e7:87:f7:b9:37:50:42:04:57:94:88:6c:8a:a9:
                    f0:2c:59:9f:8a:27:76:d7:69:73:d3:c4:3e:12:a1:
                    fa:1e:49:0e:e0:1c:fb:38:43:ca:5a:1b:9b:52:77:
                    fd:85:02:64:cb:a3:de:73:90:c7:d7:2d:cd:80:a8:
                    99:1e:6d:89:e7:22:af:43:eb:0b:b5:6c:e0:a8:4a:
                    98:c8:af:6b:5f:3d:46:7b:df:8f:77:58:6b:50:e4:
                    e5:1f:7e:e2:18:f1:80:00:29:b2:b8:45:5c:43:ab:
                    4c:db:4d:35:39:59:a7:71:80:be:3a:a8:b6:6f:53:
                    e9:58:34:80:58:48:22:32:24:ca:75:5f:80:fa:04:
                    68:cd:34:29:75:61:06:0b:75:7c:04:85:de:3e:3c:
                    39:59:0a:45:15:ff:2b:d0:f5:4b:2b:30:20:1a:d8:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:89:0F:F3:34:95:6E:AC:62:7D:59:6E:05:B9:C8:42:CC:A2:26:1D
            X509v3 Authority Key Identifier:
                keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:d9:21:21:15:99:5d:5b:43:03:e6:ba:5c:ad:77:d0:81:
         af:f1:db:73:1b:8a:95:98:07:df:a4:af:24:d2:ff:67:74:95:
         23:dc:f1:34:68:73:d9:8f:56:41:b2:c9:69:2a:a1:44:c8:84:
         61:69:4e:45:cf:09:41:9c:2b:b0:14:bd:11:59:ab:4f:b8:46:
         01:82:fd:b0:77:29:7d:f9:2b:50:9f:d5:1b:da:89:7e:39:2d:
         00:2b:61:9b:fc:0a:7e:1a:33:97:14:87:d3:9d:dc:1d:3a:ee:
         90:52:2c:0e:fe:4d:8d:77:c5:ab:de:d0:d2:58:5d:82:82:b6:
         4f:49:5a:20:54:b6:a8:a7:30:56:67:d5:e4:6a:a8:c4:fe:76:
         75:3b:b1:6e:e3:04:d3:1b:5a:6e:2c:06:0d:25:46:5c:d3:0b:
         fc:25:e5:64:3b:69:17:aa:7a:40:77:80:89:69:4c:c7:c9:6a:
         3c:51:c6:c2:87:90:ea:9c:44:6e:cd:17:ea:ad:69:dd:0a:b6:
         18:d1:e0:fd:fe:4b:31:fa:8c:44:48:3d:10:fa:c0:ab:6f:c9:
         2d:34:fc:36:a7:32:82:d0:2a:6d:a8:48:26:ae:1e:c3:0c:84:
         ec:63:ae:fe:31:b1:0e:85:86:0a:8f:7e:dd:ff:38:3a:cf:73:
         b6:26:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:08:54 2026 by rpki-client