Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File:                     qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier:          gpcLq9E8UBw+yGO35YkJ2OkI9mbfJ1fDY3iAXAqD6Pc=
Subject key identifier:   34:A2:1B:AF:9A:FC:BD:04:22:8A:9E:D1:36:FB:2B:66:E1:2C:17:04
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer:       /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number:          0261
Signing time:             Thu 03 Sep 2026 02:21:27 +0000
Manifest this update:     Thu 03 Sep 2026 02:21:26 +0000
Manifest next update:     Thu 10 Sep 2026 02:21:26 +0000
Files and hashes:         1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: +eQ19uEG2OKt3kvIr+mZ4j6xESLKk2aHCnYsEox/KMo=)
                          2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: sg9oPmLz+e1I++pj4J6JK8hEo+G19aKZ3VTIZKtFIy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
        Validity
            Not Before: Sep  3 02:21:26 2026 GMT
            Not After : Sep 10 02:21:26 2026 GMT
        Subject: CN=6a98d9a7-f356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:90:2c:d6:46:8a:b7:46:1f:57:fd:2e:42:3b:
                    19:30:2d:31:74:70:5c:fd:8d:bc:fb:77:0f:b4:f6:
                    3c:c4:ed:f9:52:2f:b7:ea:ff:d1:34:44:f5:8f:a1:
                    1f:de:2f:39:81:3e:24:36:ad:bb:07:28:13:98:71:
                    6b:02:da:02:d8:f0:3c:bd:35:ec:d7:53:cd:08:6f:
                    b0:ab:0b:68:89:ef:86:e8:13:80:47:81:73:57:68:
                    3e:8b:87:4a:d3:47:7a:14:85:1d:09:16:4c:1d:06:
                    9e:84:a1:bb:80:bf:b6:d3:b5:06:fd:a7:a9:f0:4d:
                    8f:e9:72:f3:bb:e6:09:11:71:34:7e:38:57:77:e2:
                    c3:3a:19:1b:eb:b5:03:cc:45:d3:f2:e0:1c:a9:1d:
                    01:d5:00:96:47:b4:8e:0e:9f:3c:63:a1:6b:39:a5:
                    06:9c:05:cf:a5:ad:89:e9:28:14:9b:e4:56:f0:2c:
                    00:16:0f:5f:86:51:c5:4c:f2:4e:8b:08:8d:e9:a1:
                    66:5b:28:a6:37:1f:cb:be:6c:0b:f7:5e:4e:42:f2:
                    67:81:d6:f0:f7:7d:ca:cb:6d:14:58:ba:2c:d5:df:
                    55:d6:85:6f:fa:6f:51:1f:f4:bf:86:65:3c:a4:da:
                    cc:1b:3e:9d:06:8a:a8:65:6d:b0:f7:22:6c:95:92:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A2:1B:AF:9A:FC:BD:04:22:8A:9E:D1:36:FB:2B:66:E1:2C:17:04
            X509v3 Authority Key Identifier:
                keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:de:26:15:c5:8a:6f:97:1d:58:09:a1:b9:c8:d7:bc:fc:
         58:69:da:a0:73:db:99:ed:2b:f3:d1:78:0c:5b:39:b5:d7:52:
         4f:8a:e6:71:97:8b:de:2f:38:e7:8c:ba:7f:aa:88:f4:d6:d7:
         8d:eb:f7:21:5e:b7:e5:26:5c:12:85:0c:b3:1f:d8:fb:eb:81:
         fb:42:a7:e8:6c:3a:b4:eb:4e:69:c9:74:b8:4e:fc:f5:40:d9:
         bc:04:07:0e:9b:b6:08:e6:7f:fc:a3:06:ad:6b:2a:2f:e9:8f:
         3c:ec:16:98:71:d3:e1:93:f5:84:b3:dd:e6:65:f5:02:e6:02:
         6e:e1:6e:58:59:03:42:3f:d3:9e:7c:73:a9:aa:0a:94:87:ce:
         9b:b6:c1:49:79:58:94:fc:eb:ba:33:b2:78:d9:fc:41:7e:e9:
         59:6b:cb:89:54:b6:ee:7e:ea:15:be:71:38:a3:c8:2b:8f:ce:
         c0:f0:e5:fc:98:66:8d:34:42:23:6b:8c:2c:2c:84:7a:ee:39:
         0f:10:b4:b6:ce:7c:bf:c1:16:d9:d3:00:d8:56:ab:82:91:f0:
         d9:56:38:59:2a:44:cf:04:3a:88:89:10:c1:af:dd:a2:aa:34:
         8a:1f:d3:19:68:ea:c2:a5:5f:ac:37:ef:24:54:de:af:47:bf:
         95:cf:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:59:15 2026 by rpki-client