Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File:                     Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier:          QCYQ+aYqunL/aN1rMhUHdOJp/J31rCK4DuMRRaxeauI=
Subject key identifier:   43:4F:08:70:85:B3:85:85:12:FD:61:CC:72:AE:5A:05:EB:EB:5F:98
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer:       /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial:       121E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number:          1212
Signing time:             Sun 04 Oct 2026 17:10:12 +0000
Manifest this update:     Sun 04 Oct 2026 17:10:11 +0000
Manifest next update:     Sun 11 Oct 2026 17:10:11 +0000
Files and hashes:         1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: ZjEpALBeT1TsSyDjndbGZL4OOp7iDfycB9rsROCmAGA=)
                          2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: p2avfwbA5rKR8w+8rtSYTQz3CfMf5vT3jgg0mIj4V8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
                          rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4638 (0x121e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Validity
            Not Before: Oct  4 17:10:11 2026 GMT
            Not After : Oct 11 17:10:11 2026 GMT
        Subject: CN=6ac28874-9a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:1c:4d:8d:0f:37:24:e7:c0:35:71:59:fd:
                    ed:ea:4f:5a:11:6f:6e:b5:07:7f:f5:47:a1:b4:80:
                    85:2c:59:b0:9e:96:e8:b4:64:6e:12:4c:9b:a9:e9:
                    67:17:d4:63:33:be:ee:f0:47:e8:eb:48:72:82:70:
                    38:94:59:37:37:0c:e6:2f:ac:10:fd:a2:11:59:0e:
                    08:c7:78:25:8a:4b:95:22:04:d5:f6:2d:4b:c7:33:
                    c8:da:43:a8:59:2e:52:94:ad:03:7a:fa:5b:b3:bd:
                    3f:84:06:29:c1:73:b8:86:3a:06:30:50:54:39:b5:
                    e4:41:e7:38:1f:01:d4:22:c5:08:ee:72:62:9b:5d:
                    5f:21:cb:05:69:43:b2:f5:8a:7f:05:69:32:43:83:
                    ad:e2:ff:27:ad:89:d1:66:c7:f0:a7:de:6a:58:33:
                    6e:11:f1:d7:78:c5:65:6e:27:ce:61:73:1c:d3:5d:
                    a4:05:7c:41:a3:a3:bd:c8:df:ce:e0:ff:b4:c5:a9:
                    46:59:18:3f:c5:7a:b7:cc:06:2e:35:f4:44:fc:75:
                    d2:39:c0:8c:8a:21:a2:ad:e3:4e:7a:28:3a:b9:23:
                    39:ef:78:63:e1:10:88:33:7a:61:66:61:ff:42:43:
                    f3:36:df:5b:da:66:4a:3d:e8:23:e8:39:db:80:06:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4F:08:70:85:B3:85:85:12:FD:61:CC:72:AE:5A:05:EB:EB:5F:98
            X509v3 Authority Key Identifier:
                keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:48:a3:32:87:a9:8d:28:2c:72:cb:8c:3b:7c:bb:10:a9:d2:
         77:4c:69:7e:62:de:04:c4:c9:a6:73:fb:48:7b:75:b4:1f:f6:
         10:06:0f:3c:04:65:8c:8f:17:47:c6:f0:c8:70:41:45:30:cf:
         4d:81:1d:9b:be:ed:31:99:0b:e6:e8:e9:20:7f:5c:3d:13:55:
         89:3b:11:93:66:59:ab:3b:b2:45:b2:67:74:0b:19:d9:d3:ec:
         b7:d9:51:83:8d:74:b6:cf:dd:7b:d7:2b:09:6e:22:ed:43:bb:
         08:1c:23:ac:3e:08:33:b5:0f:44:4a:50:d1:c0:8c:05:99:bb:
         29:84:9b:6c:5a:b4:14:5d:0d:91:1e:50:13:99:35:db:f3:d9:
         63:db:56:c1:ab:7a:f9:ba:fc:2f:1c:46:9e:e0:aa:f2:28:58:
         a1:cb:f2:e6:dd:1b:66:e7:35:64:66:99:b8:42:92:85:c6:e1:
         e7:2b:64:ae:17:34:b7:41:5e:b6:58:33:0f:1b:49:fd:98:0f:
         f7:e3:f4:68:0b:34:33:df:28:67:eb:31:58:d6:94:bb:cf:de:
         da:ec:63:8e:a8:2e:4b:c7:68:6d:88:8a:91:9f:25:0e:67:ed:
         32:15:53:46:53:c4:cb:ad:b8:39:c7:5c:f8:4f:1f:1b:27:ad:
         80:81:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:03 2026 by rpki-client