Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft
File:                     QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json)
Hash identifier:          FY5jPeHGIsSzEhJCZ65poM5cJasuz1K9ijlvlqnuMWk=
Subject key identifier:   EC:84:E8:19:D3:A3:6B:97:9B:B0:96:67:CE:DC:AB:39:47:94:0E:F2
Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54
Certificate issuer:       /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
Certificate serial:       055D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft
Manifest number:          054C
Signing time:             Thu 10 Sep 2026 23:19:55 +0000
Manifest this update:     Thu 10 Sep 2026 23:19:55 +0000
Manifest next update:     Thu 17 Sep 2026 23:19:55 +0000
Files and hashes:         1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: l8BXiIfuPCpkoVoodoAhL5aMfoQemYeETzM2oibU1JY=)
                          2: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=)
                          3: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: l82fYq1x4u49vmBmNnG130HVCjkEDSzOMLfbwYG7C8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl
                          rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373 (0x55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
        Validity
            Not Before: Sep 10 23:19:55 2026 GMT
            Not After : Sep 17 23:19:55 2026 GMT
        Subject: CN=6aa33b1b-65b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:1f:26:9f:89:ec:b8:93:29:5f:ad:cd:ef:
                    c6:80:14:e1:23:0e:c0:ad:f4:58:ed:e4:8a:cc:dd:
                    dc:be:91:e7:5c:88:59:9d:43:8b:e4:cd:fb:61:bd:
                    61:29:e1:7a:21:01:e0:99:d4:53:87:02:46:2e:74:
                    99:ea:0f:13:62:a3:cd:31:ad:a6:f3:59:d2:7c:4f:
                    a6:30:e1:2d:08:0a:f8:5f:e1:6d:87:04:c3:7f:4b:
                    b6:4e:75:de:44:17:4f:27:56:a8:e7:22:8d:65:e5:
                    bc:84:0a:91:5c:ae:e5:be:65:63:4d:29:7f:c2:e9:
                    81:6d:04:89:e0:2c:39:c4:02:5a:eb:1a:6a:8f:65:
                    0a:ce:c6:18:57:f8:b2:f0:cb:71:1e:04:32:5a:10:
                    71:91:e3:cf:00:58:52:b8:98:00:72:bb:5e:46:ff:
                    47:40:da:6f:b7:dc:a4:07:71:0f:87:70:d8:be:7a:
                    79:c8:2f:9a:4f:e0:b5:5d:ab:d6:72:2b:e1:b0:a7:
                    2f:fd:bb:5e:e5:c8:37:75:c8:96:71:88:29:69:e7:
                    87:59:95:7b:62:a0:2a:b4:ae:6c:aa:41:71:a8:38:
                    d9:0e:ff:5e:f1:10:d5:34:c5:ed:bb:95:48:e3:f3:
                    d0:1c:ec:5d:b0:bb:88:ad:23:c5:65:fc:17:71:d0:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:E8:19:D3:A3:6B:97:9B:B0:96:67:CE:DC:AB:39:47:94:0E:F2
            X509v3 Authority Key Identifier:
                keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:36:69:e9:72:41:6f:38:df:4d:c6:4a:32:43:5b:e2:76:87:
         18:f4:42:ef:3c:15:e5:7b:1d:d9:8f:7f:64:fb:cc:2e:a5:b5:
         ea:95:3e:17:d2:c7:26:b9:4e:19:8f:44:cb:77:8e:50:28:2f:
         23:19:c3:3f:c1:7d:26:1a:1e:42:35:a8:8a:f8:5f:9a:be:8a:
         2c:b3:6c:8f:37:53:12:d3:e9:c6:dc:f3:33:72:df:c0:53:6e:
         f9:e9:ca:74:72:e9:26:61:f5:e7:9a:46:5b:81:1d:c3:37:7c:
         1f:99:e2:e4:9b:12:a3:07:d1:9c:85:0c:2d:f8:1c:4f:41:db:
         96:9f:71:41:9b:05:e7:b2:54:73:5e:cf:f6:ed:cf:00:16:82:
         c6:70:a7:c8:55:ba:bf:ad:15:31:9f:23:89:0d:73:b6:6f:80:
         b9:aa:d9:6a:14:43:ba:7e:01:b5:86:bd:44:59:6c:2f:b2:c0:
         70:50:7b:bb:70:43:b5:b3:a1:0e:70:13:69:06:69:2a:46:00:
         11:ae:56:5c:21:3d:84:c6:4a:c2:19:e2:9b:59:5a:26:ca:51:
         08:c5:a2:b3:36:64:dd:c6:5f:d7:24:34:06:cf:f7:0b:c3:e4:
         78:9b:66:27:df:b7:25:4f:e5:ab:1d:b8:18:60:ca:6c:8d:63:
         8e:75:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:54:23 2026 by rpki-client