Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File:                     qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier:          vrS11Ei1PM7s22tuZTSZZkRkyjD01MswdlcmEzMwgpM=
Subject key identifier:   7B:C6:5D:24:D7:5E:88:9A:CE:99:71:52:3B:99:06:CC:72:2F:4C:70
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       030B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number:          02FE
Signing time:             Tue 20 Oct 2026 21:49:40 +0000
Manifest this update:     Tue 20 Oct 2026 21:49:40 +0000
Manifest next update:     Tue 27 Oct 2026 21:49:40 +0000
Files and hashes:         1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: YMEK8re0bRSe+Dl2NosaR/7lHcaAU+lkFA0r13L5dps=)
                          2: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
                          3: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 21:49:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Oct 20 21:49:40 2026 GMT
            Not After : Oct 27 21:49:40 2026 GMT
        Subject: CN=6ad7e1f4-1b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e8:3c:ad:c4:6a:14:9f:36:61:e9:69:89:8f:
                    49:88:d3:94:e3:17:55:93:a2:ae:38:d5:3c:57:5f:
                    99:9c:28:a2:61:b7:90:af:2e:8b:0c:b2:21:05:4d:
                    35:a8:08:d2:0d:17:9b:b1:97:6a:8d:0f:24:fc:3f:
                    8c:23:3a:40:70:bd:6e:11:ee:4b:81:e1:e1:2e:54:
                    4a:c9:26:32:9d:3a:a7:5c:ff:68:d5:72:67:4b:f3:
                    44:11:b4:ca:6b:d9:91:b6:33:f7:eb:e7:ea:ef:e1:
                    15:b3:10:91:4a:37:f2:9d:12:8c:35:95:c4:9a:b7:
                    78:08:e0:40:4b:66:68:4a:4b:49:7d:79:76:05:25:
                    6c:d2:5c:dc:df:d3:f6:c1:27:ea:2a:29:52:b8:af:
                    21:1e:46:19:f8:52:75:84:19:fb:50:43:2b:87:65:
                    fb:c5:3e:0a:19:b0:64:4b:31:3f:e7:27:b6:eb:3b:
                    f3:1b:58:bf:d9:81:da:c4:3c:50:7b:2c:9b:f4:56:
                    da:66:5f:9f:3e:9a:66:46:3b:d1:1a:9b:c9:97:fe:
                    7b:21:b6:79:78:9a:66:c2:57:20:cf:df:51:7d:b0:
                    ab:e0:12:d6:0d:36:ca:73:de:1f:f9:e6:02:25:e2:
                    61:c6:55:4e:f0:7c:4d:0d:18:ae:92:76:59:17:68:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C6:5D:24:D7:5E:88:9A:CE:99:71:52:3B:99:06:CC:72:2F:4C:70
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:71:7e:8b:86:b6:b7:9a:84:77:50:dd:8c:a7:54:2b:f5:c2:
         a2:1a:7f:b9:53:b3:e0:f6:fa:de:e4:5a:41:2a:e8:7e:fc:89:
         0c:70:6c:3c:9f:7e:bd:82:c5:2f:54:97:85:d2:7a:7e:78:0d:
         f7:64:79:f3:6f:0b:b5:5f:fe:f8:98:aa:f1:ee:02:97:f5:8d:
         e0:ec:62:03:ad:91:83:24:d2:cf:31:98:95:3a:ed:c6:7a:f4:
         ea:db:a3:9d:58:e5:dc:03:eb:87:1e:34:e8:05:6b:39:2d:b2:
         31:f9:87:d7:78:3a:27:7d:30:f0:6d:44:cb:31:0a:3d:d1:e4:
         33:83:e7:70:5c:9c:1d:e1:8e:a8:60:81:92:d5:9f:c5:06:a2:
         fb:3f:01:78:f0:5a:f3:1c:d6:fc:38:c6:aa:96:5a:ce:28:a7:
         82:f6:f7:89:9c:77:ec:7b:04:af:35:ac:21:a8:cc:60:53:df:
         ce:dd:fc:45:95:82:ec:8b:9a:3f:38:f7:cf:97:d3:e9:e8:ad:
         cd:31:b9:e5:16:83:40:84:11:a2:ba:75:23:f3:07:83:3a:6b:
         cf:8e:22:c7:90:dd:e3:7e:b4:b6:a6:7b:da:91:a0:26:35:9f:
         11:70:da:ea:92:eb:e0:c4:d9:10:d8:55:3a:b2:d5:20:99:c2:
         28:8a:24:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:55:20 2026 by rpki-client