Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File:                     5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier:          C4T/RdMCNGdVtgTpzE4SMffZ4bCy9iwIyR9eWCzm0dI=
Subject key identifier:   9C:E4:1F:AA:E5:3D:0B:2A:E7:26:06:3C:A4:1E:75:A9:60:B4:5E:D9
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer:       /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial:       09AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number:          099E
Signing time:             Sun 04 Oct 2026 20:01:13 +0000
Manifest this update:     Sun 04 Oct 2026 20:01:12 +0000
Manifest next update:     Sun 11 Oct 2026 20:01:12 +0000
Files and hashes:         1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: 3Mot/Pf0qhdIjaWDeA/xc+5UPJY4hKYiu5qoEWp2L5Q=)
                          2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: TRtCWEacfScERXGsANUVPFpqIEC3+bt+vk9acDdl/Bg=)
                          3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: juRf6DKubWHLyUVCkZq0DoXL3LBiJ5IdHL3Dkg0ZIH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
                          rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2479 (0x9af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
        Validity
            Not Before: Oct  4 20:01:12 2026 GMT
            Not After : Oct 11 20:01:12 2026 GMT
        Subject: CN=6ac2b089-5f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:33:88:aa:93:5b:a7:ce:ff:64:b7:0f:47:5f:
                    b6:96:96:9e:66:55:5e:8d:d2:ae:81:da:b5:b9:67:
                    0d:49:b6:84:79:a0:ce:75:a9:04:40:6a:01:42:e4:
                    75:c5:81:fa:27:a8:fd:2f:b4:01:4f:93:bb:27:c7:
                    12:00:c0:6a:77:11:62:00:94:36:c3:53:ee:6b:17:
                    7e:3e:07:5e:a0:6e:b5:f1:28:5f:90:a9:a3:c3:c8:
                    8f:cc:9e:ac:5e:55:51:84:81:29:7a:da:8e:c2:6e:
                    6a:e7:21:72:89:2e:5d:a1:af:8d:69:37:dd:9f:a7:
                    28:8d:ce:d7:cd:c6:f2:de:50:82:a2:0e:71:fb:d2:
                    a9:cc:5a:84:2d:d1:5a:59:01:08:43:10:53:84:68:
                    f2:6f:21:9e:63:9a:87:c1:5e:e6:fd:f9:64:78:70:
                    7d:bf:ce:e5:9b:91:56:dd:6d:79:43:26:9e:94:c8:
                    cc:80:17:0a:62:65:17:31:b5:58:da:c7:27:16:62:
                    61:e6:82:16:6c:99:a0:00:9e:92:77:d2:96:94:68:
                    67:63:1b:ce:d5:76:94:2a:8e:41:2d:34:71:8e:8c:
                    d5:88:21:44:a6:39:4a:5c:e3:88:72:97:12:10:bd:
                    67:3f:26:b3:b0:f0:5d:00:51:88:23:97:ae:68:75:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:1F:AA:E5:3D:0B:2A:E7:26:06:3C:A4:1E:75:A9:60:B4:5E:D9
            X509v3 Authority Key Identifier:
                keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:22:06:22:84:95:7e:6d:b3:04:97:8b:96:6c:b8:24:a9:ee:
         7f:cc:68:58:bc:98:62:3f:48:7d:32:8b:1a:d8:9f:f3:c5:22:
         53:97:c9:3a:0d:94:1f:83:04:52:13:d9:45:7d:dd:64:07:26:
         68:92:94:81:e4:5d:83:a7:32:cc:91:8f:b7:61:58:25:37:40:
         12:6c:a7:0e:74:ef:65:70:de:6d:c6:d8:c0:c9:4b:66:26:6b:
         a9:91:d6:21:c3:87:5b:7f:3c:23:60:f5:51:cc:d6:5d:44:e3:
         f5:fd:68:23:82:8b:3c:1c:f2:08:29:24:c0:52:8f:c8:28:67:
         7e:c9:85:81:de:71:db:22:b9:eb:7c:d7:53:22:88:16:42:9d:
         96:3d:6f:45:b5:90:52:17:c5:84:da:a4:ac:1d:b7:66:4e:70:
         7e:0d:40:6d:d9:e9:7b:b7:f6:04:7e:48:3b:32:f5:ad:ff:1b:
         c3:88:c6:a4:28:14:5f:25:e2:a8:e7:d0:a1:86:94:7e:4c:ac:
         26:7c:c2:cc:e0:c1:bd:18:3c:3b:79:8f:b6:0b:a3:8f:cb:71:
         bc:ff:42:c2:30:64:5a:2b:fa:40:81:24:2a:cc:c5:a6:bd:bc:
         ef:24:1a:73:28:4f:44:5c:4c:13:97:73:89:93:a7:e0:43:22:
         87:1b:5a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:53:30 2026 by rpki-client