Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
File:                     qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json)
Hash identifier:          za4iriK2SrXgr8g5rs8nftqn57YgGnXEPZXjZMHGH5M=
Subject key identifier:   49:82:88:8D:0C:C8:33:7A:C9:F7:05:84:94:04:28:8E:1C:AA:97:7A
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Certificate issuer:       /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
Manifest number:          01A1
Signing time:             Sat 05 Sep 2026 04:02:06 +0000
Manifest this update:     Sat 05 Sep 2026 04:02:05 +0000
Manifest next update:     Sat 12 Sep 2026 04:02:05 +0000
Files and hashes:         1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: UD6esGOvf+/HyrPG+JDrR09TSH6W3Lm9XovpuBOb5YI=)
                          2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: nz3PPCvZn62oE2uMjuHkN8vXygcZxrPBWu4zQKyueQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
                          rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
        Validity
            Not Before: Sep  5 04:02:05 2026 GMT
            Not After : Sep 12 04:02:05 2026 GMT
        Subject: CN=6a9b943e-1b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:18:28:39:51:16:31:95:ea:09:b1:46:90:0f:
                    ab:df:7a:4c:a8:69:1d:a1:42:e1:ff:2b:a6:f0:09:
                    48:79:2c:aa:7c:3c:60:fc:24:9f:4d:ef:02:29:64:
                    85:d2:2e:03:7c:d7:7b:ac:81:90:e7:94:29:33:a2:
                    9b:d8:eb:3b:07:83:9f:f2:8c:14:4c:89:a4:16:2e:
                    70:2b:b1:13:92:00:9b:1f:1b:92:a2:f6:96:2d:58:
                    87:e1:ec:fa:b8:67:65:39:52:a0:c3:58:36:ef:93:
                    ba:ea:2b:ca:36:ef:5b:3a:dd:a4:5c:7c:28:c4:e2:
                    7c:4a:7b:d6:85:5f:88:42:7c:5c:54:ad:76:b0:20:
                    fa:33:13:c4:9a:ad:2d:12:2b:28:84:c3:92:99:6b:
                    15:b8:fb:61:04:92:db:97:bf:17:ba:e8:53:17:fe:
                    63:5a:10:e3:db:5a:5f:6e:ff:56:3d:7b:f8:2c:62:
                    e4:32:75:50:17:6e:49:d7:9d:24:1b:21:12:74:57:
                    01:0d:98:45:58:e9:ba:06:06:da:2d:e8:7a:15:22:
                    29:44:86:0c:fd:df:f8:b2:9d:e5:6d:85:34:5e:3d:
                    7b:c0:4e:57:ca:35:36:40:f5:cd:c1:a5:f0:c6:19:
                    77:1a:73:56:56:63:32:04:a2:ce:e0:a1:eb:89:18:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:82:88:8D:0C:C8:33:7A:C9:F7:05:84:94:04:28:8E:1C:AA:97:7A
            X509v3 Authority Key Identifier:
                keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fe:c5:a9:f7:6f:7c:71:61:a6:1a:f9:a8:f4:0e:92:3c:dc:
         21:2b:34:94:70:9e:5b:89:17:df:c7:3c:80:c7:eb:dc:71:75:
         e2:07:13:ea:2f:9b:c1:bf:95:7a:f2:f4:5b:61:06:b0:b0:34:
         40:ca:c2:33:5f:00:c1:aa:d1:cb:4e:cc:68:f4:f9:35:0e:2d:
         c7:ee:1d:e8:56:e0:eb:c1:a5:b9:97:ad:fe:9e:aa:d0:00:36:
         35:ce:b0:8b:05:8e:aa:7a:f5:ff:4a:ea:a3:83:16:e0:c5:56:
         73:63:61:78:a2:23:28:b6:e1:25:55:33:41:39:0b:d0:18:36:
         c5:28:3f:ee:da:e4:a5:00:a6:b7:b5:62:14:7b:95:4e:5f:ed:
         62:5b:2a:ed:1a:57:3e:39:20:62:cc:d3:20:2f:a8:c9:81:51:
         ce:34:ec:9f:01:7c:07:87:8b:79:5d:84:ce:6b:c8:c1:0f:86:
         73:9f:77:5f:e9:71:63:cb:fa:83:0c:dd:ec:4d:7a:b9:be:38:
         16:f7:b9:99:59:d1:29:05:57:e6:bb:48:19:35:91:a3:6a:03:
         0d:7f:86:a5:a7:a4:fe:64:c6:f9:37:4f:9e:28:07:53:4d:06:
         d8:58:a5:58:67:95:15:21:3c:36:20:1b:98:e7:eb:20:ff:ec:
         ec:90:76:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwMDMxMTAvBgNVBAUTKEE4RkMwNjM2RTY4MTg2NDc1NTQ4Nzk0RERGQTQ2OTBC
RkZENENDQjYwHhcNMjYwOTA1MDQwMjA1WhcNMjYwOTEyMDQwMjA1WjAYMRYwFAYD
VQQDEw02YTliOTQzZS0xYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BgoOVEWMZXqCbFGkA+r33pMqGkdoULh/yum8AlIeSyqfDxg/CSfTe8CKWSF
0i4DfNd7rIGQ55QpM6Kb2Os7B4Of8owUTImkFi5wK7ETkgCbHxuSovaWLViH4ez6
uGdlOVKgw1g275O66ivKNu9bOt2kXHwoxOJ8SnvWhV+IQnxcVK12sCD6MxPEmq0t
EisohMOSmWsVuPthBJLbl78XuuhTF/5jWhDj21pfbv9WPXv4LGLkMnVQF25J150k
GyESdFcBDZhFWOm6BgbaLeh6FSIpRIYM/d/4sp3lbYU0Xj17wE5XyjU2QPXNwaXw
xhl3GnNWVmMyBKLO4KHriRg9dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmCiI0M
yDN6yfcFhJQEKI4cqpd6MB8GA1UdIwQYMBaAFKj8BjbmgYZHVUh5Td+kaQv/1My2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yNkE2QjA1ODMy
QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhrZFZTSGxOMzZScENfX1V6
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzAwMy8yNkE2QjA1ODMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhr
ZFZTSGxOMzZScENfX1V6TFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG/7FqfdvfHFhphr5qPQOkjzcISs0lHCeW4kX38c8gMfr3HF14gcT6i+bwb+V
evL0W2EGsLA0QMrCM18AwarRy07MaPT5NQ4tx+4d6Fbg68GluZet/p6q0AA2Nc6w
iwWOqnr1/0rqo4MW4MVWc2NheKIjKLbhJVUzQTkL0Bg2xSg/7trkpQCmt7ViFHuV
Tl/tYlsq7RpXPjkgYszTIC+oyYFRzjTsnwF8B4eLeV2EzmvIwQ+Gc593X+lxY8v6
gwzd7E16ub44Fve5mVnRKQVX5rtIGTWRo2oDDX+Gpaek/mTG+TdPnigHU00G2Fil
WGeVFSE8NiAbmOfrIP/s7JB2Sg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:41:15 2026 by rpki-client