Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
File:                     QrsPPBhH5li75BQYSUzonOjjRIg.mft (raw, json)
Hash identifier:          edjBvy8Or1cMV/8BXv8JtKOfDEgJzrERUDT59zSrkAg=
Subject key identifier:   9F:30:8F:78:2E:A2:7E:34:9F:98:DD:04:66:02:49:3B:E3:01:2D:2A
Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
Certificate issuer:       /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
Manifest number:          0197
Signing time:             Mon 05 Oct 2026 04:55:33 +0000
Manifest this update:     Mon 05 Oct 2026 04:55:32 +0000
Manifest next update:     Mon 12 Oct 2026 04:55:32 +0000
Files and hashes:         1: QrsPPBhH5li75BQYSUzonOjjRIg.crl (hash: 119mPbkjO+4tEqbtqJu4KF+VA/+nQPbjeNa3F3gmXNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
                          rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172506, serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
        Validity
            Not Before: Oct  5 04:55:32 2026 GMT
            Not After : Oct 12 04:55:32 2026 GMT
        Subject: CN=6ac32dc5-9d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:e0:80:2c:e1:2a:5d:08:01:ad:f9:65:47:
                    ae:e6:40:b4:c4:d7:5d:5e:c6:4d:0f:7b:0a:31:8a:
                    8a:09:ce:36:0c:5d:af:6c:26:65:8d:dc:55:80:52:
                    66:17:6a:d2:4d:10:89:17:f5:78:45:89:28:4a:cc:
                    30:82:ce:4e:39:19:c2:3d:4e:03:f4:c3:89:01:da:
                    ef:5e:b8:9b:bb:ca:d4:6d:5f:1d:ae:33:62:cc:41:
                    1b:4f:84:06:c2:42:47:91:71:77:7d:a1:93:fa:e7:
                    15:02:cf:fa:88:3c:cc:b6:ad:ce:5e:ee:2a:f3:af:
                    f8:a1:51:e7:c7:98:b5:a1:80:47:4a:34:dd:c4:38:
                    a2:54:09:db:34:8a:a2:7a:8d:64:d2:9c:ac:65:13:
                    07:b8:63:bf:89:14:2d:c3:83:9e:ab:56:2f:b7:b6:
                    a1:27:08:14:3c:aa:46:c6:f2:b2:0f:ba:b0:19:d5:
                    4c:30:93:88:01:8a:fd:b6:38:6e:fd:e3:39:ee:99:
                    81:65:c9:ea:fc:b6:6d:c9:8c:8c:da:99:87:2d:9c:
                    13:4b:d6:05:76:99:d7:0e:ee:e9:48:01:63:b8:0b:
                    0b:e1:2e:8f:79:34:ba:9d:e6:0d:b9:47:e8:06:f7:
                    f2:13:35:5f:9a:ed:12:93:65:c4:80:eb:66:42:69:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:8F:78:2E:A2:7E:34:9F:98:DD:04:66:02:49:3B:E3:01:2D:2A
            X509v3 Authority Key Identifier:
                keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:90:6c:69:3a:5a:4a:29:bb:64:06:c7:99:77:b7:58:b8:f8:
         13:e4:c0:e2:bd:7e:d2:58:7a:99:75:5b:55:17:de:0a:d1:34:
         34:a9:58:07:16:88:21:ee:2d:82:10:7d:38:ec:ff:96:16:36:
         44:d0:dc:72:bc:da:d3:dd:3b:ff:92:24:7e:4f:58:b7:a0:6f:
         3e:80:ef:89:96:a1:51:e1:5d:19:80:db:87:a4:68:cb:9e:08:
         64:97:46:d2:7e:e7:d3:1a:c9:66:49:a5:30:24:99:f6:58:d8:
         e1:1b:52:c9:2d:60:a4:ee:48:43:a2:1a:c1:95:79:14:f8:6c:
         50:77:a9:d7:ff:39:14:a5:eb:36:28:b8:03:3b:a5:fd:9b:59:
         b4:1a:da:58:7c:c6:5b:6d:b0:67:86:32:ea:40:16:d8:c5:c8:
         d1:01:a7:80:0d:90:34:04:54:6b:53:54:95:1e:81:8d:c2:f7:
         d1:09:98:b6:c9:cd:b2:e4:02:55:67:99:89:74:eb:13:75:5d:
         19:f9:c7:93:64:4a:1e:9d:d1:d6:0b:0e:65:16:ed:61:8b:fc:
         b3:ff:f7:cb:92:73:47:e9:25:ab:e0:a2:b4:c4:db:83:a4:51:
         bc:b8:69:a5:e7:aa:c2:6e:95:7a:5f:ac:30:b9:fa:b6:11:fd:
         fb:01:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:11:01 2026 by rpki-client