Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
File:                     QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json)
Hash identifier:          cwfZUC2jYR250A/L9CV/ojbLRMnfGhDjZxz3JJH41pg=
Subject key identifier:   B2:67:D7:FD:8C:E1:3F:B4:81:7A:22:74:7D:0B:67:13:33:31:83:D9
Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB
Certificate issuer:       /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
Certificate serial:       02BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
Manifest number:          02B7
Signing time:             Wed 07 Oct 2026 01:50:43 +0000
Manifest this update:     Wed 07 Oct 2026 01:50:42 +0000
Manifest next update:     Wed 14 Oct 2026 01:50:42 +0000
Files and hashes:         1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: dxKh6giwrUf3gQkTI3ewLE3mfuzQVRQqCcKTP+BCJbk=)
                          2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: a1ihaW44y7pPngH9tloHWvGy8yxGeQDZAFa7vmcwPNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl
                          rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
        Validity
            Not Before: Oct  7 01:50:42 2026 GMT
            Not After : Oct 14 01:50:42 2026 GMT
        Subject: CN=6ac5a573-602a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:68:05:4d:2a:9b:3d:01:33:aa:87:e6:81:
                    5f:c6:f7:48:ca:47:15:90:e9:ea:8c:d6:84:ce:ac:
                    f5:11:28:70:7a:d4:58:ea:a8:75:76:f0:37:5f:05:
                    1d:07:82:58:3d:2c:8a:f1:76:54:a8:24:fc:50:a1:
                    e3:2f:46:51:f5:10:cf:b7:ae:ea:22:3b:d7:42:33:
                    ad:9d:8a:1c:f1:12:8a:fb:16:c0:6e:d7:4d:aa:eb:
                    46:e9:06:9e:18:94:0f:c4:e9:7b:39:b9:b1:12:bf:
                    14:4c:06:64:f2:e9:d5:3f:fa:aa:fa:48:26:ab:a4:
                    37:a1:4f:4f:6e:88:94:71:b8:25:de:60:d8:48:24:
                    23:79:ed:31:63:fa:97:e6:ee:6b:c9:f2:b8:d7:6a:
                    1a:58:52:fd:16:db:8a:0a:1d:f5:16:f3:e8:74:bf:
                    5a:b7:81:bd:83:78:79:9d:38:ce:00:66:8d:bb:ea:
                    8d:2c:18:74:2f:a2:9a:05:a9:be:95:61:ec:c4:10:
                    6b:46:fc:0a:c4:c5:24:32:d9:8a:4e:a8:e0:3a:1f:
                    7c:ac:ce:d0:c7:3e:7b:e2:52:49:23:c9:1c:87:5d:
                    54:8f:d4:5b:74:ab:a1:c7:1a:90:4a:78:bb:7d:7b:
                    3a:96:9b:3d:22:29:7f:12:3c:9c:4e:b8:15:64:56:
                    0e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:67:D7:FD:8C:E1:3F:B4:81:7A:22:74:7D:0B:67:13:33:31:83:D9
            X509v3 Authority Key Identifier:
                keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:ba:48:f6:7c:69:b4:4b:96:a4:e6:c8:4e:fc:4c:69:be:
         c6:15:45:18:3e:98:d3:95:6c:67:8b:55:a6:4e:29:db:3c:b5:
         3f:88:90:dd:0b:24:3c:85:bf:28:39:bc:2f:79:ec:1d:2e:fa:
         9b:a4:73:1a:24:36:2e:39:4b:6e:2e:61:b6:0f:94:db:52:51:
         ae:60:ea:6e:5d:b8:f5:09:8c:6f:b6:d2:54:b5:95:ee:fa:0e:
         b8:d7:5b:44:1c:36:c6:ef:26:29:29:34:aa:d4:91:ab:cd:4e:
         30:49:a7:9b:fb:fe:57:b8:0f:cc:d8:4e:46:6c:97:eb:71:03:
         79:ae:04:d1:54:78:65:0f:56:d2:f9:41:f0:72:4a:70:e6:9b:
         4b:d2:bb:e8:ca:e5:84:e7:a8:40:9f:9f:e6:7f:97:e8:c7:55:
         15:f1:ac:14:35:07:61:cf:e1:e0:31:82:46:2e:2c:4e:17:e0:
         30:45:cc:64:5c:0c:aa:21:36:ec:b0:65:96:5b:d4:ac:5e:b6:
         72:f4:7c:f4:c2:35:cb:32:aa:51:a9:29:9e:38:89:a2:63:1d:
         4b:1d:09:4e:76:3d:a2:8d:ab:31:54:af:97:e0:80:c9:bf:f8:
         dd:3b:4e:cd:37:75:95:9c:ff:05:5d:db:d6:20:2f:90:7c:41:
         ad:cb:72:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:46:59 2026 by rpki-client