Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
File:                     qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json)
Hash identifier:          ATc9WbKfHsw4lYLzVFNZrN2sOO38cWOUEwi1zvBCEuM=
Subject key identifier:   A1:E3:4A:31:5E:E0:7E:8F:04:DF:9F:EB:07:69:13:E7:79:8C:B9:16
Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
Certificate issuer:       /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
Manifest number:          013E
Signing time:             Wed 19 Aug 2026 06:10:34 +0000
Manifest this update:     Wed 19 Aug 2026 06:10:34 +0000
Manifest next update:     Wed 26 Aug 2026 06:10:34 +0000
Files and hashes:         1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: zrvQRACeroDBC1XEc31JHTI8dESXzb88YLZ0Q4n5hUw=)
                          2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: aCExDuGa6YujX3JL0arcNyOR8mwam9J29+GY2ZdNl4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
                          rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
        Validity
            Not Before: Aug 19 06:10:34 2026 GMT
            Not After : Aug 26 06:10:34 2026 GMT
        Subject: CN=6a8548da-122e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:9c:97:c7:b0:bf:ce:f5:d9:54:6e:7c:dc:
                    50:d2:c3:f5:9d:26:67:da:25:85:de:8c:76:42:5e:
                    a4:5f:b1:95:d6:ed:78:65:de:6c:9a:40:c0:a0:3f:
                    50:a8:e3:8b:e6:69:e9:be:57:c8:fb:6d:ae:ef:2c:
                    5e:2b:6b:80:8c:1b:0e:10:b0:0d:57:f9:73:56:5d:
                    3b:3f:99:bc:8f:03:60:bd:8d:22:52:a0:48:c5:d2:
                    f6:89:32:a4:63:f4:90:0a:7f:6a:c8:5c:ba:3d:8f:
                    ce:a9:5d:4f:d0:92:c7:a0:c4:80:83:55:2e:90:96:
                    a2:d4:ed:4c:c8:02:27:8f:bc:0b:66:46:38:ef:17:
                    c0:3f:c1:3c:48:25:60:c3:63:29:a7:81:4f:06:e0:
                    bb:4e:75:a7:15:8a:ba:42:30:24:9d:8d:7b:8e:4f:
                    76:3a:f3:79:1a:e2:15:06:4f:23:da:4f:36:dc:f6:
                    e1:44:42:6e:c8:99:25:a5:a5:2d:a3:d0:c6:eb:fc:
                    44:04:7e:6a:42:1b:76:3e:68:d0:48:2d:ab:20:3c:
                    70:9e:e2:33:6a:36:c3:e5:17:e1:69:ef:53:3e:28:
                    bb:72:09:9e:c0:d5:b2:29:aa:37:50:e1:8a:ae:d1:
                    3b:85:ba:e6:b2:7f:ef:a6:19:96:ee:42:91:5e:48:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E3:4A:31:5E:E0:7E:8F:04:DF:9F:EB:07:69:13:E7:79:8C:B9:16
            X509v3 Authority Key Identifier:
                keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:18:22:d1:a1:13:53:dd:b2:50:ac:ff:bc:ea:10:82:e7:45:
         b5:97:79:12:52:4d:6b:ae:87:99:13:ad:d5:ed:93:36:9e:ab:
         c9:99:d1:1e:77:33:33:af:89:0d:45:cd:c6:d0:4d:c1:72:c1:
         50:89:73:ac:a0:1c:8a:f0:9f:63:df:51:91:7a:2e:62:f0:66:
         95:e8:4a:d2:47:d8:3c:bf:4e:35:92:1c:fe:d7:c6:54:44:39:
         8d:fa:67:e1:a5:68:c3:0b:16:82:a3:a0:3d:94:65:9f:31:2b:
         7f:46:12:df:1c:44:60:f1:fe:22:01:19:82:b3:56:e5:25:27:
         7b:9e:c5:ba:21:1d:53:80:91:f6:4d:58:ec:63:c6:62:54:4b:
         28:19:6d:1a:a3:db:6c:39:92:8a:90:53:2f:66:15:f4:25:80:
         65:c8:bb:d4:d4:43:d9:62:fe:da:7f:c6:45:63:1f:40:2f:51:
         32:05:c2:23:55:ce:ca:df:52:e9:89:1c:02:e2:a4:4d:1b:06:
         4f:4f:76:32:32:e4:db:e0:e5:29:61:23:aa:ea:ee:71:38:36:
         14:f4:6f:78:bf:57:8b:c0:20:2c:83:f4:da:ea:99:ff:1b:69:
         bc:31:38:c1:0b:23:1c:61:7e:62:57:37:2d:4d:3f:d1:61:e8:
         e7:ba:65:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:10 2026 by rpki-client