Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File:                     qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier:          u7GIUiutzAs8TTgNyCxEZ/+Zq34SyA8MoIdhsVhAeGg=
Subject key identifier:   E1:CD:1D:F1:7D:B8:62:73:78:D9:0F:AB:1A:31:94:4B:C0:88:2E:39
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer:       /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial:       02A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number:          029B
Signing time:             Mon 05 Oct 2026 01:56:40 +0000
Manifest this update:     Mon 05 Oct 2026 01:56:40 +0000
Manifest next update:     Mon 12 Oct 2026 01:56:40 +0000
Files and hashes:         1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: Fo6aGdpsTuOjGBRQKFEx+z+cHyZbrcBqeVZqfzHFA2U=)
                          2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
        Validity
            Not Before: Oct  5 01:56:40 2026 GMT
            Not After : Oct 12 01:56:40 2026 GMT
        Subject: CN=6ac303d8-9aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:bd:e0:6d:af:9e:99:71:33:64:ec:63:1e:
                    4b:b9:84:76:dd:1d:79:ad:62:ab:88:86:6c:df:70:
                    e0:cf:78:fe:cf:fc:41:52:ea:a1:ee:4a:95:d6:64:
                    74:0b:1f:00:66:57:14:0d:66:0a:da:30:39:39:02:
                    cb:90:8f:d5:8a:e6:96:d0:66:95:a2:7e:1b:20:26:
                    fb:f7:de:5d:a2:bb:06:42:33:f7:b8:8d:1a:00:3c:
                    83:b8:09:fb:b8:82:01:a0:5d:b4:dc:28:5b:03:af:
                    02:66:ef:cd:b4:04:13:99:dd:db:77:d4:b9:66:01:
                    4f:d2:13:e1:11:76:10:f0:9f:f9:9d:b9:83:2c:f1:
                    a6:86:e7:d7:ae:d9:f5:4a:aa:b4:53:03:cc:9e:50:
                    d2:e6:1d:6c:a0:c0:41:a8:d3:ff:d9:5e:23:33:b4:
                    b7:38:72:b9:4a:99:2a:8d:ef:93:43:e8:79:b0:22:
                    db:81:7f:9d:0d:0c:16:23:b7:42:af:d0:d2:47:11:
                    1d:f5:b3:ce:32:d0:c3:d0:3b:de:88:18:45:8f:7e:
                    d0:9e:0b:d5:c2:96:0e:86:a0:44:77:9a:e3:2f:4a:
                    60:86:2a:72:3c:03:53:99:dd:cf:f1:5d:da:6e:8d:
                    78:8e:ba:10:d1:81:c2:3f:1a:ee:87:2a:54:19:17:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CD:1D:F1:7D:B8:62:73:78:D9:0F:AB:1A:31:94:4B:C0:88:2E:39
            X509v3 Authority Key Identifier:
                keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e8:47:50:74:44:75:69:2a:ba:d6:df:b8:e0:b3:5d:fc:71:
         cb:19:c9:38:ac:84:42:12:05:ec:b2:22:3a:37:0e:77:c9:6c:
         b3:7d:1b:ca:e2:82:2c:f2:8d:1f:a7:88:38:f6:cb:6e:3e:e0:
         4e:3d:7e:6d:7d:90:3f:49:47:57:32:06:82:c5:a4:44:7a:f9:
         9e:53:5e:16:bf:49:dc:a5:05:25:4c:88:b5:98:a8:2f:a6:be:
         8e:e3:3a:78:03:b2:7b:d2:81:3c:cd:ee:c2:78:45:82:0c:64:
         1b:da:ef:25:9b:09:8f:4c:e0:61:74:08:a3:4c:e6:66:b5:e8:
         b6:2c:ae:ab:09:9f:06:60:f5:47:41:b1:a1:54:50:45:c9:fe:
         2f:51:5c:b0:8a:d8:6f:8d:a1:97:9a:3a:73:55:a6:f8:47:c6:
         dd:ea:0b:31:bf:90:25:16:c3:d0:2a:5d:82:9a:8a:f1:be:54:
         b9:1d:e8:72:6b:e8:ac:fb:5e:fb:c5:7b:14:dd:1a:ee:98:2c:
         9e:5f:7d:e6:d0:a0:7c:11:e8:d6:f8:df:a8:fc:b6:b1:56:84:
         fa:e6:7e:b3:22:93:b0:73:ac:9c:80:9d:b3:1c:b5:f8:1d:5d:
         5b:7c:5e:78:4b:42:3f:b8:1a:e8:f3:86:0b:ca:91:3d:27:ef:
         18:c4:c6:2f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFDNTIxMTAvBgNVBAUTKEE5OTBEQTI1Q0Y0RTAxQkNFQjdFQzc1QzE3ODYwRkI5
NDdCRTA5MkEwHhcNMjYxMDA1MDE1NjQwWhcNMjYxMDEyMDE1NjQwWjAYMRYwFAYD
VQQDEw02YWMzMDNkOC05YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqq94G2vnplxM2TsYx5LuYR23R15rWKriIZs33Dgz3j+z/xBUuqh7kqV1mR0
Cx8AZlcUDWYK2jA5OQLLkI/ViuaW0GaVon4bICb7995dorsGQjP3uI0aADyDuAn7
uIIBoF203ChbA68CZu/NtAQTmd3bd9S5ZgFP0hPhEXYQ8J/5nbmDLPGmhufXrtn1
Sqq0UwPMnlDS5h1soMBBqNP/2V4jM7S3OHK5Spkqje+TQ+h5sCLbgX+dDQwWI7dC
r9DSRxEd9bPOMtDD0DveiBhFj37QngvVwpYOhqBEd5rjL0pghipyPANTmd3P8V3a
bo14jroQ0YHCPxruhypUGRcC7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHNHfF9
uGJzeNkPqxoxlEvAiC45MB8GA1UdIwQYMBaAFKmQ2iXPTgG8637HXBeGD7lHvgkq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUM1Mi8wRTVEQkZCNEM0
QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0FienJmc2RjRjRZUHVVZS1D
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FaRGFKYzlPQWJ6cmZzZGNGNFlQdVVlLUNTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUM1Mi8wRTVEQkZCNEM0QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0Fi
enJmc2RjRjRZUHVVZS1DU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPOhHUHREdWkqutbfuOCzXfxxyxnJOKyEQhIF7LIiOjcOd8lss30byuKCLPKN
H6eIOPbLbj7gTj1+bX2QP0lHVzIGgsWkRHr5nlNeFr9J3KUFJUyItZioL6a+juM6
eAOye9KBPM3uwnhFggxkG9rvJZsJj0zgYXQIo0zmZrXotiyuqwmfBmD1R0GxoVRQ
Rcn+L1FcsIrYb42hl5o6c1Wm+EfG3eoLMb+QJRbD0CpdgpqK8b5UuR3ocmvorPte
+8V7FN0a7pgsnl995tCgfBHo1vjfqPy2sVaE+uZ+syKTsHOsnICdsxy1+B1dW3xe
eEtCP7ga6POGC8qRPSfvGMTGLw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:55:51 2026 by rpki-client