Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
File:                     QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft (raw, json)
Hash identifier:          dlh/TkPe16NZs91a8vBUpxVlQm0rul8G9gpr5RGK/hw=
Subject key identifier:   BD:7C:64:98:AF:43:77:34:41:53:BD:8F:F2:0D:30:A7:C2:8A:04:59
Authority key identifier: 41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
Certificate issuer:       /CN=A91A25DF/serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
Manifest number:          E9
Signing time:             Sat 03 Oct 2026 07:10:16 +0000
Manifest this update:     Sat 03 Oct 2026 07:10:16 +0000
Manifest next update:     Sat 10 Oct 2026 07:10:16 +0000
Files and hashes:         1: QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl (hash: 43MGtYQeBXBEL22/PhpktYlY2gPyk/Pzcq8P1eX3eLY=)
                          2: C5B717905EDA11F0A5EAB579C4F9AE02.roa (hash: QMKJuZ7u5H3meG/M2oUJBI1bKAy18Acbebk2aAAz4oI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
                          rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A25DF, serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
        Validity
            Not Before: Oct  3 07:10:16 2026 GMT
            Not After : Oct 10 07:10:16 2026 GMT
        Subject: CN=6ac0aa58-e8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:7a:a8:f9:8e:c1:c7:33:40:3d:31:9d:f2:
                    43:11:9a:ed:bf:f7:40:a3:7c:5a:8d:3a:33:fc:67:
                    65:4a:73:76:dd:a7:5b:01:74:4c:bd:50:c2:08:f9:
                    88:9a:43:c2:6d:71:14:bf:47:5e:e8:d9:ef:77:a2:
                    d1:c4:9b:da:af:1b:93:a9:31:17:4c:a0:a1:f3:a4:
                    b7:20:83:ac:3e:91:80:1c:ff:3c:54:78:5d:6b:98:
                    b0:57:30:6a:f1:13:a0:f3:2d:ea:a7:77:29:46:ca:
                    9a:c3:01:02:ff:2c:95:e3:94:9a:91:00:94:0f:70:
                    02:f0:24:fe:46:90:27:a2:28:74:75:0a:b1:52:4e:
                    53:d0:6c:60:75:02:c2:08:b6:76:bc:bf:cf:56:45:
                    9c:7c:33:17:d4:60:9d:d8:90:e9:6d:c9:de:c5:89:
                    4b:d0:69:ac:2f:d0:0b:33:9d:50:8e:1b:39:2c:44:
                    7a:2a:c8:b6:12:0a:79:19:0e:69:91:e1:ac:0b:53:
                    32:8e:18:b2:fa:ae:a9:3e:4f:c5:45:ba:5d:31:90:
                    47:c2:97:6e:3a:d5:3a:ee:3b:12:cb:4d:a7:74:aa:
                    6a:6b:a3:5f:a8:fa:64:91:5b:1e:08:96:b3:f5:98:
                    dc:f6:85:a5:88:f2:e8:8d:59:8e:7d:91:f6:24:f2:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7C:64:98:AF:43:77:34:41:53:BD:8F:F2:0D:30:A7:C2:8A:04:59
            X509v3 Authority Key Identifier:
                keyid:41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a1:66:b1:79:d5:0c:1f:89:61:86:4f:77:2d:0e:08:f7:95:
         68:3e:64:92:fb:d8:23:91:3d:e7:b2:6e:7a:05:4a:16:49:bf:
         c3:f5:4c:18:15:e7:e8:4e:ec:f9:5c:a8:e4:7d:ad:6d:64:c5:
         11:72:b8:73:3a:b0:da:dd:f3:9c:fa:ca:1f:b7:a2:86:08:6b:
         94:27:99:89:78:1f:c3:f9:66:fa:46:d4:11:5b:02:b7:00:ae:
         06:81:ef:4a:4f:b4:1d:2c:6f:c8:dc:4a:32:28:8a:e9:16:80:
         55:ab:28:b9:9f:44:b2:91:06:84:49:f5:60:7b:73:05:28:c6:
         5c:3f:10:df:dd:c4:0d:15:1f:f8:20:11:01:17:16:ae:9b:d4:
         b0:b3:63:67:91:8f:d9:eb:7e:eb:80:7c:54:c3:d4:4c:79:df:
         a0:a9:62:f1:74:02:f6:9f:26:d2:26:38:3f:aa:48:81:bf:4b:
         05:c2:30:bd:66:03:9d:46:a5:10:c3:7e:1e:05:c0:86:e4:88:
         a1:41:64:b6:d4:00:df:01:d8:9c:55:2e:06:25:6f:de:6f:19:
         f5:b4:3e:32:c2:d9:ef:bc:46:8a:72:67:21:8a:01:58:9a:1f:
         2f:ac:7d:fa:4b:d8:e1:38:54:9e:37:0a:da:c8:bd:ef:dd:34:
         73:c3:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:06 2026 by rpki-client