Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File:                     CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier:          YzgtIALmhtQTa+74GtxYJDNcaaR85JxucRD0YnAgZw0=
Subject key identifier:   A8:A7:AF:3F:23:B5:56:D4:B4:ED:E7:53:D6:FD:09:81:67:74:B1:99
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer:       /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number:          0134
Signing time:             Tue 29 Sep 2026 06:05:06 +0000
Manifest this update:     Tue 29 Sep 2026 06:05:06 +0000
Manifest next update:     Tue 06 Oct 2026 06:05:06 +0000
Files and hashes:         1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: Rk2iRFdPAS/fcnH5CWi0Dqlh2YPr/xG5e7H98ME0Io4=)
                          2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
                          rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 06:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
        Validity
            Not Before: Sep 29 06:05:06 2026 GMT
            Not After : Oct  6 06:05:06 2026 GMT
        Subject: CN=6abb5512-0972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:05:31:69:29:a1:c5:ad:50:2d:93:08:8b:
                    9e:32:3f:4b:bc:8c:c3:41:7a:d7:32:93:e6:86:45:
                    2c:1b:7e:47:90:39:28:49:1e:87:c5:39:18:cc:31:
                    93:00:1d:54:5a:b6:1b:fc:c6:1f:3b:3e:2a:f1:23:
                    99:43:92:bb:4a:1c:d9:0b:80:d3:d2:27:8d:39:f0:
                    44:a0:f9:9d:2d:b0:99:71:06:28:02:59:63:98:a6:
                    51:04:53:48:37:42:82:4d:a0:fe:e8:fa:81:ea:a2:
                    a2:a0:d6:a4:44:7d:98:d4:6c:6a:a7:eb:48:dc:c5:
                    05:3c:c3:a3:03:fa:ce:10:92:29:b6:ca:23:0e:ff:
                    82:2f:4f:20:67:22:2a:9e:17:15:7c:ac:f0:ce:d4:
                    36:0e:36:3f:c7:49:50:fd:a7:00:4a:6c:2c:e1:33:
                    0c:ba:f5:a4:0c:eb:ca:95:51:ba:7a:61:d8:00:98:
                    f9:32:42:9b:b2:9e:70:29:7a:6e:d1:56:ef:45:5d:
                    27:cb:ad:b5:78:50:c1:02:8b:89:df:8e:42:11:2d:
                    e1:48:53:58:74:c8:77:5e:fa:d4:19:0a:c1:78:d3:
                    7f:dc:eb:5a:97:5b:9d:1f:6f:29:60:36:38:a4:5d:
                    d6:6a:83:66:45:ef:f3:e9:ad:22:7c:6c:33:9a:db:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A7:AF:3F:23:B5:56:D4:B4:ED:E7:53:D6:FD:09:81:67:74:B1:99
            X509v3 Authority Key Identifier:
                keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3b:5b:db:74:c3:d5:91:0e:e5:29:77:ae:b0:25:99:a7:dc:
         c5:a0:d5:be:6b:9b:b2:47:ae:d5:c0:68:b9:76:9b:a0:7e:44:
         90:3d:6f:5d:f7:7d:93:6d:19:7f:8f:78:90:dc:67:f9:d9:28:
         51:78:6d:42:fd:8e:39:f9:a0:90:ce:1f:e3:eb:e8:d1:4b:e2:
         d1:2b:a4:27:8a:f5:6d:ec:62:e9:f9:38:6c:5c:f0:50:e4:e4:
         fe:cf:3b:79:3f:97:35:90:f2:e8:8b:6b:5a:8b:9c:ae:0d:63:
         41:f5:20:63:3c:d3:0b:19:b1:50:b1:91:7e:42:d9:6f:e7:8a:
         12:7c:23:ec:59:0c:14:bc:08:f3:5a:36:24:03:30:e3:d5:35:
         4c:c8:16:9b:0d:5a:f2:3f:c3:12:b7:1d:99:d3:7a:50:48:34:
         cc:fc:53:d4:7f:51:cb:9b:a0:e7:56:b1:7d:f4:05:90:e6:72:
         8b:9d:fc:aa:49:8f:ad:2b:20:3e:4c:e4:e9:fb:1c:6f:20:ca:
         07:4d:53:49:6e:cb:f7:db:7e:30:0c:99:0a:b7:42:6b:8a:6b:
         19:b8:40:31:29:3d:0b:51:85:df:94:8c:3a:94:0f:da:02:b2:
         b4:5a:04:f3:86:12:01:d9:a3:d5:c8:78:80:b5:0c:d2:0c:2b:
         e4:28:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 21:44:33 2026 by rpki-client