Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
File:                     qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft (raw, json)
Hash identifier:          hm+e6q1GynfH4/IhL8q+HYaWqXr2PcAjB/YMc8ZG1xY=
Subject key identifier:   59:A5:CD:E4:11:C8:7F:48:EF:6E:9A:4A:84:57:5E:B1:E9:01:C2:08
Authority key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
Certificate issuer:       /CN=A91AC075/serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
Manifest number:          57
Signing time:             Fri 21 Aug 2026 08:12:57 +0000
Manifest this update:     Fri 21 Aug 2026 08:12:57 +0000
Manifest next update:     Fri 28 Aug 2026 08:12:57 +0000
Files and hashes:         1: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl (hash: 0pgQcfuTRPvwchFte1dSiUoIBoG8HzZtk7d9dKRswUc=)
                          2: CDBA019C39F311F1ADEB5DEEC0833773.roa (hash: iidMH4KhBMhVgK4N0PlQBp3CYB4iLSSSQ1RpsnRFm3E=)
                          3: 4D14307E1C2C11F186EF2187353D8C67.roa (hash: 8n1lBtRiuUToqQoaz+XovDqW+aJBw7UTosZ8OjYJOZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Aug 2026 08:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
        Validity
            Not Before: Aug 21 08:12:57 2026 GMT
            Not After : Aug 28 08:12:57 2026 GMT
        Subject: CN=6a880889-ba4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:88:73:f9:31:0f:14:d6:d7:37:b4:6e:26:
                    af:b0:50:c1:17:88:5e:d1:40:51:c1:a0:a6:92:a2:
                    4f:fc:27:61:28:bf:1a:a9:8f:6f:6c:00:01:dc:18:
                    02:e8:62:3e:5b:04:d7:8e:1a:98:1b:f1:e9:ef:ca:
                    19:b6:b2:c8:be:3a:83:3e:e7:7b:c2:6e:3d:46:3c:
                    c9:c8:e4:4c:3a:cb:0e:53:67:fa:d9:38:51:b1:9e:
                    58:63:5d:5f:27:4b:bc:b1:22:f7:09:54:6a:ed:dc:
                    a3:31:a7:39:be:9b:e3:8d:33:89:dc:1b:da:ce:a9:
                    8e:e7:9e:1d:a6:b7:d1:b6:5e:12:25:26:c7:2d:9f:
                    0b:48:ce:18:a7:32:8d:8f:44:04:66:1a:50:f7:2a:
                    3e:c6:a8:c3:90:09:98:56:55:07:94:3f:84:5d:71:
                    c6:49:7c:79:a0:a0:3f:67:1d:9f:41:d7:48:05:b5:
                    97:26:da:fd:4a:ac:af:54:a7:1b:b7:3f:6b:2c:f2:
                    77:ad:74:25:c3:8d:74:ab:75:9b:34:77:14:35:44:
                    6d:df:d8:b8:13:3e:7e:a7:2b:d1:65:23:f3:36:9e:
                    2c:13:f6:e3:42:c7:07:41:6c:82:34:13:b3:47:fe:
                    67:4a:d4:80:68:c9:0a:55:ad:64:d1:28:93:81:72:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A5:CD:E4:11:C8:7F:48:EF:6E:9A:4A:84:57:5E:B1:E9:01:C2:08
            X509v3 Authority Key Identifier:
                keyid:AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:30:6d:f6:76:c0:cd:fa:66:4b:5b:3c:06:17:77:2d:c7:e2:
         64:e6:45:14:22:26:ae:18:3b:3d:ce:82:22:2c:fb:64:8a:ee:
         65:6c:e5:32:d0:fe:e3:02:14:ae:32:9c:5f:41:76:cc:13:3b:
         a5:af:6f:9f:96:3f:3b:46:e7:74:34:b6:23:c7:f3:12:a8:fe:
         9c:fa:2a:03:a9:02:63:5d:34:c3:8d:26:6f:86:9d:4f:83:8f:
         e4:1e:59:01:34:58:e5:3a:66:e3:d2:37:b2:70:b5:b0:90:91:
         1f:94:b1:67:63:44:8b:6f:a9:ba:ab:9b:36:d2:28:ad:ff:d8:
         1e:5c:dc:cd:8a:c9:50:97:0e:5f:ec:90:ea:c7:fc:7f:6f:3a:
         81:f4:fb:85:05:0e:aa:e2:bb:00:9d:b8:57:3a:e2:a5:76:d0:
         ec:06:0b:7b:f8:cc:ca:e5:2c:58:c3:ca:31:c2:5e:e9:fe:65:
         79:22:fd:63:46:2a:19:6d:a7:04:42:05:e5:74:3a:87:cc:fc:
         2e:0c:0c:2b:45:66:d6:b8:9b:cb:ae:ba:c4:ca:e0:c1:4f:4d:
         04:78:56:9b:53:9e:63:e1:9f:e2:b6:bf:21:ec:a3:10:65:68:
         91:ec:30:78:6c:f6:c2:bf:42:b6:bd:fe:7e:36:f4:4c:91:ec:
         43:29:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:05:11 2026 by rpki-client