Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft
File:                     qbDUr9uPeMPSyEfipHI6OFlXYoA.mft (raw, json)
Hash identifier:          pAvp1WJgeyOHhjp0n7dmRh7aDfgH6s9AwAa1I1j5FJA=
Subject key identifier:   F4:15:A5:42:B8:30:2C:5F:9E:1F:A0:92:74:B4:EB:79:B2:F5:D3:99
Authority key identifier: A9:B0:D4:AF:DB:8F:78:C3:D2:C8:47:E2:A4:72:3A:38:59:57:62:80
Certificate issuer:       /CN=A91B0B89/serialNumber=A9B0D4AFDB8F78C3D2C847E2A4723A3859576280
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft
Manifest number:          4D
Signing time:             Sat 03 Oct 2026 09:04:49 +0000
Manifest this update:     Sat 03 Oct 2026 09:04:49 +0000
Manifest next update:     Sat 10 Oct 2026 09:04:49 +0000
Files and hashes:         1: qbDUr9uPeMPSyEfipHI6OFlXYoA.crl (hash: qux6PdCWtBwArzm5GfKHkF66xyhcwGCigyq4/iA2Cm8=)
                          2: 5D089144492911F1B850B010A6833773.roa (hash: 7Omr/cVEKs+waddjhiEUfhIRfZGdS9UY5db1PiEBZhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B89, serialNumber=A9B0D4AFDB8F78C3D2C847E2A4723A3859576280
        Validity
            Not Before: Oct  3 09:04:49 2026 GMT
            Not After : Oct 10 09:04:49 2026 GMT
        Subject: CN=6ac0c531-fbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:38:00:62:0d:ec:71:fb:1c:dc:aa:bc:14:e0:
                    09:f1:d0:81:bb:ba:c4:22:78:15:b3:ba:c3:09:24:
                    46:db:fd:56:b7:01:99:81:b5:a0:f4:35:3c:03:9b:
                    26:96:3d:97:fa:7f:59:d2:26:7a:bb:27:ee:ff:b2:
                    2b:32:ee:93:46:24:95:5a:66:7c:4d:f3:de:f9:32:
                    9a:e7:8a:8a:70:b1:06:70:cd:f5:5a:03:20:06:ed:
                    41:17:4e:87:c6:b2:09:1a:b4:9b:0c:89:eb:c8:f5:
                    59:f9:3b:29:36:a0:09:f7:49:08:9e:e0:b2:83:49:
                    bb:b6:50:2c:26:78:bf:97:01:95:ea:81:bc:b1:71:
                    2e:9a:16:e1:de:23:82:1a:f6:d6:d4:96:95:b4:33:
                    ba:42:a1:7d:61:9e:b0:53:1c:16:57:c1:7f:cc:9c:
                    d3:4e:7d:65:86:d1:bd:da:16:db:ac:c1:2a:64:f3:
                    65:d6:90:10:af:db:bf:b1:70:46:ef:e0:a8:ce:46:
                    94:16:d2:77:5d:36:51:65:8f:46:9c:6d:a5:fa:80:
                    9d:60:a6:f6:66:15:63:3f:b2:07:6a:32:6d:d2:83:
                    6a:d1:72:1c:09:83:10:a1:19:ae:4a:a8:d8:80:36:
                    f0:64:9d:4a:9d:06:13:29:79:64:aa:85:9f:00:cf:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:15:A5:42:B8:30:2C:5F:9E:1F:A0:92:74:B4:EB:79:B2:F5:D3:99
            X509v3 Authority Key Identifier:
                keyid:A9:B0:D4:AF:DB:8F:78:C3:D2:C8:47:E2:A4:72:3A:38:59:57:62:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:58:26:22:c8:7a:12:b2:04:25:b6:ec:19:29:01:97:c5:
         4e:a3:bc:29:b7:88:ed:e3:3c:f6:ec:9f:d9:24:56:8c:14:3d:
         33:a2:f9:f5:c3:00:cf:d2:c9:ab:98:ab:9c:ea:eb:bd:04:d0:
         4f:ce:eb:11:9c:83:3a:84:96:8c:2c:e9:ba:63:ee:3b:a3:02:
         a4:37:b6:4c:d2:0e:99:28:5d:03:2c:51:68:08:fa:38:1f:ce:
         c8:aa:d4:b5:ac:57:69:c6:52:c4:2e:e4:29:bb:ac:1f:4d:28:
         80:62:a0:c2:cd:60:f9:20:97:69:4e:92:b1:40:19:a3:e7:2e:
         0c:dc:ac:e7:c8:4f:ab:1e:80:93:ee:ea:c8:9b:69:f9:43:c8:
         28:96:b2:f4:57:df:92:3b:51:36:af:0d:5d:7c:26:e0:c9:69:
         24:d6:12:66:fb:81:d7:0f:93:92:e1:d6:9a:e6:ee:4d:ec:f2:
         cc:da:f5:a0:13:59:98:d4:be:51:92:36:09:58:c5:b3:bc:f7:
         ba:01:e4:c1:fc:b6:08:60:f8:0b:9e:65:0e:1f:3c:4c:a6:37:
         e4:0c:0b:e7:65:d9:3e:ba:44:b7:33:86:6d:98:6f:5b:8c:e5:
         55:d2:1a:80:79:df:93:45:12:55:8e:cc:53:e1:15:01:13:3e:
         fd:69:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:32:14 2026 by rpki-client