Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
File:                     QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json)
Hash identifier:          W5r/paZjRBtxtJ3JQiw8foOfpjEJWDoWcpwrhCM6aDQ=
Subject key identifier:   2C:DC:25:9B:54:3B:C2:2A:6F:F3:CC:11:AD:18:48:6B:93:8F:42:2D
Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F
Certificate issuer:       /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
Manifest number:          026F
Signing time:             Wed 07 Oct 2026 02:28:00 +0000
Manifest this update:     Wed 07 Oct 2026 02:28:00 +0000
Manifest next update:     Wed 14 Oct 2026 02:28:00 +0000
Files and hashes:         1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: /fMExpI8ozL1t9d8TJdhRdFtOnglO8x/P2TyZWbUL8Q=)
                          2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: NEAODUTKeBNCWNog3dkgj4g38ALv10sbj1oaLjD2vUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl
                          rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
        Validity
            Not Before: Oct  7 02:28:00 2026 GMT
            Not After : Oct 14 02:28:00 2026 GMT
        Subject: CN=6ac5ae30-7984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:de:1b:4c:32:4b:31:fa:62:c7:d8:f6:1c:
                    9a:5b:0a:1d:4f:73:05:42:b8:10:47:5e:88:6e:32:
                    66:ef:84:67:42:a6:37:82:ef:de:ca:4c:50:39:87:
                    b7:b9:25:b8:58:79:85:8e:66:33:c0:31:a8:81:fc:
                    1a:c7:d9:83:5d:68:17:79:4e:f1:a8:7f:99:0e:bf:
                    1e:6f:81:c9:10:f6:0f:bc:4b:47:9f:e5:97:da:23:
                    c4:8e:8b:44:f5:99:de:19:99:40:0d:83:da:4a:04:
                    9e:7a:b7:4b:0d:81:6f:6e:62:ce:d1:f3:65:f0:01:
                    ff:9d:0e:19:8b:fd:c0:74:5e:99:a6:0c:ff:57:94:
                    91:7c:45:03:0c:d3:a2:f6:20:3f:42:2f:3e:73:2e:
                    c2:fc:ec:d7:5d:f4:ac:08:20:c6:c5:f1:02:7b:30:
                    dc:f3:d4:d0:30:86:cf:09:14:92:ea:8b:2f:89:de:
                    93:4a:9b:70:02:6c:50:29:d1:4e:5d:c7:47:10:f5:
                    37:00:2c:5e:db:ea:6c:ac:4e:a4:4d:cf:67:f4:15:
                    9f:49:51:50:0c:94:8d:0c:2b:32:5b:ad:2b:0a:9b:
                    77:d1:25:86:61:85:2c:31:03:75:15:aa:16:49:dc:
                    83:d1:81:5b:12:d6:c6:bd:24:bd:2f:2c:3c:4f:62:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DC:25:9B:54:3B:C2:2A:6F:F3:CC:11:AD:18:48:6B:93:8F:42:2D
            X509v3 Authority Key Identifier:
                keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6d:d4:14:f0:6a:74:ef:88:f0:e0:a4:9b:85:dc:3f:07:21:
         d5:1f:77:cc:c7:09:e6:1e:ef:1a:22:f8:f7:fa:1e:0b:f5:eb:
         e9:d6:d4:7c:e2:fc:9f:c1:fa:aa:b7:4b:eb:57:fd:db:9b:23:
         cb:7b:21:70:c8:4b:61:68:3a:72:12:fc:89:50:82:f2:e5:51:
         08:59:9c:db:15:06:b4:60:a3:fe:4c:94:fa:23:3e:9c:e0:a9:
         94:ee:f7:3a:56:e3:8b:31:ae:aa:c9:8c:8b:79:0d:cd:f7:0c:
         e5:11:83:4e:1a:49:26:dd:93:1a:08:71:7b:f1:8c:f9:0d:b3:
         38:3d:75:16:59:51:04:4d:e5:34:58:5f:7c:66:f5:af:50:6a:
         02:9b:dd:ed:5a:75:ef:69:11:f9:dc:73:3f:94:39:47:86:d5:
         0a:f9:2e:d2:46:ca:af:dc:c4:f5:c9:30:23:28:2d:d8:a5:de:
         23:d9:c8:53:c7:2b:0b:10:34:10:c5:23:b8:65:9f:c4:46:5b:
         c6:81:05:54:af:01:e9:23:74:74:bf:de:7c:8d:9d:2d:7d:d7:
         95:a8:68:89:bd:fe:d7:6b:dd:a6:ad:c8:d5:cd:de:c8:fc:6c:
         92:19:8b:90:b1:a9:5b:eb:19:5c:a5:88:2c:77:c5:53:1e:b0:
         03:6d:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:04:58 2026 by rpki-client