Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
File:                     5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft (raw, json)
Hash identifier:          17blgfjjKA9pWqC8xvaFJ4QbCUqcR2LlzWuTKXuRMpQ=
Subject key identifier:   12:C6:0A:42:0A:7B:C9:99:00:C9:BE:B0:39:5F:C8:BB:56:31:C4:0A
Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
Certificate issuer:       /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
Manifest number:          0101
Signing time:             Fri 09 Oct 2026 06:50:05 +0000
Manifest this update:     Fri 09 Oct 2026 06:50:04 +0000
Manifest next update:     Fri 16 Oct 2026 06:50:04 +0000
Files and hashes:         1: 5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl (hash: CjJIpAd71sIXQU0Pz2oIMBQfGNzU8LLKTug2fvnnQFc=)
                          2: 584BBFB03B7811F099AF3F55C4F9AE02.roa (hash: TIY6gyAp3NwOI0omiLD20nrzYuDIOBYf89hc7GdDNuw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
                          rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
        Validity
            Not Before: Oct  9 06:50:04 2026 GMT
            Not After : Oct 16 06:50:04 2026 GMT
        Subject: CN=6ac88e9d-11c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:9c:bc:a0:89:01:f6:75:5e:e1:d7:56:87:
                    1d:12:e9:23:9c:0b:f8:dd:05:e3:e9:cc:cc:3b:01:
                    07:67:58:86:0f:ab:5c:48:bf:2d:25:24:13:77:36:
                    09:b6:b4:b0:4e:f6:8d:ab:92:6a:81:3b:c1:32:4a:
                    27:f6:fe:91:f1:91:f1:0a:63:b1:6b:2d:2c:51:09:
                    6c:4c:cb:2f:06:6d:2b:8d:7e:62:24:67:74:fd:78:
                    ae:e0:d4:25:fa:4a:8f:4f:b8:ee:bd:2c:20:cc:de:
                    ff:07:23:50:7f:40:4d:d3:1e:35:47:88:d2:31:b1:
                    07:90:8c:36:14:89:96:c0:1d:1b:1e:43:4d:f1:7d:
                    40:07:05:13:14:e0:39:a0:3e:0c:d3:8c:fc:02:87:
                    b0:b5:f9:ed:1e:2b:6a:66:c1:58:bb:a8:2d:a5:1b:
                    19:ee:c5:d9:62:0d:60:18:6a:d2:ab:be:2a:78:5d:
                    64:49:4e:5d:1a:e2:61:d7:29:3d:6c:4d:52:54:92:
                    e6:c9:08:73:58:29:d6:8d:2a:6c:bb:c0:af:f1:63:
                    2a:85:4f:52:b9:fb:2e:91:45:ad:ac:f3:fa:99:fd:
                    0b:31:b3:30:9b:10:ea:da:fc:cc:c4:a3:03:cc:79:
                    ac:09:b8:7e:04:84:33:90:94:be:37:28:2c:e6:b7:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C6:0A:42:0A:7B:C9:99:00:C9:BE:B0:39:5F:C8:BB:56:31:C4:0A
            X509v3 Authority Key Identifier:
                keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e6:fa:1a:be:36:e6:ea:62:0b:f6:4e:9f:6c:a9:61:01:23:
         bf:b7:fa:c6:eb:ef:62:d8:ba:4b:16:51:63:8a:f8:c3:8b:ad:
         66:2b:58:79:ab:97:80:26:a0:de:45:b0:ec:61:f0:1d:49:55:
         77:55:76:59:78:d5:e6:d0:cf:71:d7:40:f1:87:89:ec:94:f2:
         6a:a6:06:12:11:36:b8:81:ff:db:45:b1:69:92:f3:b1:26:d4:
         a9:39:e4:ec:3f:be:cc:d3:88:02:d9:82:b8:21:cb:dd:3c:fa:
         15:78:c2:11:8f:11:59:44:15:1a:42:4f:72:c5:64:77:52:ee:
         5e:82:4d:1b:56:c8:d7:57:5c:a0:b8:81:f1:aa:c1:81:17:74:
         81:f0:69:dc:ea:4c:e4:88:78:39:89:cf:01:50:87:7d:07:40:
         3c:97:c3:0f:64:43:25:45:e7:5c:5d:c0:70:21:f1:48:b6:1a:
         31:b2:ae:3b:ec:7e:99:df:d7:41:88:26:76:1b:87:a2:7b:c0:
         ca:81:99:33:81:55:ba:d8:0c:df:b1:38:43:c5:f3:9c:55:32:
         b0:f4:a5:28:ba:8a:b5:d5:be:11:ac:a0:d2:7a:2a:fa:11:5d:
         73:14:82:50:38:ca:d1:9c:71:31:c6:45:ef:b0:30:c3:ab:42:
         a1:37:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:16:42 2026 by rpki-client