Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
File:                     Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json)
Hash identifier:          20e3FKbzxwrVZgdkctRQLASwGtrvMbALlEUsXytbN7Y=
Subject key identifier:   43:61:1E:D3:9C:96:39:3D:F5:C6:7E:0F:8F:AC:2B:44:B7:5B:20:80
Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
Certificate issuer:       /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Certificate serial:       112B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
Manifest number:          1107
Signing time:             Fri 04 Sep 2026 17:15:03 +0000
Manifest this update:     Fri 04 Sep 2026 17:15:02 +0000
Manifest next update:     Fri 11 Sep 2026 17:15:02 +0000
Files and hashes:         1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: yGqhKE3O1CcqSFmXQWwgNzN9pT263WRkHIKcp/qxY6g=)
                          2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ=)
                          3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: 1zVW9OK/rYgrfqL/Kah7ClFS1DlkC9pX1ORA7B+nV6E=)
                          4: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: hKyxzq+6NvE6xqXSiWJ91EzUH8fvtkfjv6xhpZcoKsw=)
                          5: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 4xjOHA2a4uxswPhEHWIZ5kUb1RGsi99QGiMmvVEx05A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
                          rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4395 (0x112b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
        Validity
            Not Before: Sep  4 17:15:02 2026 GMT
            Not After : Sep 11 17:15:02 2026 GMT
        Subject: CN=6a9afc97-ff60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:4a:e7:45:3d:15:f8:e2:a2:5f:63:c0:21:
                    f6:30:12:0f:b3:61:70:d7:f5:79:76:50:77:2a:76:
                    6e:76:93:e9:84:f8:6c:30:7e:bd:c6:b9:e3:c3:0e:
                    ad:75:8b:26:27:92:55:eb:38:cd:a4:d1:5a:b7:05:
                    52:ab:cc:90:a3:3b:6f:f1:90:d3:f6:6e:8e:9c:e6:
                    aa:48:e1:f5:b6:69:65:48:e5:20:94:6c:7a:33:ed:
                    9f:45:e2:22:c3:aa:a5:0f:b7:b1:e7:06:74:93:ca:
                    a2:77:71:30:ca:f8:c2:0d:94:b1:cb:fe:05:cc:88:
                    16:2a:0f:27:00:69:cd:4a:7d:1e:b6:af:43:c4:7c:
                    f1:4c:c6:86:c1:f1:a0:90:a4:c1:32:4e:79:ce:18:
                    3f:94:fd:67:7f:9a:e2:f5:71:02:33:48:b1:80:a7:
                    b8:73:cf:67:e7:0e:a2:d9:95:65:36:41:0e:58:7a:
                    e2:fb:22:49:2f:a0:66:09:a7:82:e8:4c:67:e9:d7:
                    08:38:1e:cd:e1:14:98:9e:00:27:c7:51:ce:c6:7f:
                    18:ca:da:ff:7e:f8:75:9d:13:3c:36:2b:cb:81:a6:
                    9e:57:3d:a1:25:5d:8d:4b:50:27:7a:f8:cf:be:77:
                    48:97:7d:f7:14:3e:ba:ec:8a:91:b6:5a:97:bb:e0:
                    74:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:61:1E:D3:9C:96:39:3D:F5:C6:7E:0F:8F:AC:2B:44:B7:5B:20:80
            X509v3 Authority Key Identifier:
                keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f1:05:e0:5e:1f:ec:da:fa:c4:f7:0c:09:16:c0:92:2e:81:
         5d:34:a2:a9:8e:96:5b:19:9c:3c:79:f5:09:fb:09:12:5c:b4:
         7a:61:2a:7c:90:e2:0e:ca:9a:ad:32:09:7b:a5:fb:8f:65:2a:
         e5:d7:ec:99:69:c1:fb:b6:0b:bf:0b:16:8b:63:47:ad:2c:41:
         81:17:2f:76:76:fd:44:f3:94:c9:1f:43:1f:f5:95:d0:17:df:
         b8:06:e5:5d:85:fa:03:1b:3c:2f:0b:0f:d6:de:05:a4:b7:9a:
         5c:60:c8:87:ba:33:39:94:c0:d3:3f:00:8c:2f:e8:bb:0c:e0:
         f1:b5:47:1c:12:40:49:ce:d0:8f:15:0b:a7:97:51:7e:ac:9f:
         01:10:15:da:f2:40:6e:7c:75:90:73:b9:55:bb:a3:3e:cf:46:
         e9:6c:e2:4b:c4:2e:b3:9f:8a:b8:ca:ea:e4:37:7e:76:25:f8:
         91:04:23:89:07:3b:82:95:16:9e:17:9c:4f:d4:c4:15:a5:70:
         3a:9b:e7:33:8a:5e:ce:79:c2:47:5a:02:b4:d9:f3:8c:4c:f8:
         fe:a8:b5:7f:80:b5:8c:77:95:99:71:2e:b6:8f:8e:36:94:0f:
         01:80:cc:04:5a:e5:49:0e:fe:51:89:a8:01:05:2d:b4:b3:93:
         80:09:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:04:49 2026 by rpki-client