Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
File:                     qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json)
Hash identifier:          sJBtbB5PqlG9GiApKooatbyQ0RvFpFvjyMRWlrNap58=
Subject key identifier:   0B:00:CB:76:BC:C8:92:CF:D8:D2:E4:CB:35:24:85:6F:8A:28:05:1D
Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29
Certificate issuer:       /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
Certificate serial:       06F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
Manifest number:          06F0
Signing time:             Fri 02 Oct 2026 22:44:12 +0000
Manifest this update:     Fri 02 Oct 2026 22:44:11 +0000
Manifest next update:     Fri 09 Oct 2026 22:44:11 +0000
Files and hashes:         1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: oh4eFGhc3bCDXs/R/ldhBtwT2S+4vKh6+n+1RCtOqUg=)
                          2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: JAbPQZrzV+rII7x01ZnSFogfmgR/Q17t4iqDEt1Q0vg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784 (0x6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BE1, serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
        Validity
            Not Before: Oct  2 22:44:11 2026 GMT
            Not After : Oct  9 22:44:11 2026 GMT
        Subject: CN=6ac033bb-7f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:16:11:dd:45:80:ec:3b:8a:0e:99:ba:53:b3:
                    a5:c6:08:50:55:d9:8f:04:fd:66:30:4d:8a:d8:06:
                    13:85:c8:f9:84:ef:60:31:e1:fb:39:86:52:50:bb:
                    ef:e2:3a:b9:77:eb:ab:49:4c:cb:14:5d:ee:48:87:
                    cd:7d:19:b2:f5:7f:9d:a6:8a:26:bf:4b:19:b3:b1:
                    3c:b4:b5:ef:45:d4:bb:a3:d9:8e:74:27:08:41:93:
                    83:8b:95:15:6b:e9:47:99:51:27:4c:68:60:2d:c2:
                    bb:e1:48:2c:fe:b7:88:8b:ee:c3:70:4c:47:87:11:
                    ea:da:85:82:a5:4c:a6:c1:5f:15:62:de:f8:93:73:
                    0c:96:21:d5:18:98:06:68:2f:08:91:70:42:08:5a:
                    f0:61:3f:9c:7c:a6:ed:48:f1:3e:c5:33:f1:24:e0:
                    2a:16:78:64:f6:c6:5b:ac:2f:2b:f3:f4:8b:0c:26:
                    90:1b:e2:58:7e:15:08:f6:f9:80:df:f6:46:8d:8b:
                    50:ff:8d:5b:19:3e:66:3c:84:9e:08:e8:33:a7:b4:
                    29:af:19:ae:1e:f7:ba:ed:29:a9:33:b5:f2:d3:c9:
                    7a:c7:41:c8:77:f6:b5:42:82:4d:a1:2d:21:e7:ed:
                    ea:e7:c2:4e:69:60:de:2e:ec:71:f6:64:44:f1:0a:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:00:CB:76:BC:C8:92:CF:D8:D2:E4:CB:35:24:85:6F:8A:28:05:1D
            X509v3 Authority Key Identifier:
                keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:1f:ad:12:60:75:37:3f:f4:3c:74:2b:88:fd:bc:3a:66:88:
         d6:f2:76:23:14:ae:96:99:17:3c:6b:29:7e:74:fd:6d:3e:13:
         a0:a9:46:1b:8d:08:9e:81:37:c6:d1:9f:2e:bd:1e:44:26:a1:
         05:e9:60:9c:11:77:b6:35:fa:58:8d:7c:ce:90:db:6f:ad:13:
         94:ed:52:03:db:9f:df:26:2e:19:8c:73:25:32:c6:b6:20:8f:
         d3:32:51:01:8b:68:01:ff:f2:f5:2b:26:88:a5:9b:5f:49:9a:
         39:0a:a2:06:9a:8a:7f:cb:11:71:cd:4c:87:24:ef:d6:a8:23:
         0b:b8:c6:c3:bf:8f:6f:02:90:25:f4:96:ee:02:2e:60:46:4f:
         6c:3f:f7:80:ce:d6:b1:bb:e4:5d:27:2e:01:91:46:36:06:95:
         f1:43:0f:3e:0b:24:99:b1:d6:42:69:3c:f5:2e:c6:72:b8:9b:
         3f:9e:26:8c:66:d0:58:97:23:e1:f9:71:57:6c:a4:dc:e9:83:
         4f:26:e5:fd:0c:c2:26:0f:09:b9:71:69:e8:32:e9:82:cd:3a:
         2a:3a:63:d1:b9:54:97:35:6d:d4:96:72:b0:a9:2f:32:06:eb:
         32:c5:c6:b7:d7:ce:1e:cf:42:8f:00:09:9d:22:fe:f4:c0:53:
         8b:f7:e3:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBCRTExMTAvBgNVBAUTKEFBMjFCNjkwQzFENjNDQkY0NDFBQTNCRDExN0VEOEI3
ODY4ODIyMjkwHhcNMjYxMDAyMjI0NDExWhcNMjYxMDA5MjI0NDExWjAYMRYwFAYD
VQQDEw02YWMwMzNiYi03ZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4BYR3UWA7DuKDpm6U7OlxghQVdmPBP1mME2K2AYThcj5hO9gMeH7OYZSULvv
4jq5d+urSUzLFF3uSIfNfRmy9X+dpoomv0sZs7E8tLXvRdS7o9mOdCcIQZODi5UV
a+lHmVEnTGhgLcK74Ugs/reIi+7DcExHhxHq2oWCpUymwV8VYt74k3MMliHVGJgG
aC8IkXBCCFrwYT+cfKbtSPE+xTPxJOAqFnhk9sZbrC8r8/SLDCaQG+JYfhUI9vmA
3/ZGjYtQ/41bGT5mPISeCOgzp7QprxmuHve67SmpM7Xy08l6x0HId/a1QoJNoS0h
5+3q58JOaWDeLuxx9mRE8QrPEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsAy3a8
yJLP2NLkyzUkhW+KKAUdMB8GA1UdIwQYMBaAFKohtpDB1jy/RBqjvRF+2LeGiCIp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJFMS9FNDZGRjQ5MEFF
MkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BMOUVHcU85RVg3WXQ0YUlJ
aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FpRzJrTUhXUEw5RUdxTzlFWDdZdDRhSUlpay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEJFMS9FNDZGRjQ5MEFFMkIxMUVCOTU2MjdGODJDNEY5QUUwMi9xaUcya01IV1BM
OUVHcU85RVg3WXQ0YUlJaWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApx+tEmB1Nz/0PHQriP28OmaI1vJ2IxSulpkXPGspfnT9bT4ToKlGG40InoE3
xtGfLr0eRCahBelgnBF3tjX6WI18zpDbb60TlO1SA9uf3yYuGYxzJTLGtiCP0zJR
AYtoAf/y9SsmiKWbX0maOQqiBpqKf8sRcc1MhyTv1qgjC7jGw7+PbwKQJfSW7gIu
YEZPbD/3gM7WsbvkXScuAZFGNgaV8UMPPgskmbHWQmk89S7GcribP54mjGbQWJcj
4flxV2yk3OmDTybl/QzCJg8JuXFp6DLpgs06Kjpj0blUlzVt1JZysKkvMgbrMsXG
t9fOHs9CjwAJnSL+9MBTi/fjHQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:08:16 2026 by rpki-client