Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
File:                     qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json)
Hash identifier:          bzOcJkL3x2yAzHslpGwQExLRllCJWD5xnFV0cnbccz8=
Subject key identifier:   11:C0:80:A1:98:E2:7D:17:78:7E:C8:D6:FB:0D:E6:1A:A0:A4:19:34
Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
Certificate issuer:       /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Certificate serial:       17C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
Manifest number:          17AE
Signing time:             Sun 04 Oct 2026 16:35:19 +0000
Manifest this update:     Sun 04 Oct 2026 16:35:18 +0000
Manifest next update:     Sun 11 Oct 2026 16:35:18 +0000
Files and hashes:         1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: XF6kuXI1C5zVTtdWTGTMcBQmcIOZlCKSOtPRaAD2Icw=)
                          2: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: lZtSqEluaQyvKzJzwijqNxqveUY7rB8QQXqYRdPds0g=)
                          3: BAD2356E153411E892E6D468C4F9AE02.roa (hash: Uh0ufQqszTK1hbj5HShNIOMuiOfZ3FBUNVqfFJVggoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
                          rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6084 (0x17c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
        Validity
            Not Before: Oct  4 16:35:18 2026 GMT
            Not After : Oct 11 16:35:18 2026 GMT
        Subject: CN=6ac28047-b8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:0b:1e:ae:71:04:9c:52:ab:a9:02:71:b6:
                    6d:8b:ee:e1:6d:9f:6e:10:b0:ce:ff:f3:1a:4b:2c:
                    06:7a:dd:aa:66:8a:31:01:16:bf:5c:ed:aa:d7:bd:
                    a1:1d:0c:96:a7:70:62:d6:6c:cf:f7:2f:08:f4:02:
                    ee:a5:60:1a:5a:0e:b9:df:52:b8:fe:3b:1f:9f:6d:
                    58:22:05:af:89:60:e2:6d:4b:e0:f5:c7:e6:dc:0d:
                    d9:4c:27:30:22:5f:14:4b:b9:b3:22:3e:6e:12:a7:
                    07:36:dd:26:b4:31:2c:a2:2d:65:e8:4c:44:d7:56:
                    e4:20:0d:f4:65:20:67:13:2b:93:da:f0:ff:e2:a2:
                    e4:79:ab:ec:10:99:29:6b:62:e9:3b:a2:98:fa:35:
                    b2:62:a8:4a:a1:bf:17:e3:8f:69:04:ae:8f:28:ef:
                    ed:0b:14:76:c5:29:0f:e6:42:04:0d:cb:44:cd:ef:
                    d9:3b:00:8b:a5:85:78:34:19:c0:f7:13:9e:4b:96:
                    3a:39:9b:b6:b3:75:11:6a:23:78:5e:60:82:f6:1f:
                    d8:55:a5:6f:7a:e0:d3:51:d2:a6:6c:ff:d4:14:61:
                    62:02:06:8a:de:ce:26:13:b2:b5:49:44:f9:db:9c:
                    d6:15:b1:b7:04:8a:22:f2:66:60:b0:8b:0d:55:0d:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C0:80:A1:98:E2:7D:17:78:7E:C8:D6:FB:0D:E6:1A:A0:A4:19:34
            X509v3 Authority Key Identifier:
                keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:e6:d6:d7:ee:48:c1:11:97:aa:b1:9b:cd:f6:40:c4:fa:
         4d:6e:f8:22:58:14:77:66:62:78:ca:1b:8c:91:0c:d6:f9:2b:
         0d:03:5e:94:07:15:ad:e8:e5:95:6b:ad:1f:d6:e8:5d:f7:9c:
         bd:18:c5:39:2c:8d:01:fd:14:d8:66:25:df:21:1f:25:d7:03:
         94:2c:ec:d8:ae:13:8b:b1:67:13:a9:40:e5:02:2b:a1:3e:c5:
         49:45:4f:f1:e3:88:19:77:f9:55:35:dc:50:59:98:a5:9d:f3:
         21:e0:00:4e:06:77:cd:4e:03:8d:9a:9b:d7:96:17:64:ab:c2:
         a9:ba:21:ea:71:08:41:7e:5e:67:14:28:30:40:b5:9b:db:63:
         4c:07:07:66:cf:43:ca:a3:8a:88:c6:b7:a8:1d:5a:41:64:5f:
         dc:9b:26:79:2b:8d:f3:99:a6:21:f2:33:a5:91:6b:b1:37:a5:
         d6:85:79:b8:d5:92:5f:d9:ea:87:3d:f3:26:39:f2:8e:0d:36:
         25:e6:7b:a6:10:9f:6d:74:f1:99:08:31:5d:6f:29:48:0c:30:
         fd:79:34:79:ab:99:61:9c:af:5b:c4:f1:9d:5e:fd:0a:0f:03:
         db:0e:9a:1f:1f:88:05:33:12:80:26:69:42:ce:57:98:54:13:
         1f:dc:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:21:30 2026 by rpki-client