Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File:                     QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier:          i4S6SSCvIPGNkLwyMLQB3kMEoIwFo/nC9jMmDr6eWCU=
Subject key identifier:   74:F0:C9:F4:49:0D:B8:14:DD:EB:9E:19:13:F5:77:BD:B0:D6:BD:44
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer:       /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial:       0341
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number:          0325
Signing time:             Sat 05 Sep 2026 00:50:17 +0000
Manifest this update:     Sat 05 Sep 2026 00:50:16 +0000
Manifest next update:     Sat 12 Sep 2026 00:50:16 +0000
Files and hashes:         1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: QiV53iYz82LXEqpah747CZhU5RharGrftg/ivbEGi14=)
                          2: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: Kp6nhlIWiSEv3o8kjtdJQRQ6WBFrZkqBEq1j7bnbEso=)
                          3: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: WEQNjKUUarvWFek2QKEOk5VWDSS6XlisXMiNSu5mDsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
                          rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
        Validity
            Not Before: Sep  5 00:50:16 2026 GMT
            Not After : Sep 12 00:50:16 2026 GMT
        Subject: CN=6a9b6748-5512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:88:71:0b:d4:c2:21:e9:f0:45:3f:ba:64:f6:
                    ff:bf:3a:6d:fc:72:51:37:21:6e:ea:ab:16:62:11:
                    80:9c:75:e6:02:2e:de:f9:81:c7:3b:c8:89:0b:1b:
                    69:c6:a3:9a:f1:d9:69:54:04:aa:71:ac:f3:a5:62:
                    98:a2:ac:a5:83:a1:e8:e4:30:fd:35:f5:91:39:2c:
                    bc:c1:35:d4:41:e4:b6:e4:c5:77:37:e0:3a:16:1c:
                    b4:2c:be:71:1e:d6:5c:73:21:1b:e5:1f:56:c6:c2:
                    5f:50:92:df:bf:b5:4d:56:5e:2e:e7:a8:ae:78:ea:
                    34:4c:1c:71:c9:47:fb:40:69:40:05:b7:2d:2d:f4:
                    fb:25:a0:ed:63:d1:a7:63:5b:57:93:73:a5:49:1e:
                    f8:ac:d2:5a:a3:03:34:3d:5e:9f:0c:9f:f4:83:68:
                    ee:12:f4:ce:88:6d:d1:e1:a7:19:e1:1f:82:34:7c:
                    e9:e2:e0:f7:44:75:f2:22:43:29:c4:e4:c5:88:2b:
                    29:81:d7:0f:c5:ea:19:45:28:29:15:d0:77:d8:9a:
                    97:4b:f0:91:72:aa:36:a4:c0:e9:bc:84:57:85:85:
                    a5:30:a1:1b:01:d1:b0:f8:0a:41:a3:a4:6a:56:30:
                    8b:53:07:76:f0:54:4a:d3:60:ce:1e:bb:3c:b2:70:
                    41:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F0:C9:F4:49:0D:B8:14:DD:EB:9E:19:13:F5:77:BD:B0:D6:BD:44
            X509v3 Authority Key Identifier:
                keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7d:6a:75:6c:92:23:17:d4:f1:97:d6:e6:1a:73:14:22:b5:
         40:7d:e3:bd:45:79:58:a7:6b:0b:7a:3a:b9:80:df:64:a2:a4:
         33:cd:43:4c:65:ed:33:86:85:1a:0c:85:81:be:e6:6c:d0:7f:
         b7:89:4b:e0:79:59:11:53:6f:da:2d:04:4b:78:9f:86:3b:a1:
         7d:50:50:90:af:9a:a0:20:90:83:26:f1:86:3f:d2:a9:af:13:
         eb:17:93:4a:c7:eb:e6:51:e1:ae:d8:28:05:a1:a5:5b:e2:68:
         a0:13:57:bd:a1:db:5e:ab:e5:07:69:99:3d:bc:06:8b:2c:97:
         f2:4d:04:49:9d:4b:44:d1:76:1b:a2:20:48:03:88:6b:a3:dc:
         c8:c3:1f:21:a6:2c:01:4f:b7:f9:31:18:66:99:78:fb:56:8d:
         82:66:f7:e7:27:cb:d1:d1:f8:37:8e:e3:95:27:1d:5b:c7:d3:
         ee:5d:92:b7:1c:94:ee:10:dd:77:7a:a9:ab:14:90:71:e3:05:
         57:81:f1:21:15:d9:39:b7:72:7f:24:a5:14:d5:21:91:5d:9a:
         cb:c9:3b:aa:b2:05:89:f1:0e:ba:aa:0d:0e:90:9c:e4:27:9a:
         3b:63:33:89:f1:c6:c3:40:1b:4f:22:0d:69:9e:59:1e:6b:22:
         fa:27:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:23:10 2026 by rpki-client