Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          xnbDDx0fTrMxSEwPgLNkU0ASMXX2g9Hrw6rQtOrsvcI=
Subject key identifier:   A9:12:03:DF:13:CC:15:3E:21:32:D4:EA:84:69:E9:7F:B1:62:2F:E6
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          0169
Signing time:             Sat 05 Sep 2026 04:42:48 +0000
Manifest this update:     Sat 05 Sep 2026 04:42:48 +0000
Manifest next update:     Sat 12 Sep 2026 04:42:48 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: EeW7x3VElOYJOrbroPl72p9U30TYf48HV65NkInPxhU=)
                          2: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=)
                          3: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: Sep  5 04:42:48 2026 GMT
            Not After : Sep 12 04:42:48 2026 GMT
        Subject: CN=6a9b9dc8-83a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:8f:70:de:10:fa:73:d8:b4:0b:9c:fd:e5:
                    52:06:23:86:3e:df:94:fd:fc:26:25:15:01:cb:c8:
                    ad:e9:2b:2c:ec:28:ab:30:aa:55:a0:34:ff:14:75:
                    f0:43:56:10:72:45:56:4d:87:55:21:8f:3d:83:c9:
                    f6:30:f6:73:be:87:cb:5a:b8:e2:fb:3b:fe:23:3f:
                    30:2c:9c:45:5f:35:31:f7:25:0a:78:2e:b0:15:17:
                    94:47:5b:fd:89:b6:4a:10:05:ab:46:d5:d0:19:55:
                    6f:78:6b:b8:68:e2:22:f5:e3:c7:97:c2:4c:ca:7f:
                    79:9e:d2:b6:e3:a9:9f:bb:de:bd:a7:04:5a:d6:ac:
                    6c:d3:20:c8:e2:3d:12:5b:2b:50:c4:e0:4a:e7:0b:
                    99:59:df:44:ec:3d:f0:f8:9d:90:14:0f:57:80:61:
                    ed:16:f5:ce:a1:45:c9:95:56:23:d7:24:f4:5b:41:
                    e7:24:ae:d4:bf:e8:85:05:73:03:d6:88:92:a6:a5:
                    5a:bb:bb:1c:33:2d:99:ab:7d:cc:27:fc:e8:bc:cd:
                    56:d6:27:e6:a0:65:d8:68:73:93:90:aa:08:9a:98:
                    e5:80:c9:9f:5a:c4:c9:c7:43:b8:62:16:3e:93:37:
                    c8:b2:4b:08:19:25:d6:e8:ed:0a:1c:d3:c6:70:d9:
                    f5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:12:03:DF:13:CC:15:3E:21:32:D4:EA:84:69:E9:7F:B1:62:2F:E6
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:0f:9a:9c:01:8f:41:29:64:c7:67:f9:f3:c6:e1:fc:cd:
         7b:7a:4e:7c:48:df:19:b0:c1:07:f7:89:d6:7f:07:cc:63:d3:
         fa:ad:0d:23:77:43:c7:23:6f:1f:dc:da:1a:ff:3d:d9:c9:69:
         8c:40:32:83:9e:d2:e6:cb:26:04:89:a7:5b:b3:15:8f:d6:2c:
         ac:7f:e0:b8:0e:00:4e:27:75:a9:61:e8:b2:3b:5d:6d:e4:12:
         36:5b:61:0f:5c:aa:3b:85:c0:9b:9c:04:1c:54:12:9c:b8:9e:
         53:ab:f6:e2:e2:ad:c0:08:81:c7:d0:74:35:75:29:65:07:c0:
         5e:24:ae:07:2f:68:33:bf:29:7b:4e:ad:e1:ff:b2:fb:d7:3c:
         e3:f2:d8:fb:a6:75:ac:90:8b:a6:08:ad:0a:ae:f5:1b:92:02:
         32:7b:51:7d:00:e2:ba:5d:e1:7d:69:4e:5a:1e:dc:10:2f:c8:
         a2:1b:79:b8:63:4c:c8:aa:d8:9e:71:59:1d:38:dc:e9:0a:0d:
         b5:b2:2d:82:63:df:18:9d:1f:e8:26:62:ce:a0:9d:46:64:94:
         f4:8e:68:fc:59:c0:29:6f:8a:e0:36:e4:01:40:1d:68:22:00:
         3f:17:4e:9d:80:be:b2:ae:cd:9e:fd:93:df:c6:49:fe:f1:5a:
         c2:a3:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:17:21 2026 by rpki-client