Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
File:                     rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json)
Hash identifier:          02KhYhxPsTXBde+N77nuWoo2s3KJpPr3iHx5CqlLtf0=
Subject key identifier:   22:3C:53:CD:90:9C:9F:52:62:E6:94:48:55:7D:29:A7:76:05:3F:46
Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Certificate issuer:       /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
Manifest number:          0154
Signing time:             Mon 05 Oct 2026 05:36:49 +0000
Manifest this update:     Mon 05 Oct 2026 05:36:49 +0000
Manifest next update:     Mon 12 Oct 2026 05:36:49 +0000
Files and hashes:         1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: rlgxURUvsmXG3gEa+lCwbbT/9Tdz4PCgA8883OBl8nY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
                          rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
        Validity
            Not Before: Oct  5 05:36:49 2026 GMT
            Not After : Oct 12 05:36:49 2026 GMT
        Subject: CN=6ac33771-5345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:5e:5f:64:d5:e3:8b:34:3c:5a:55:ac:ce:
                    32:2c:0e:16:e3:35:e9:a1:f4:cf:15:af:a7:1d:aa:
                    e3:7e:be:3f:16:ab:4e:19:01:d6:cf:43:e7:71:12:
                    00:24:b2:1a:d0:e0:1b:11:fe:cc:b2:b8:3a:e7:57:
                    36:78:b9:33:6e:f2:e9:12:d8:88:8a:7d:f3:1b:01:
                    5f:3b:fc:d8:80:2c:66:15:13:f2:55:f4:3b:6d:89:
                    dd:21:36:0e:0a:c2:93:59:b3:4f:df:95:74:11:47:
                    15:ba:f4:59:99:3c:14:12:90:af:3a:78:d4:6e:54:
                    d6:85:bd:a8:50:3d:83:76:c1:70:e3:63:56:ac:da:
                    b9:76:20:38:2b:f3:9c:80:69:29:74:86:1a:90:f0:
                    d3:b0:2a:ed:62:e1:46:01:09:5f:c1:cf:47:95:90:
                    54:7b:28:1a:1e:c6:f0:d7:c5:92:4c:ae:70:d9:10:
                    38:34:d6:b9:ac:66:10:1f:9a:ed:13:51:c7:2e:15:
                    e0:a2:16:8b:6f:90:7f:72:31:36:e1:66:37:52:f1:
                    5d:c0:c4:5c:b6:e8:5c:3b:61:48:e8:66:cd:fe:04:
                    19:42:16:11:3b:66:ce:84:9c:c9:61:79:45:fc:23:
                    0b:9e:0d:57:4b:2d:28:b3:b7:e5:81:8d:8b:f2:1f:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3C:53:CD:90:9C:9F:52:62:E6:94:48:55:7D:29:A7:76:05:3F:46
            X509v3 Authority Key Identifier:
                keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a4:e2:d7:ac:66:80:b8:75:2f:fb:12:01:b1:63:59:1c:3f:
         77:f3:fe:37:70:3c:83:6c:61:80:f5:91:68:5e:4d:36:56:d1:
         93:6b:f1:47:22:db:99:91:0a:34:0b:19:ac:fa:de:14:f5:85:
         05:6c:d7:cd:3c:55:7a:94:d7:2a:52:d3:bc:4e:a9:45:b6:a4:
         51:0e:a7:b2:3e:fb:df:1a:0f:30:1f:81:42:45:2e:bc:92:f9:
         02:8d:e3:76:47:01:ce:e2:f2:7d:22:d1:d6:02:07:46:00:30:
         55:10:a0:bf:e5:45:32:55:cd:79:4b:57:54:40:8a:03:e3:19:
         80:2f:a8:60:0c:27:d3:33:f8:7d:d9:57:ee:b4:5a:e2:e0:c9:
         70:65:79:44:c9:cc:3f:4d:d0:e1:ed:e2:f1:f7:0b:ee:dd:39:
         cb:a3:28:d4:7e:94:fd:e9:50:9c:0c:dd:6f:56:ab:b7:16:ae:
         4b:f0:5a:89:e7:01:0e:9d:a1:36:8a:6f:5f:0b:b3:e1:be:8a:
         55:94:7f:b9:d1:a6:89:27:b9:52:1d:91:ca:21:5b:df:8e:ad:
         d3:c5:1c:9c:e2:9d:89:8e:6d:b6:11:9e:75:b1:63:5d:7c:ce:
         17:17:5a:c8:13:99:64:b7:2a:01:3f:62:8b:d7:bf:d3:35:09:
         53:9d:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:21:21 2026 by rpki-client