Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File:                     q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier:          Fj6gz60sWEp8eIH4nDb+JoPgw23paD1RD3enZc7SEIU=
Subject key identifier:   E8:9A:18:A5:83:2B:F0:04:6B:2A:1A:29:68:6C:4E:6C:85:62:57:46
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer:       /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number:          027A
Signing time:             Mon 05 Oct 2026 02:14:32 +0000
Manifest this update:     Mon 05 Oct 2026 02:14:31 +0000
Manifest next update:     Mon 12 Oct 2026 02:14:31 +0000
Files and hashes:         1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: eN8sEYttxohhJiS4/IoFAJOTlorIlm0jPLgWziSYOHQ=)
                          2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: gp5WZJBdG8buH2FoAFWLx0g28D8rX+R/fO2EnJ+4Rtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
                          rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
        Validity
            Not Before: Oct  5 02:14:31 2026 GMT
            Not After : Oct 12 02:14:31 2026 GMT
        Subject: CN=6ac30808-13de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:02:35:cc:d8:30:52:c7:33:25:d4:c3:b6:91:
                    87:e0:87:0d:61:77:54:f1:22:d8:b2:86:99:9a:52:
                    00:78:a4:42:a9:6f:68:af:29:d7:3e:8d:14:04:e4:
                    b3:01:93:c2:16:90:ff:89:00:92:0c:21:81:ad:15:
                    69:b3:c8:4b:1b:25:ab:24:32:78:97:8a:d2:f3:ff:
                    c0:99:a2:94:ca:97:65:7a:20:e3:57:00:09:3a:d8:
                    d5:83:43:9e:0d:bf:f9:42:45:ea:8a:6b:b9:43:a7:
                    1b:e6:05:73:72:10:4c:73:4b:e9:63:9f:57:24:bd:
                    c4:e5:00:64:f5:0b:6b:af:ce:23:1f:3a:9d:22:7d:
                    87:db:84:86:6f:54:79:17:73:06:88:38:f1:b6:87:
                    65:06:b1:c5:cf:17:c3:3b:22:02:0e:2c:bb:fe:c1:
                    24:7e:98:65:2b:5b:7c:26:d1:e7:5e:67:1e:c7:7a:
                    b7:42:7b:26:10:68:99:60:62:5a:60:38:3d:20:ca:
                    ef:ba:6d:f5:83:01:7d:83:ce:58:a5:e7:f3:2e:5f:
                    61:c0:f2:37:69:5b:78:67:bd:da:95:3f:30:1c:e1:
                    84:6b:c4:23:22:d8:9f:db:32:47:f1:50:ff:1a:48:
                    fa:64:74:6a:2d:6d:59:7c:99:e7:c2:e5:dc:3c:d3:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9A:18:A5:83:2B:F0:04:6B:2A:1A:29:68:6C:4E:6C:85:62:57:46
            X509v3 Authority Key Identifier:
                keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:52:ee:53:69:9c:d3:74:a6:68:a8:27:44:10:09:20:bd:98:
         dd:f0:54:a3:be:79:3a:58:e2:c7:a3:a8:6f:73:d3:91:11:f5:
         20:6f:84:48:65:ce:c3:be:db:55:9d:ca:3e:6d:2e:95:78:e5:
         b2:4b:c0:58:75:1a:78:69:92:46:7c:ee:82:e7:25:f8:75:07:
         31:1e:e1:5f:2a:df:ff:7a:9a:4f:cb:e5:8f:20:3a:f4:7d:9d:
         25:25:9a:57:af:54:39:6e:f5:fb:43:cd:65:52:3d:fe:1a:46:
         c7:3e:e6:12:25:97:d3:a0:b5:bf:a4:6f:dc:a0:98:fe:91:9d:
         2f:7e:dd:2d:e4:f2:ae:94:6e:07:c9:75:9c:86:ff:e8:65:de:
         9e:60:8c:d7:79:bc:3c:37:bc:93:2f:8e:46:49:e8:9b:33:8e:
         07:c8:f6:92:c5:67:1a:73:2f:e2:42:84:60:ac:71:fe:0e:97:
         89:9e:7e:22:2b:3e:80:2f:8a:28:6c:cc:3c:14:c9:4e:1e:1d:
         9a:6c:89:a6:ab:af:02:ed:e0:76:f6:ef:5b:34:ff:93:b0:ff:
         bc:6e:8c:69:fe:88:ff:9b:a4:00:6e:06:37:1b:18:41:ea:2f:
         7d:ff:72:9b:78:62:f3:8f:96:54:f6:2d:0b:71:95:54:34:60:
         61:87:6d:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFBQUYxMTAvBgNVBAUTKEFCRTIzQThBMDExRUQzMjg2MTU1REE1MUY1QUQ3OEMx
QjZGQ0M5M0QwHhcNMjYxMDA1MDIxNDMxWhcNMjYxMDEyMDIxNDMxWjAYMRYwFAYD
VQQDEw02YWMzMDgwOC0xM2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4AI1zNgwUsczJdTDtpGH4IcNYXdU8SLYsoaZmlIAeKRCqW9orynXPo0UBOSz
AZPCFpD/iQCSDCGBrRVps8hLGyWrJDJ4l4rS8//AmaKUypdleiDjVwAJOtjVg0Oe
Db/5QkXqimu5Q6cb5gVzchBMc0vpY59XJL3E5QBk9Qtrr84jHzqdIn2H24SGb1R5
F3MGiDjxtodlBrHFzxfDOyICDiy7/sEkfphlK1t8JtHnXmcex3q3QnsmEGiZYGJa
YDg9IMrvum31gwF9g85YpefzLl9hwPI3aVt4Z73alT8wHOGEa8QjItif2zJH8VD/
Gkj6ZHRqLW1ZfJnnwuXcPNO3EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiaGKWD
K/AEayoaKWhsTmyFYldGMB8GA1UdIwQYMBaAFKviOooBHtMoYVXaUfWteMG2/Mk9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUFBRi81NkIwMURDMEY4
NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5aGhWZHBSOWExNHdiYjh5
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EtSTZpZ0VlMHloaFZkcFI5YTE0d2JiOHlUMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUFBRi81NkIwMURDMEY4NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5
aGhWZHBSOWExNHdiYjh5VDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApVLuU2mc03SmaKgnRBAJIL2Y3fBUo755Oljix6Oob3PTkRH1IG+ESGXOw77b
VZ3KPm0ulXjlskvAWHUaeGmSRnzugucl+HUHMR7hXyrf/3qaT8vljyA69H2dJSWa
V69UOW71+0PNZVI9/hpGxz7mEiWX06C1v6Rv3KCY/pGdL37dLeTyrpRuB8l1nIb/
6GXenmCM13m8PDe8ky+ORknomzOOB8j2ksVnGnMv4kKEYKxx/g6XiZ5+Iis+gC+K
KGzMPBTJTh4dmmyJpquvAu3gdvbvWzT/k7D/vG6Maf6I/5ukAG4GNxsYQeovff9y
m3hi84+WVPYtC3GVVDRgYYdtZA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:15:15 2026 by rpki-client