Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
File:                     1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json)
Hash identifier:          oEfT0kJIb9mqTtNH0Yy3sKvFi38XYUyFOdVBhUQpVHM=
Subject key identifier:   76:F4:C1:1C:69:B6:D4:CA:04:6D:67:F5:71:2C:CC:45:FF:0B:5C:C7
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Certificate issuer:       /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial:       0C34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
Manifest number:          0C20
Signing time:             Sat 24 Oct 2026 18:50:01 +0000
Manifest this update:     Sat 24 Oct 2026 18:50:00 +0000
Manifest next update:     Sat 31 Oct 2026 18:50:00 +0000
Files and hashes:         1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: XI1ZlH8Q7k2beNIuIs7UnY+3sndoOGABFmx8gaHVUzw=)
                          2: 74CA44AA049F11F087661234C4F9AE02.roa (hash: rIJLG/8SjOwLF9FVD1K6pR7ghzCI3KLic0aZugbbIUs=)
                          3: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: BbFVl72vJe1WyfGWNNCXlRQgo33o4IIXdFPTkYW2Jg0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
                          rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3124 (0xc34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
        Validity
            Not Before: Oct 24 18:50:00 2026 GMT
            Not After : Oct 31 18:50:00 2026 GMT
        Subject: CN=6adcfdd9-9ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:77:5c:80:6d:09:06:e7:7e:e3:0c:be:97:
                    79:ff:04:a0:55:60:1b:fc:5c:05:cb:0d:fc:e4:4f:
                    da:12:bc:db:9f:50:7b:a6:ed:e9:47:2f:aa:94:fe:
                    24:01:18:2a:e8:ce:6c:42:eb:4c:0a:50:f5:d9:dd:
                    ec:90:42:25:06:89:f7:66:0f:1b:7f:3f:f1:09:ae:
                    6f:e8:d2:b5:5d:48:fb:eb:d8:79:9b:ec:94:46:3c:
                    cd:73:9f:bb:c8:96:15:1e:2e:da:cc:9d:ff:72:91:
                    fa:08:e1:b2:e5:97:2a:ba:29:0f:73:d5:ff:fd:da:
                    85:3a:50:e8:0c:ab:74:7b:73:1f:ae:13:66:44:c6:
                    b6:bd:fb:70:f4:df:8f:bc:06:1a:73:03:a5:23:76:
                    0c:0f:9e:ff:38:d6:d3:53:24:80:4e:d1:e3:84:7d:
                    e4:e1:78:9c:09:d4:17:5c:c0:a4:de:e5:41:3d:c1:
                    b1:bc:c2:2d:67:82:77:1b:5a:07:98:98:16:93:80:
                    96:2d:88:15:cc:d3:ce:8f:2f:72:47:67:4f:49:f7:
                    18:09:0d:31:62:30:c2:d7:90:41:75:e0:92:1c:8f:
                    8a:82:ab:eb:b7:d0:71:9c:aa:9c:97:2e:51:c3:41:
                    d8:14:63:4a:6e:79:d2:3c:5a:ac:88:09:70:50:cc:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F4:C1:1C:69:B6:D4:CA:04:6D:67:F5:71:2C:CC:45:FF:0B:5C:C7
            X509v3 Authority Key Identifier:
                keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:55:97:2c:ad:39:e7:b8:97:7d:62:7e:be:44:a4:a2:c6:e1:
         6e:69:92:8d:57:5d:84:87:68:d0:83:d0:b2:ee:ff:f9:cd:d0:
         08:9d:42:6d:ca:bb:17:48:c8:23:47:8d:01:0e:7c:d0:47:db:
         a7:73:fb:5a:27:09:af:5c:e1:e3:b2:8f:5d:74:b4:ea:41:47:
         b8:4a:1c:2e:a2:d3:03:a0:87:b6:d6:36:7c:42:36:c1:c2:0b:
         f9:bc:73:1e:90:fb:51:c7:35:1f:8e:e8:0c:ab:a6:02:a9:b3:
         65:ef:87:da:7b:6f:b7:ec:26:14:1b:33:7d:c6:b2:2b:c0:c6:
         8c:de:7a:46:e5:9f:78:ed:82:e0:79:7f:bf:16:5b:64:46:13:
         24:b8:b7:75:f9:03:88:fe:61:36:0e:7d:da:98:8d:96:a4:d8:
         f3:4b:77:e4:8e:26:dc:37:fe:2e:6e:87:31:0c:b2:fb:04:2b:
         0d:53:4c:38:96:4a:ab:36:de:51:77:8b:79:5d:df:68:1d:28:
         42:0d:2f:e8:97:5c:fa:ee:36:d4:70:6c:9f:3d:42:d7:10:5a:
         a9:81:a9:46:6a:4a:ed:fb:fc:58:4e:67:c8:cf:1b:ef:5a:f2:
         80:13:79:a2:44:7a:d9:a7:0f:ba:7c:ad:67:ab:3f:85:a1:ce:
         fc:f2:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:48:49 2026 by rpki-client