Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
File:                     p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json)
Hash identifier:          xmDI9A8ypRiLQlg0O1l9kou03GNtNccVMSkrExzGRNc=
Subject key identifier:   8F:AA:E5:21:1F:DA:81:76:77:49:86:58:A6:38:42:9B:5A:2F:FE:A0
Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
Certificate issuer:       /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Certificate serial:       1ECD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
Manifest number:          1EC1
Signing time:             Sun 04 Oct 2026 16:03:41 +0000
Manifest this update:     Sun 04 Oct 2026 16:03:41 +0000
Manifest next update:     Sun 11 Oct 2026 16:03:41 +0000
Files and hashes:         1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: iM8KfKcCVW9tKYu5oyuyk7NxtLAJvtycN+Nad0G4wac=)
                          2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: 9fJ1ri6IaNU9VtWg8Hqy+rRwD5x8nCDjNKKvvrEFZII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
                          rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:03:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7885 (0x1ecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
        Validity
            Not Before: Oct  4 16:03:41 2026 GMT
            Not After : Oct 11 16:03:41 2026 GMT
        Subject: CN=6ac278dd-39af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:1c:f2:ab:35:56:c5:33:a4:93:5e:93:33:
                    59:7d:d9:c1:a1:36:f0:ce:43:49:27:a9:e3:44:81:
                    37:4a:b1:0f:df:ed:44:31:38:1b:eb:32:ab:c3:39:
                    0a:b4:39:9f:ee:01:aa:98:b7:4c:08:87:4d:7d:d5:
                    13:d7:b6:da:db:61:1a:bf:eb:79:65:a5:d9:24:c2:
                    cf:24:cf:e2:88:3e:52:df:b0:8a:79:bc:a7:5e:0e:
                    c5:17:48:99:c4:28:ab:b6:f5:8b:19:9a:7e:2f:c2:
                    92:0b:4b:4a:56:97:47:33:a7:5c:24:64:fc:62:7e:
                    f8:d4:59:5e:8c:57:13:95:48:42:69:f4:23:36:09:
                    20:4c:6f:2f:7d:3e:d3:ac:20:97:cc:96:e9:ef:86:
                    25:30:ea:6a:dd:15:1f:a7:83:ff:25:67:b3:33:93:
                    77:c8:16:48:46:4a:4b:d8:2f:4d:3d:3d:55:57:2b:
                    a2:c1:7f:eb:12:4f:77:c0:19:2c:6d:1c:8b:8b:42:
                    9c:7e:44:be:8a:ba:8e:69:69:4c:21:45:e7:db:d4:
                    be:0b:15:6d:a2:72:5e:b4:e5:b9:55:c7:55:4b:dc:
                    3c:b3:9d:08:c0:f5:20:6c:4a:4d:03:15:1f:be:64:
                    76:d5:cf:bb:f3:47:da:92:d5:4a:c5:46:28:ad:be:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AA:E5:21:1F:DA:81:76:77:49:86:58:A6:38:42:9B:5A:2F:FE:A0
            X509v3 Authority Key Identifier:
                keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:99:90:80:76:16:53:ee:b7:73:92:95:e8:ca:5c:90:1f:ad:
         f0:6d:8c:9f:61:59:9e:e3:6f:7d:56:8b:1b:84:ca:fe:ca:e6:
         42:30:12:ea:8c:45:86:1d:80:31:4d:a0:8f:c5:0f:0e:d5:2f:
         ea:d5:a9:51:08:3a:6b:13:fa:b4:bb:e8:b8:da:05:ed:55:d1:
         03:ff:b7:c4:2b:bb:b2:18:88:98:04:f4:fa:48:09:e6:86:f8:
         fd:5d:37:45:66:72:d6:7b:ce:42:ea:a6:c6:94:c6:78:a2:c9:
         21:3c:3b:a3:e4:66:f3:1c:64:ee:51:ca:63:e6:a9:e5:ea:c4:
         89:f4:50:04:10:d2:0d:7c:ef:47:22:56:df:fa:65:0c:40:a3:
         e0:3e:ac:85:96:73:4d:ef:fb:dd:90:3f:71:db:e3:a2:65:a9:
         65:97:bc:08:d6:f2:c4:39:db:ac:54:4b:c3:7c:9c:1d:75:86:
         03:d1:92:a3:9e:37:c8:4b:c8:17:1e:12:ef:d1:3e:ca:91:67:
         5d:84:bd:42:b9:8d:ed:00:8b:9f:4f:df:60:9e:ac:d9:87:03:
         1f:83:fd:40:92:99:e9:38:76:22:71:ec:9a:f8:7a:f5:05:be:
         60:09:d6:b0:12:b1:09:47:52:8b:ee:cc:14:f9:9f:9e:dc:82:
         9e:1c:4c:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx
NzQ0RTBCRjEwHhcNMjYxMDA0MTYwMzQxWhcNMjYxMDExMTYwMzQxWjAYMRYwFAYD
VQQDEw02YWMyNzhkZC0zOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Rsc8qs1VsUzpJNekzNZfdnBoTbwzkNJJ6njRIE3SrEP3+1EMTgb6zKrwzkK
tDmf7gGqmLdMCIdNfdUT17ba22Eav+t5ZaXZJMLPJM/iiD5S37CKebynXg7FF0iZ
xCirtvWLGZp+L8KSC0tKVpdHM6dcJGT8Yn741FlejFcTlUhCafQjNgkgTG8vfT7T
rCCXzJbp74YlMOpq3RUfp4P/JWezM5N3yBZIRkpL2C9NPT1VVyuiwX/rEk93wBks
bRyLi0KcfkS+irqOaWlMIUXn29S+CxVtonJetOW5VcdVS9w8s50IwPUgbEpNAxUf
vmR21c+780faktVKxUYorb7xvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+q5SEf
2oF2d0mGWKY4QptaL/6gMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1
QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
REQzRi9DMUE0N0ZEODk1QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNx
dDFzUmVSMVY0NTBYUk9DX0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALpmQgHYWU+63c5KV6MpckB+t8G2Mn2FZnuNvfVaLG4TK/srmQjAS6oxFhh2A
MU2gj8UPDtUv6tWpUQg6axP6tLvouNoF7VXRA/+3xCu7shiImAT0+kgJ5ob4/V03
RWZy1nvOQuqmxpTGeKLJITw7o+Rm8xxk7lHKY+ap5erEifRQBBDSDXzvRyJW3/pl
DECj4D6shZZzTe/73ZA/cdvjomWpZZe8CNbyxDnbrFRLw3ycHXWGA9GSo543yEvI
Fx4S79E+ypFnXYS9QrmN7QCLn0/fYJ6s2YcDH4P9QJKZ6Th2InHsmvh69QW+YAnW
sBKxCUdSi+7MFPmfntyCnhxM+w==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:47 2026 by rpki-client