Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
File:                     mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json)
Hash identifier:          8JrGt5ws6/cbxdOr3QgUsh9UyvCZE2Ed45fj74qVVAE=
Subject key identifier:   BA:B7:AF:44:C1:F3:72:E0:29:E9:28:0F:E2:F8:F2:5E:05:D1:9D:14
Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
Certificate issuer:       /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
Manifest number:          DA
Signing time:             Thu 27 Aug 2026 06:07:43 +0000
Manifest this update:     Thu 27 Aug 2026 06:07:42 +0000
Manifest next update:     Thu 03 Sep 2026 06:07:42 +0000
Files and hashes:         1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: MsPw16mVCr6vSrie4dC/+yi1T9MLK4mOPlhY7+dKIUc=)
                          2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: dbHPkMuEOzuqpzoFmdsmiLtbpvTBxHiZw5BwSoqb+aQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 06:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
        Validity
            Not Before: Aug 27 06:07:42 2026 GMT
            Not After : Sep  3 06:07:42 2026 GMT
        Subject: CN=6a8fd42f-332f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:95:dd:58:af:a4:f6:aa:14:3f:f5:a0:53:
                    f9:2d:57:c9:29:40:92:af:04:41:4c:86:16:8b:90:
                    cf:71:87:30:7c:03:da:25:c1:0c:de:81:c5:68:42:
                    57:09:2d:df:c4:bb:55:73:02:4f:1d:9e:b9:4f:df:
                    b2:1b:1b:a9:8f:c7:6f:24:bf:cb:e5:b8:35:97:82:
                    7d:9c:40:08:f8:48:b3:4c:da:32:7c:a5:31:95:91:
                    fd:99:2d:34:22:b5:4c:13:10:8c:8f:02:c6:2a:e8:
                    04:20:68:fe:8f:49:5f:23:73:7a:4b:5e:06:22:26:
                    17:00:c4:d0:cf:7a:f6:e2:cd:73:7f:0d:d3:ae:e4:
                    c2:dc:26:af:59:82:22:c4:6e:a7:c2:02:00:8c:ea:
                    8f:5f:b0:e8:59:80:5a:0a:f5:b3:4b:31:31:86:74:
                    95:86:e7:63:29:4f:d1:a4:47:4f:51:2a:ed:6f:a8:
                    7b:e6:a2:41:a4:b1:6c:17:5a:d0:21:f1:af:3a:69:
                    83:14:c4:d1:b1:9f:55:8e:96:1d:81:cc:86:77:72:
                    a8:b7:8b:2a:f3:07:5c:6d:6b:ca:73:0e:51:6f:49:
                    93:00:2f:91:54:41:60:86:f5:df:57:92:3c:1f:71:
                    f1:cd:e2:db:35:1a:50:02:a2:77:1d:ae:b3:44:38:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B7:AF:44:C1:F3:72:E0:29:E9:28:0F:E2:F8:F2:5E:05:D1:9D:14
            X509v3 Authority Key Identifier:
                keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:bd:0c:ac:f6:41:e3:80:39:93:47:b4:e9:68:8e:f0:7f:8e:
         a4:23:3c:dc:38:0c:23:3e:fa:0f:37:bb:4f:dc:05:03:d8:cc:
         0e:c6:80:e7:db:50:a3:99:32:a1:92:ca:73:a4:db:ea:d0:55:
         33:a9:45:3b:29:9e:d7:80:15:fb:d5:aa:12:ac:15:69:2a:ef:
         08:1e:be:2e:74:e9:61:d6:68:52:34:db:2c:68:b3:a6:a4:7e:
         f4:aa:55:a4:8f:f5:6a:b5:f9:c2:a7:66:70:2a:4b:16:7d:be:
         ae:ac:de:2f:a2:18:3e:2d:cf:48:e8:95:97:4d:41:94:84:b8:
         07:8f:69:7a:ec:25:f4:b3:a5:35:96:50:8a:91:40:1a:06:1f:
         6c:51:b6:58:4b:e2:a7:ac:65:cd:99:a8:1c:81:16:d6:8e:93:
         75:f0:7a:18:9d:7e:fc:56:d0:ce:8f:aa:e1:b7:7e:72:f9:e4:
         f6:0e:bb:5d:a0:0b:c1:fd:5a:2c:21:fa:e9:8a:00:8c:ab:c7:
         03:0b:eb:32:94:94:5f:e7:1b:50:59:1e:0f:94:90:64:9c:2e:
         00:4a:ff:d8:19:ad:ba:06:91:29:ac:d7:32:58:39:7d:61:3c:
         1c:ab:1e:e6:0b:35:62:a1:67:fd:4e:39:22:00:b3:d2:fe:5a:
         41:ba:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 02:35:56 2026 by rpki-client