Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
File:                     qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json)
Hash identifier:          kiami0rPUVDe+63S0/e6XTH0YmPER5scB/vTPQmY/+g=
Subject key identifier:   EF:50:F5:E4:E4:88:70:45:42:DD:AF:62:10:40:71:88:28:DD:F3:F5
Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC
Certificate issuer:       /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
Certificate serial:       07CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
Manifest number:          07C4
Signing time:             Sun 04 Oct 2026 21:28:11 +0000
Manifest this update:     Sun 04 Oct 2026 21:28:10 +0000
Manifest next update:     Sun 11 Oct 2026 21:28:10 +0000
Files and hashes:         1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: BC+ec9HSpIBrvXZ9IpMaOL13MFcmVFP8UsOxgUrHnZs=)
                          2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: +zXdWbj90V5wiCW78x9iWppvFwiybMcG8sAJuI2k4as=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl
                          rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
        Validity
            Not Before: Oct  4 21:28:10 2026 GMT
            Not After : Oct 11 21:28:10 2026 GMT
        Subject: CN=6ac2c4eb-9cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:d9:f4:a4:68:e2:d9:d9:9d:12:17:72:23:
                    c4:21:8b:a6:3a:1a:41:90:48:81:44:57:c7:20:36:
                    20:1e:45:fc:12:c2:db:cf:aa:64:b3:a9:69:a8:f0:
                    bc:c3:2f:c0:36:b8:ca:51:c3:c9:61:33:22:eb:42:
                    01:67:fd:b0:af:99:f3:c7:cb:f3:36:69:ca:d5:d2:
                    1e:f6:70:74:10:5f:fd:21:8e:2a:1d:ba:8d:d9:e8:
                    41:ae:76:7d:4d:ec:e9:a6:9d:13:be:e2:b3:7f:76:
                    85:0f:53:10:83:8c:6e:94:76:5e:69:a5:fa:13:a5:
                    ae:e5:84:b7:1e:d7:30:b1:3f:3e:d3:29:14:44:c9:
                    98:f8:28:85:cf:a2:c6:37:ab:c3:1c:6b:22:b3:7c:
                    58:6f:c9:59:b5:dc:31:4f:11:10:74:26:e3:d4:2e:
                    1a:aa:b3:e4:41:e3:71:22:f4:04:07:2f:ab:79:99:
                    0e:23:22:74:eb:e2:90:87:46:d0:02:7c:b8:d5:6b:
                    a0:62:53:ac:d6:dd:52:b7:dd:05:b6:9d:40:bc:f6:
                    cd:06:6f:75:b4:d6:83:ac:f5:86:4c:a1:88:5a:c4:
                    44:4a:8a:91:e8:1d:e1:d1:36:f8:42:6f:34:95:8f:
                    5a:c9:a6:d1:a7:6d:c7:a0:af:65:f0:45:2d:54:ff:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:F5:E4:E4:88:70:45:42:DD:AF:62:10:40:71:88:28:DD:F3:F5
            X509v3 Authority Key Identifier:
                keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:5f:7e:1e:ba:12:7b:df:57:3c:5d:36:78:e1:7b:7f:80:
         5c:ca:cd:79:2d:31:a3:d3:33:96:42:c8:37:17:22:bf:8a:0e:
         00:3d:27:6b:ea:c6:b0:18:69:4d:c9:42:9e:d3:c7:81:95:2d:
         56:d5:fd:02:f4:b8:17:59:ee:49:41:ab:50:e2:59:39:18:8e:
         62:42:a3:06:5a:df:f1:22:ab:5f:9a:fa:df:09:c8:22:ef:97:
         6e:51:b9:7a:14:f4:6d:cb:aa:f6:07:b6:a9:88:e4:0a:d2:cc:
         da:3a:e3:c3:90:2f:cc:42:0b:23:94:21:12:cf:13:9a:8f:24:
         89:d3:ec:18:e4:3c:85:dc:a0:a3:0a:a6:01:e0:7e:0d:f1:be:
         fe:7c:4d:5e:32:50:bc:02:8f:49:1f:05:84:c3:66:d3:f1:bf:
         47:bf:3e:9c:e4:46:da:44:08:da:31:1f:1f:aa:42:17:b2:7e:
         76:e9:a5:2f:c7:7d:4d:86:6d:87:ce:61:51:df:6a:88:6c:e6:
         cd:db:6c:23:b2:56:a6:f3:1b:90:55:0e:1d:c8:d8:78:c6:44:
         91:9b:eb:a7:0d:e2:be:52:e1:38:09:ff:4a:04:d5:da:87:ae:
         a9:9c:d3:0f:33:87:eb:c8:24:25:d4:00:f0:e0:26:67:38:b5:
         e1:83:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:26:18 2026 by rpki-client