Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
File:                     QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json)
Hash identifier:          AIJ10lKwV9VZ1TYV6o7RcWJ0qDBvfk+6HlcSvJc+DaM=
Subject key identifier:   B4:39:C6:39:AC:F2:01:12:EF:21:67:BA:A7:F2:9B:15:1A:54:C5:85
Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
Certificate issuer:       /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Certificate serial:       138D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
Manifest number:          492C
Signing time:             Fri 04 Sep 2026 14:21:10 +0000
Manifest this update:     Fri 04 Sep 2026 14:21:09 +0000
Manifest next update:     Fri 11 Sep 2026 14:21:09 +0000
Files and hashes:         1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: VVBfZcIICxQ1eH1iEEJ1q60BHwocz+SwgFC9W6P/FEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5005 (0x138d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
        Validity
            Not Before: Sep  4 14:21:09 2026 GMT
            Not After : Sep 11 14:21:09 2026 GMT
        Subject: CN=6a9ad3d5-7b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:b7:65:d7:9a:6f:42:de:06:8a:24:a9:db:
                    c9:89:a5:97:51:1f:f9:fe:e1:50:fe:d5:a9:c9:40:
                    af:88:04:3d:17:f3:40:91:07:5d:e8:3b:ba:fc:5a:
                    fc:a0:51:72:b4:f7:c6:33:07:d2:08:ff:f0:57:e6:
                    0c:fc:ce:fd:d5:75:9e:98:3b:2c:3a:c0:19:7b:b9:
                    5d:04:12:9b:9c:49:6a:c3:70:53:93:80:6f:d3:5a:
                    d3:a4:03:7f:dd:fe:8f:ed:f6:c1:23:11:ac:47:c5:
                    cc:f8:a4:91:32:24:25:3e:8e:83:01:a4:9e:9d:40:
                    a8:63:8c:78:01:be:15:5a:d8:26:e9:2a:81:0b:30:
                    62:a7:86:8e:c3:69:19:57:0d:55:54:ad:8d:da:58:
                    0e:22:9a:33:af:27:f0:25:65:26:17:2d:ff:ee:da:
                    b9:c2:3a:de:e0:57:4f:55:89:be:aa:bb:7c:55:7c:
                    19:a9:99:6d:dc:57:7c:47:7b:44:76:14:f0:8d:7c:
                    e9:b3:8b:7a:7a:a1:6e:57:6a:86:54:ea:77:f7:d8:
                    68:95:42:4a:9e:74:2d:5e:10:c1:25:52:31:e8:da:
                    e5:fe:71:96:4d:e4:7b:96:22:1d:9d:48:e8:08:e3:
                    0a:9b:0e:de:6c:09:40:d3:ab:3e:ed:ff:68:aa:d7:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:39:C6:39:AC:F2:01:12:EF:21:67:BA:A7:F2:9B:15:1A:54:C5:85
            X509v3 Authority Key Identifier:
                keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:af:70:57:75:86:da:99:82:55:33:2c:28:78:40:80:ae:9f:
         bb:61:f2:68:f7:f3:32:f0:01:62:64:b4:4b:64:39:23:3c:34:
         8e:1f:47:67:41:63:24:f8:0a:1d:38:e5:4c:b7:b4:3f:42:50:
         ea:a8:90:5b:70:ac:3b:ae:06:7c:6f:5b:58:17:f5:10:d7:08:
         81:e1:fc:b1:c8:4b:33:16:81:05:17:00:a2:c6:f6:c7:ee:1c:
         00:55:1c:43:1a:ae:b7:07:58:81:a6:22:e8:2b:c6:94:24:4a:
         7f:1b:fe:a9:5f:fc:68:76:2f:73:4a:15:94:63:31:e0:db:16:
         a8:6f:83:d6:60:5b:f5:91:f8:7d:b2:8b:b1:42:72:04:6b:34:
         47:77:8e:fe:00:bd:8b:27:c4:45:08:8f:9b:bf:2b:04:5c:2a:
         f1:83:bd:77:4d:fd:5f:f6:2a:18:19:d0:e7:f3:3e:e2:ec:66:
         7e:26:27:e4:a3:07:46:47:43:b3:69:a8:cb:1c:3d:20:4a:c4:
         2f:be:94:a2:c3:88:3a:5c:c1:b8:ae:20:ee:e7:a4:45:b6:4d:
         52:10:a8:8f:eb:4f:78:a9:3d:4e:e7:32:36:ad:53:93:ed:de:
         c7:5d:7a:32:21:de:8c:71:e1:86:3c:a0:b7:69:aa:7c:31:12:
         8e:ea:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:47:23 2026 by rpki-client