Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
File:                     qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json)
Hash identifier:          iQV5IeggJVOU60o6fgpngD2VVMb0DebipXH6W3K6tpc=
Subject key identifier:   7F:5C:9D:C3:FB:D5:70:4C:E0:31:07:4E:36:59:F9:3A:46:41:11:58
Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
Certificate issuer:       /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
Certificate serial:       02E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
Manifest number:          02DD
Signing time:             Sat 17 Oct 2026 01:38:29 +0000
Manifest this update:     Sat 17 Oct 2026 01:38:29 +0000
Manifest next update:     Sat 24 Oct 2026 01:38:29 +0000
Files and hashes:         1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: fgxArSvmttmwUZ9YEoYC0TJsM1mlyM8pJD3AJChmu8M=)
                          2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: CcNczHQOW8yB5Q317lvbnzk6vw5R1G1tvlVbiwaOecw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl
                          rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 01:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
        Validity
            Not Before: Oct 17 01:38:29 2026 GMT
            Not After : Oct 24 01:38:29 2026 GMT
        Subject: CN=6ad2d195-8b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:f1:24:91:9d:20:00:19:60:be:0f:4a:bd:
                    eb:43:e9:22:0c:6c:64:b7:c7:dc:76:1e:1d:26:2f:
                    10:d9:ee:de:cf:8b:9a:fe:6f:84:63:f9:b6:48:00:
                    a5:93:fd:c3:e5:59:3d:08:29:a3:f7:fb:d1:25:08:
                    4e:76:ce:b1:90:91:2a:2a:c6:21:ae:66:db:61:a5:
                    23:65:94:19:f6:92:07:9c:94:fd:c8:bb:1a:bc:43:
                    90:88:42:66:3b:75:db:ce:cc:61:82:64:f1:e9:49:
                    fd:4d:b4:ef:77:8d:7f:2e:5e:2b:bb:36:06:02:9a:
                    c0:b2:b4:0c:ab:d6:53:f6:0f:c9:cd:07:f1:3e:07:
                    29:61:f3:22:47:dd:fe:25:7d:71:2c:99:fc:18:9b:
                    2d:80:13:dc:d0:69:e5:f6:25:cc:ea:26:39:c2:ea:
                    49:ba:8c:e1:f0:37:6c:03:70:c9:9b:f4:1c:45:06:
                    b8:98:c1:af:52:4d:15:50:1e:77:ad:8f:b8:b4:20:
                    f5:26:07:c5:2b:e0:32:e9:d7:f1:4f:e0:f3:0c:b8:
                    a1:b8:d0:78:cf:44:fa:69:03:75:9a:1a:fe:b0:09:
                    a5:1b:8a:b8:eb:5c:0a:a1:c7:c7:38:00:51:e7:7f:
                    1f:a0:3d:e7:85:17:fb:18:ca:1d:68:e8:36:35:b1:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5C:9D:C3:FB:D5:70:4C:E0:31:07:4E:36:59:F9:3A:46:41:11:58
            X509v3 Authority Key Identifier:
                keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:6a:44:21:8f:e9:9d:3d:d9:64:d4:9d:be:ea:98:9c:bb:52:
         25:57:4b:d5:c1:b2:20:dd:ac:5e:6c:3d:72:86:7e:75:bb:c1:
         65:35:4a:98:aa:d5:a8:ff:28:ee:4a:3e:75:e1:7d:00:36:96:
         59:25:ae:dc:cf:f7:0b:d3:3c:63:05:4f:ed:cd:91:06:c5:d7:
         22:8c:b6:c3:a6:a9:74:1e:f7:1a:88:8a:53:9c:de:b1:28:49:
         38:1d:c6:c5:e1:b1:75:ff:4b:1d:da:7d:bd:db:21:cd:3c:97:
         6a:f8:26:be:6d:75:5f:c4:37:d2:fa:f5:2f:cb:c2:f6:84:2e:
         11:6b:f2:c0:83:05:5f:e2:79:4d:fb:b8:46:fe:5a:de:f9:88:
         26:82:92:4a:65:45:dd:ef:d4:f6:54:ba:8d:15:c7:9f:0a:b9:
         b9:f6:8d:ed:a6:9e:4a:be:a1:77:98:f3:54:55:a9:e2:1d:02:
         4f:72:d3:76:cb:ad:c6:63:c9:b4:3b:3e:24:e7:74:a3:c1:22:
         1c:94:4a:1f:54:c0:e2:0c:83:1d:6c:f7:7c:9a:9c:a8:6d:5a:
         04:41:81:8d:f1:54:c3:14:08:2d:3d:d9:f3:1d:f9:4d:44:2c:
         4c:fc:74:b8:00:c6:af:4a:f8:6b:82:31:7b:b1:58:6f:93:4c:
         f2:1a:93:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0
NUVFOTYzQjUwHhcNMjYxMDE3MDEzODI5WhcNMjYxMDI0MDEzODI5WjAYMRYwFAYD
VQQDEw02YWQyZDE5NS04YjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2jxJJGdIAAZYL4PSr3rQ+kiDGxkt8fcdh4dJi8Q2e7ez4ua/m+EY/m2SACl
k/3D5Vk9CCmj9/vRJQhOds6xkJEqKsYhrmbbYaUjZZQZ9pIHnJT9yLsavEOQiEJm
O3XbzsxhgmTx6Un9TbTvd41/Ll4ruzYGAprAsrQMq9ZT9g/JzQfxPgcpYfMiR93+
JX1xLJn8GJstgBPc0Gnl9iXM6iY5wupJuozh8DdsA3DJm/QcRQa4mMGvUk0VUB53
rY+4tCD1JgfFK+Ay6dfxT+DzDLihuNB4z0T6aQN1mhr+sAmlG4q461wKocfHOABR
538foD3nhRf7GModaOg2NbFyXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9cncP7
1XBM4DEHTjZZ+TpGQRFYMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF
MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh
Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqGpEIY/pnT3ZZNSdvuqYnLtSJVdL1cGyIN2sXmw9coZ+dbvBZTVKmKrVqP8o
7ko+deF9ADaWWSWu3M/3C9M8YwVP7c2RBsXXIoy2w6apdB73GoiKU5zesShJOB3G
xeGxdf9LHdp9vdshzTyXavgmvm11X8Q30vr1L8vC9oQuEWvywIMFX+J5Tfu4Rv5a
3vmIJoKSSmVF3e/U9lS6jRXHnwq5ufaN7aaeSr6hd5jzVFWp4h0CT3LTdsutxmPJ
tDs+JOd0o8EiHJRKH1TA4gyDHWz3fJqcqG1aBEGBjfFUwxQILT3Z8x35TUQsTPx0
uADGr0r4a4Ixe7FYb5NM8hqTPw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:51:00 2026 by rpki-client