Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
File:                     qUY-3mcgvjW60R9aiYbbsXpMMqs.mft (raw, json)
Hash identifier:          dmn5d+FstkBWotAP88K6U8GC6jdduakN13JylNxcl6E=
Subject key identifier:   31:42:E4:3B:7F:77:8D:F7:28:A9:31:0E:66:70:95:8F:95:F5:38:65
Authority key identifier: A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
Certificate issuer:       /CN=A91F8AD4/serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
Manifest number:          3A
Signing time:             Wed 09 Sep 2026 09:02:57 +0000
Manifest this update:     Wed 09 Sep 2026 09:02:56 +0000
Manifest next update:     Wed 16 Sep 2026 09:02:56 +0000
Files and hashes:         1: qUY-3mcgvjW60R9aiYbbsXpMMqs.crl (hash: m03rvlEWvhwRbdapp9Q9Hbo7T3z7pGCVENPE5DJdqoE=)
                          2: BE39D67C9B9911F1BF662AD04A11F970.roa (hash: v5g2BORvZZ0KNl/xAkEJeGe6Q/u6ix9gZ0dh/WdAiUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 09:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AD4, serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
        Validity
            Not Before: Sep  9 09:02:56 2026 GMT
            Not After : Sep 16 09:02:56 2026 GMT
        Subject: CN=6aa120c1-a27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:64:7c:4c:4a:ba:46:43:13:7b:5b:b9:23:
                    70:79:e8:02:ea:f9:b5:bc:10:b1:c3:7c:d7:ac:e2:
                    16:08:08:40:7c:76:55:f2:02:f6:33:e1:59:e5:8f:
                    dd:92:06:8f:7b:0e:a6:dc:c0:1f:ed:73:a8:4a:35:
                    6a:2b:b6:84:00:d8:40:27:60:f1:2f:72:49:66:a5:
                    34:f6:46:23:52:46:a7:49:c9:f9:cb:48:37:6d:8e:
                    34:ab:d0:bd:58:82:de:ad:78:50:75:c9:2b:41:97:
                    a9:8f:83:75:df:db:3a:e1:0a:da:28:7a:75:73:1f:
                    60:f4:0a:cf:5f:93:f9:02:de:61:9d:e5:58:82:b5:
                    d3:cc:8a:83:a6:7c:0c:ef:c1:c2:16:68:e5:78:d8:
                    fe:65:c4:35:f1:96:a8:90:ea:6d:1c:82:54:72:43:
                    fc:38:28:81:65:e1:2a:61:4f:06:93:49:e7:bb:76:
                    24:61:ed:b9:52:cc:ec:dd:f0:6c:69:5f:32:5f:a2:
                    d5:e5:56:ba:47:d5:8e:92:f1:f2:8c:5f:8e:ed:e1:
                    7b:3c:ad:7a:ed:09:4f:20:b3:a2:b9:d4:e4:4e:28:
                    a2:24:d2:e3:47:be:2f:e1:df:c7:59:c5:da:f6:86:
                    0a:60:7b:23:cc:91:76:59:6a:ac:ad:0c:37:ad:41:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:42:E4:3B:7F:77:8D:F7:28:A9:31:0E:66:70:95:8F:95:F5:38:65
            X509v3 Authority Key Identifier:
                keyid:A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6f:f1:72:1d:a5:42:48:a5:02:b4:e4:f8:74:ab:0a:58:00:
         ad:04:23:41:50:15:a9:db:0f:16:dd:db:a7:da:87:e4:79:c4:
         6c:89:fc:78:e3:38:53:16:76:01:e9:59:1d:dd:30:c9:b0:34:
         83:24:4f:e5:93:2c:f6:c1:5a:69:d0:b5:7a:ea:58:6e:00:9c:
         26:50:5e:4b:8f:f6:c0:20:70:6e:a0:d4:ac:ae:36:45:a2:ba:
         e3:bd:8d:a7:5f:ac:b3:3c:62:cf:58:42:17:33:c4:d3:b5:4b:
         ee:8b:fd:51:a6:64:2b:34:cc:f4:09:0f:a9:64:79:1f:de:29:
         58:a4:cc:7e:6e:97:86:29:36:b8:e6:67:df:e3:d6:b3:a5:e6:
         d4:17:f7:80:7f:cb:56:14:60:30:cc:9a:47:b8:6d:65:75:a9:
         da:e1:38:b5:29:2c:2f:3b:7c:ea:f5:c3:b4:87:a6:93:09:13:
         5d:ad:73:1b:7e:ac:b3:75:d7:97:79:39:88:46:ad:f4:9c:15:
         c1:b1:61:63:4b:bd:a5:b4:1f:8e:24:19:e7:1b:0b:ea:bf:e5:
         62:60:a3:1d:20:ab:97:f5:ea:a5:e0:ad:a1:dd:c8:17:05:bc:
         2d:4f:2b:a6:ef:28:e9:02:e3:d3:f9:af:75:74:7e:c4:2a:57:
         db:67:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:20:12 2026 by rpki-client