Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File:                     QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier:          CsEO9ps93h1Vn7zUnNfKVpwi4RKSth+W/f/6lOz7eKw=
Subject key identifier:   52:85:AF:16:CD:AD:8E:4D:6E:58:8B:AB:FB:FB:1D:08:18:FD:AF:63
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       04C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number:          04B2
Signing time:             Thu 10 Sep 2026 23:44:48 +0000
Manifest this update:     Thu 10 Sep 2026 23:44:47 +0000
Manifest next update:     Thu 17 Sep 2026 23:44:47 +0000
Files and hashes:         1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: 0kXSbRNTJb2lCdyZjPR7tN2xAhqMBhhPByA6BHqkH44=)
                          2: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=)
                          3: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Sep 10 23:44:47 2026 GMT
            Not After : Sep 17 23:44:47 2026 GMT
        Subject: CN=6aa340ef-3c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:b0:87:b9:e4:21:c1:f9:b1:b4:57:5c:fe:
                    c5:f6:cf:2f:5a:c6:95:28:cb:71:30:48:58:f7:e7:
                    2f:aa:4a:0c:45:fb:20:b8:a9:df:03:0c:ce:b6:4d:
                    75:61:dd:18:1f:a2:70:a7:81:e4:9f:85:9f:3d:fa:
                    3d:09:7a:cb:3c:28:54:6e:df:b2:67:b7:7e:ad:12:
                    b1:a2:16:49:53:8f:01:f3:0a:7e:85:0f:ac:bb:b7:
                    37:63:dc:d7:da:7f:6d:dc:9b:25:d7:7b:e9:0b:3c:
                    90:d0:24:b9:42:db:cc:33:2f:2e:bb:55:c5:7c:7a:
                    3c:c8:91:0c:78:f5:d9:f6:4c:b4:85:ac:11:e1:fd:
                    60:6f:7e:91:1e:1a:7c:96:63:bd:d0:66:c9:32:04:
                    9c:d3:00:54:39:99:1c:42:7f:78:64:68:ad:47:9b:
                    df:42:4e:cc:5f:af:51:57:23:50:92:d2:b4:0a:fc:
                    ea:93:26:2f:37:d0:31:9c:cd:fe:f5:73:16:dc:d7:
                    0c:d7:bf:e4:d0:12:ad:e0:d7:32:82:f0:f3:9d:55:
                    14:b0:77:2f:ea:24:62:48:18:5b:cc:d3:98:10:26:
                    bf:cd:f1:71:1a:a4:59:5b:6f:2e:37:5a:c3:08:e1:
                    01:99:d1:06:f4:a7:a8:28:80:8a:64:f8:b3:73:f1:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:85:AF:16:CD:AD:8E:4D:6E:58:8B:AB:FB:FB:1D:08:18:FD:AF:63
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:94:34:4b:84:c3:4c:c0:5c:3b:f2:f0:62:d4:42:87:af:0e:
         1d:da:66:4d:9d:ce:42:b6:4d:9a:b3:d8:b8:92:d6:2f:91:07:
         8f:74:f2:5f:96:5c:49:95:40:4d:91:df:bd:18:08:e7:ff:e2:
         23:ca:19:15:7d:f3:27:25:ef:3d:c7:dd:8d:92:68:2a:ec:10:
         38:c3:22:c2:1c:0d:3f:ff:43:e6:8c:5b:01:6f:e8:a4:95:ae:
         c3:0b:b6:27:ae:16:b4:0c:d3:68:2c:fc:a9:d1:6c:db:a1:7c:
         6c:fd:0e:2c:b5:c1:02:aa:11:2b:0d:14:47:09:ee:bb:9e:99:
         6f:bc:ec:38:75:04:b5:08:8d:33:6a:0d:8d:8e:2a:1d:0a:c6:
         7e:41:0c:a7:40:62:2a:bb:8b:3a:03:06:bb:bb:74:c6:85:b0:
         4d:93:b8:3c:c6:3f:ce:7d:b4:bc:09:3e:50:07:01:90:ee:55:
         9a:35:37:11:28:cd:f8:67:0a:f9:ee:ff:3e:2b:c3:fc:50:e5:
         da:b3:c0:72:39:ba:c2:c9:aa:48:55:ea:cf:f3:16:df:bd:57:
         9e:e4:d5:98:3a:74:c6:40:8c:a4:f4:90:d0:54:66:9b:12:ee:
         74:09:b7:de:ac:aa:fc:83:49:30:f6:22:31:af:6f:c1:15:63:
         19:cf:96:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:31:08 2026 by rpki-client