Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
File:                     1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json)
Hash identifier:          qUq4fdO9InDeGrkY1gwrYzaoWh1Snq733AEeO4YDIwc=
Subject key identifier:   DA:83:63:AF:DE:CF:E0:6A:06:82:D7:61:9D:97:90:3D:A6:6D:78:85
Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Certificate issuer:       /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
Manifest number:          028F
Signing time:             Sun 30 Aug 2026 15:51:48 +0000
Manifest this update:     Sun 30 Aug 2026 15:51:47 +0000
Manifest next update:     Sun 06 Sep 2026 15:51:47 +0000
Files and hashes:         1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: nFjKPb1xwDoAJmByG0UNCzDjc6RqYbWwVVaM0YYVWEk=)
                          2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: JNyU8R5c8QL0IEETvSkoNrLyRGc2x887+ZYrTw2mI3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 15:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
        Validity
            Not Before: Aug 30 15:51:47 2026 GMT
            Not After : Sep  6 15:51:47 2026 GMT
        Subject: CN=6a945194-a2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:98:5b:53:5c:00:f8:a0:a1:4b:3e:2c:84:
                    2f:bf:4a:f5:28:ef:13:15:97:9c:27:ed:82:09:57:
                    4b:08:5a:85:13:a2:66:b3:6b:68:ff:82:45:8e:19:
                    48:ce:0b:81:ef:9b:0e:b3:99:a0:62:34:fd:b6:2e:
                    3e:ee:65:1f:26:34:ca:02:d3:4f:c8:a6:f5:b0:97:
                    1a:b6:3b:27:03:c5:91:39:34:0d:4a:27:32:02:6d:
                    2f:e3:88:fd:71:1c:99:8b:9f:5f:06:3e:0d:95:f9:
                    e5:82:dc:6e:ab:9f:72:fd:b7:db:1d:a2:0f:94:9b:
                    bf:97:17:38:41:b9:36:8f:b7:ba:04:ba:34:5f:69:
                    b3:ea:6b:70:2c:ba:64:ed:fd:48:60:9e:0c:cc:28:
                    e8:2f:4e:e5:4c:63:33:3d:58:61:01:03:ce:c1:ca:
                    1b:1d:62:cb:73:2b:f2:57:b0:44:3f:f5:d0:c7:8c:
                    7c:fa:c2:03:ce:a0:34:93:62:3e:7d:cc:df:08:ce:
                    9e:d4:1f:7d:33:82:19:2b:c5:4f:bc:8d:19:a1:87:
                    01:96:16:92:a9:b9:a9:7a:c2:fc:66:0b:a2:e9:3f:
                    d0:3e:32:6f:32:e2:8d:ab:db:89:4e:09:8b:90:b5:
                    1a:1a:7d:1f:9c:e1:f5:dc:f0:60:24:71:d1:95:49:
                    ed:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:83:63:AF:DE:CF:E0:6A:06:82:D7:61:9D:97:90:3D:A6:6D:78:85
            X509v3 Authority Key Identifier:
                keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e2:bb:ed:8c:e0:83:07:d0:cb:f8:b4:59:2f:61:ad:58:39:
         8f:38:37:ae:84:53:1c:c7:cc:c0:6e:59:f0:6c:53:39:bf:12:
         9b:2c:d9:07:0d:74:c8:a7:65:f3:39:99:83:87:76:01:0e:64:
         25:2d:df:83:85:65:9a:2d:df:73:09:17:2d:2d:7f:68:74:c4:
         c4:93:c1:b5:b9:97:71:1b:1a:51:42:bf:d2:7b:9b:cb:0d:3d:
         49:c3:3a:af:3b:95:1c:ac:88:2a:fa:d1:bd:5a:62:68:6c:db:
         5d:b5:f2:90:85:8a:ec:94:0a:f9:3e:0f:57:7a:d3:f5:d3:c0:
         6a:7e:19:a4:a6:c1:6c:00:8c:02:24:97:e6:18:ba:52:5e:2a:
         80:4c:eb:df:3c:42:74:ff:64:79:4f:b3:cf:58:50:e8:78:da:
         ce:d7:56:e0:fc:ae:a7:90:a3:2e:ec:34:d8:5f:db:b1:7d:29:
         e5:1c:3f:8a:b0:4c:21:69:3c:75:38:ec:d3:24:83:a4:c5:b9:
         d7:23:d7:fc:78:46:98:52:96:eb:fa:1a:aa:94:6f:8b:37:83:
         e3:64:aa:f9:24:aa:29:0f:a5:9b:23:17:1a:7b:86:c2:68:9e:
         2b:a7:06:d2:7f:81:fd:b5:aa:fb:22:5c:60:5f:bd:86:4f:02:
         6f:57:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 13:23:03 2026 by rpki-client