Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File:                     QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier:          qxb5BTfU/3axcJc424bsMQWoqs8hbhkFfTW7Yz7g1IM=
Subject key identifier:   54:0F:4F:E8:13:05:35:E7:DF:25:BC:3C:34:03:E8:3F:77:AD:BD:F8
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer:       /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number:          F6
Signing time:             Sat 31 Oct 2026 06:48:48 +0000
Manifest this update:     Sat 31 Oct 2026 06:48:47 +0000
Manifest next update:     Sat 07 Nov 2026 06:48:47 +0000
Files and hashes:         1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: wdMxjq+f7udfJodRisJcs4+Nol+IaHFoGJsnCh3hGpw=)
                          2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ol5yFCZOBiVTvk8E7fVatGRyyicC3FHaDbYq9ITTPLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
                          rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 06:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
        Validity
            Not Before: Oct 31 06:48:47 2026 GMT
            Not After : Nov  7 06:48:47 2026 GMT
        Subject: CN=6ae58f50-3648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:7e:71:68:6b:ea:5a:53:12:0e:4d:7c:09:
                    32:9c:bf:0e:d6:fe:3c:f6:55:28:5b:ff:45:cf:07:
                    77:66:37:92:5a:31:15:e0:45:14:c3:b7:d5:25:cc:
                    89:d6:ad:2c:d7:6d:3d:67:b0:91:61:e3:79:7e:b7:
                    b7:89:4a:50:33:b4:70:ba:53:d6:ab:ba:29:cf:71:
                    de:0e:22:72:5a:4e:23:56:f3:fe:d2:9d:84:30:69:
                    e8:b0:aa:45:13:34:63:7b:02:14:5e:6e:d1:01:3e:
                    58:6e:13:29:f6:48:34:92:bd:08:bc:59:74:42:2b:
                    68:29:82:76:59:56:10:9c:0d:d8:1e:dd:0e:21:fe:
                    8c:be:e8:e1:52:56:2a:4f:d3:12:93:30:4c:d1:3f:
                    d9:38:91:b9:d8:b8:34:eb:54:f8:94:2d:62:ac:40:
                    22:2d:4d:a9:b2:46:38:a1:51:27:41:84:4e:fc:c2:
                    b7:db:7e:6e:4b:39:36:17:1e:c7:a0:7f:b3:ad:1d:
                    7c:6e:cc:d9:1f:9a:5e:88:b7:29:1a:ee:f7:c7:c1:
                    c2:fe:b9:3d:a7:10:44:6b:3b:68:c2:00:d6:8b:b0:
                    a7:b7:c6:aa:73:cd:f6:19:f7:14:ce:33:91:11:8a:
                    de:7b:3e:c1:13:33:f8:03:f6:99:de:99:3e:c1:78:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0F:4F:E8:13:05:35:E7:DF:25:BC:3C:34:03:E8:3F:77:AD:BD:F8
            X509v3 Authority Key Identifier:
                keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:1d:3f:45:60:e2:23:e6:91:15:07:f1:fc:36:b4:23:b5:
         e1:51:58:de:25:61:ad:fb:e6:ba:61:48:97:00:c0:6e:83:35:
         1e:f7:d6:0b:31:73:df:b2:a6:cd:60:4b:b3:4a:55:56:05:08:
         0f:6e:3d:63:dd:75:e4:09:eb:51:6d:e8:af:5f:f7:a5:34:33:
         8a:c5:22:74:0f:cd:a1:56:f5:ab:85:41:8d:7e:63:e1:32:d6:
         3d:b8:27:02:ad:2c:15:21:dc:17:a4:e7:25:72:0d:fa:82:d3:
         e4:7b:1c:3b:ae:a3:a0:61:a0:20:c3:4e:b0:88:81:12:4d:39:
         cd:82:d0:54:a9:03:b1:03:dc:8a:0f:2e:a8:15:49:c2:0f:c9:
         a4:be:ca:0b:ed:df:6a:10:58:03:ed:5e:28:b7:68:41:25:fc:
         7d:e2:89:94:b2:2f:f6:b0:ff:a0:07:ca:6f:e7:36:89:d5:30:
         d7:f8:3b:ef:a1:ed:26:c3:de:f7:73:1f:5a:e0:29:8a:db:e7:
         81:a1:07:99:09:49:86:22:35:09:3d:d3:f5:aa:a9:d8:03:15:
         52:00:1f:42:27:b8:ae:b5:1c:04:47:80:9f:11:e8:4d:88:3c:
         14:96:af:ac:23:dc:1c:59:9f:e2:ef:f5:c4:9f:e9:2e:eb:4b:
         4d:e7:27:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:16:14 2026 by rpki-client