Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File:                     qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier:          1EVFYDBU3q7Ki5GKkjoFKHijbJ9LIqraUp0cLLaKrCA=
Subject key identifier:   46:8A:A8:12:1D:43:68:7B:F3:18:9F:B1:64:73:A1:2F:EA:4E:AD:FE
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer:       /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial:       3698
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number:          3608
Signing time:             Thu 22 Oct 2026 14:19:01 +0000
Manifest this update:     Thu 22 Oct 2026 14:19:00 +0000
Manifest next update:     Thu 29 Oct 2026 14:19:00 +0000
Files and hashes:         1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: 1AKKKp1hlLyrfvr0lnNUCCyftcQ6xvowg/3mNRHcwn4=)
                          2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: VMik+VP2VW8b9tXPC9B03sMT9ppFEX01lrBrKEr5WZo=)
                          3: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: YjGvu7hS1PYqJK/ZSd5JlS+EEqqiFgJ4Qzr5idGzW0I=)
                          4: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: ok+z8/nWrY9G6LcZ7AHJtjTKwzWu35Z6qBj/LRRIJxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
                          rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 14:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13976 (0x3698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
        Validity
            Not Before: Oct 22 14:19:00 2026 GMT
            Not After : Oct 29 14:19:00 2026 GMT
        Subject: CN=6ada1b54-f393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:41:9a:de:73:02:cb:8e:0f:af:21:1b:b2:e1:
                    c1:66:0b:63:c4:bb:68:66:ac:20:34:c2:74:e7:d5:
                    42:e7:d8:98:76:77:36:41:26:b3:99:b8:9e:71:c0:
                    e8:12:6a:86:d3:c4:98:ab:20:2f:b5:fb:a2:b7:9b:
                    be:2e:78:2e:2d:91:32:44:62:2e:1d:97:00:c3:62:
                    d3:06:53:03:ba:f4:7f:39:86:0d:ce:de:95:b0:d8:
                    80:d3:f2:27:74:c1:c3:5d:45:38:10:05:31:f5:a0:
                    89:35:5c:a3:0b:e6:ea:f6:e5:15:fc:1f:0a:8c:d1:
                    af:f5:1a:58:b2:ee:33:80:30:5a:e7:3b:7f:af:88:
                    84:33:70:18:67:4f:67:4b:ce:9a:51:66:87:dc:41:
                    44:0f:24:44:ce:9e:d7:d7:71:47:05:93:93:e0:5e:
                    97:9f:ff:07:49:9c:26:a1:66:28:29:bf:d8:b7:59:
                    09:b7:22:7e:12:c6:47:ff:bf:9c:b5:1a:40:ea:f6:
                    5b:02:33:79:4b:53:8e:2e:12:50:75:4d:87:25:c1:
                    32:c5:de:81:d5:f8:c9:99:7e:14:f3:93:51:49:dd:
                    f8:42:cc:cc:bb:97:49:e6:4a:a6:c2:b2:49:bb:18:
                    19:2e:6e:06:01:d9:f2:5e:9a:a1:42:07:c7:6e:5c:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8A:A8:12:1D:43:68:7B:F3:18:9F:B1:64:73:A1:2F:EA:4E:AD:FE
            X509v3 Authority Key Identifier:
                keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:19:cd:03:65:3a:7f:5f:2a:ea:25:ce:32:58:54:ec:79:d3:
         fb:81:32:b4:87:92:40:57:66:3f:3e:c9:06:e6:7a:a3:37:15:
         5b:94:3a:c3:fc:d7:d9:86:cd:27:ab:fd:18:ff:67:7a:bb:05:
         4b:9d:7f:8e:33:a0:4b:c8:fc:5b:b8:8c:4a:51:de:21:df:09:
         bc:81:52:7c:4e:c2:12:fb:00:65:42:53:86:0b:31:52:16:ca:
         f7:cb:dd:ae:e4:83:c6:71:4b:0e:5e:ce:19:a5:37:46:2d:f6:
         dd:5b:f4:05:c5:d6:a9:28:46:ae:e3:d1:4d:2b:66:c6:a1:44:
         f8:fb:bf:14:dd:02:45:f5:87:68:d5:c5:e2:66:61:27:50:a0:
         89:35:17:51:85:8a:09:1f:b3:28:25:db:12:88:5c:bf:57:57:
         f7:b7:55:4f:53:d2:7f:b8:78:8c:b2:8f:a7:75:67:c6:f5:5d:
         7c:d5:de:b4:66:e3:e1:77:e2:cd:b5:b5:67:ad:27:70:03:ef:
         1d:88:34:f5:0b:c6:03:1b:3c:4f:88:8c:1d:c4:80:f9:18:71:
         f3:af:fd:83:6a:30:2b:87:eb:6b:d1:b9:d5:1d:3c:02:50:b6:
         78:90:dc:b8:9b:3d:69:ed:5d:80:f7:52:45:f6:a0:23:82:0c:
         72:0a:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 10:41:55 2026 by rpki-client