Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
File:                     QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json)
Hash identifier:          /o/bWvC1SCtBDCLJjpQw+KoL0f+a7a/cfRD/K12/FwQ=
Subject key identifier:   AB:2D:E5:B8:F9:AE:4F:AE:6E:C9:2C:49:40:9F:9F:50:42:2D:B1:17
Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
Certificate issuer:       /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Certificate serial:       0CCD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
Manifest number:          0CC8
Signing time:             Mon 26 Oct 2026 18:33:49 +0000
Manifest this update:     Mon 26 Oct 2026 18:33:48 +0000
Manifest next update:     Mon 02 Nov 2026 18:33:48 +0000
Files and hashes:         1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: UE4yTT/EwGTGaxzeJAkvRSAzb7X4SLet3WN1oODEX/k=)
                          2: 4C3E706CA52311F1BF257A553D11F970.roa (hash: gX6kPHPqmwsZXWiQP0ngQzAC81Vp3pbcU0fPRnXm1tk=)
                          3: DCA4F74AA77E11F1AC50A9373F11F970.roa (hash: U5B6BD+AQVgGNRiCjakEnvUVRqkWyd49kgo+EJ246as=)
                          4: AB9730AAA7DD11F1B8E3669D5C11F970.roa (hash: V0nf8R/JXTCmLmr3evrsoWZqErfhyc7Me8vH9L8neaE=)
                          5: 4B953CCCA52311F1BF257A553D11F970.roa (hash: 0ImBywBjvGucOTmDCrSxY7e6CfnTVMVfaWd4EW4f3f0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 18:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3277 (0xccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
        Validity
            Not Before: Oct 26 18:33:48 2026 GMT
            Not After : Nov  2 18:33:48 2026 GMT
        Subject: CN=6adf9d0c-591f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:58:fa:a7:97:e3:6f:95:d3:ef:a2:6e:3f:
                    f7:3c:a7:a5:14:2a:c5:b4:e9:17:56:b6:c8:60:b6:
                    d7:87:0b:f1:59:6a:85:c5:e9:33:32:26:1c:d6:a0:
                    1f:65:96:5f:3a:e3:0b:cd:91:f5:21:64:54:0b:55:
                    50:6e:7d:18:b8:da:8e:62:f0:21:cb:1d:f5:24:0f:
                    13:f2:32:2e:a0:7d:53:81:9d:1b:93:63:20:66:ff:
                    eb:b6:82:4a:1e:f2:d0:e1:e6:03:6e:db:05:89:99:
                    9d:3d:de:ae:ee:37:5a:2f:85:23:0f:6e:60:e5:e4:
                    5b:cb:38:9b:b8:46:11:f3:4a:35:b0:7d:b9:4e:81:
                    7c:94:71:0b:b8:3f:ed:b9:79:14:69:5a:0c:68:c5:
                    c2:d4:3a:da:08:56:13:36:36:84:2e:8a:4f:33:87:
                    ad:d6:f0:7f:e5:69:e0:a0:d2:03:b7:2f:c4:31:c5:
                    a3:4f:9d:79:d8:e8:75:bc:9f:a7:c6:66:0b:5f:58:
                    d3:90:db:9d:23:70:6d:36:04:cd:98:f5:7c:f6:d8:
                    39:cd:81:fe:6d:4f:52:10:93:94:a3:74:c1:62:7a:
                    db:32:f9:6d:be:b2:c6:6d:e6:1c:c0:05:26:97:31:
                    e4:03:b6:b0:fe:6b:ad:0f:8c:1e:0a:68:7e:7e:be:
                    da:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2D:E5:B8:F9:AE:4F:AE:6E:C9:2C:49:40:9F:9F:50:42:2D:B1:17
            X509v3 Authority Key Identifier:
                keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d4:a5:86:a7:3a:fe:34:81:c7:e4:da:f2:fd:04:e7:9e:05:
         82:32:e9:75:b6:34:fb:84:6d:1e:8d:ea:1c:49:f9:2b:21:cc:
         53:30:57:de:3e:4a:1c:c4:6d:20:05:1f:1f:59:9d:c3:33:ea:
         ca:5c:28:6a:2a:0a:d2:77:e3:50:16:7e:7f:18:34:eb:09:f3:
         10:4a:e3:a7:3d:9a:a2:52:42:5f:9b:b7:aa:f8:81:55:ce:04:
         75:64:18:f7:c5:d1:d2:8a:0e:09:97:bb:0c:67:96:aa:56:6c:
         3a:13:3b:1b:56:2e:21:5a:7f:64:cb:fd:41:01:78:69:5c:95:
         4e:a6:4c:3d:94:53:51:cb:ed:d6:fd:e0:57:01:6d:37:a2:73:
         ef:7d:60:96:32:9f:1a:09:b1:6d:be:be:81:78:a9:ba:d4:9d:
         60:f9:c5:2d:9e:56:e2:b9:0a:dc:24:1a:b5:37:65:bd:17:1a:
         fe:88:50:86:a3:52:a3:91:23:f4:c8:c6:00:e7:b8:40:e1:1d:
         73:f7:73:50:b8:d7:48:7f:08:fa:d6:6e:88:97:11:f4:54:e3:
         32:fc:ed:e8:c4:5e:46:a8:d5:be:a1:2e:3b:79:a1:5f:a9:1e:
         ad:4c:48:fd:bc:c5:6d:dd:a3:c2:14:51:0a:4a:95:65:32:e7:
         cf:5f:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:26:56 2026 by rpki-client