Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File:                     qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier:          3KnWP0+KG7mVkOt1ZGtd4tUQoAgR/AKFN3FkwB7i91o=
Subject key identifier:   CD:9A:F9:B3:A7:3B:E3:07:55:BE:6F:3D:FB:74:C5:A8:DF:28:7A:DE
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer:       /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial:       02C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number:          02AD
Signing time:             Tue 27 Oct 2026 01:53:18 +0000
Manifest this update:     Tue 27 Oct 2026 01:53:17 +0000
Manifest next update:     Tue 03 Nov 2026 01:53:17 +0000
Files and hashes:         1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: 6DujN0oElneiOvYTMH2COH+x5EkPzQHxlld3gW+mWoY=)
                          2: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=)
                          3: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=)
                          4: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
                          rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
        Validity
            Not Before: Oct 27 01:53:17 2026 GMT
            Not After : Nov  3 01:53:17 2026 GMT
        Subject: CN=6ae0040e-906d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:96:fc:16:ac:31:06:ca:75:ce:e4:17:a4:
                    57:a1:11:40:60:03:44:b1:ae:ed:61:97:e0:a2:9b:
                    a0:5c:50:53:d6:0e:91:24:8e:ce:02:83:b0:20:e8:
                    71:d9:0c:e1:c4:0d:da:95:b2:35:7f:fe:f5:5c:17:
                    c5:38:12:b6:68:de:a5:23:ef:da:f6:09:2a:06:7f:
                    12:16:59:0e:10:b5:dd:54:e1:93:39:9e:b2:f2:cc:
                    7c:50:e6:a8:43:c2:e0:aa:6b:cb:27:49:f8:59:59:
                    98:a0:a8:41:ea:19:4d:32:87:34:6f:80:9a:b0:9b:
                    a7:64:e8:96:61:49:7f:60:0b:dc:f0:42:4d:32:a5:
                    88:44:23:cc:14:17:20:d9:e2:92:86:85:83:b8:0a:
                    92:67:dc:78:cd:e6:d8:94:ee:1b:0c:cb:b4:97:c1:
                    35:d0:e4:7e:a2:16:f8:ab:66:42:4c:4b:0c:aa:0d:
                    46:04:d6:ac:45:e0:4d:28:07:1d:20:4a:6f:86:55:
                    1b:63:e1:74:6b:4d:23:ed:33:85:cb:c6:3a:f6:c3:
                    86:0a:ce:f5:18:b2:90:59:79:41:f1:3b:17:d0:28:
                    c7:01:5f:1f:f9:9e:2b:06:3d:1f:18:94:ea:d7:67:
                    f7:3e:67:8c:59:8e:28:99:33:64:7b:2a:c5:2f:98:
                    d2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:F9:B3:A7:3B:E3:07:55:BE:6F:3D:FB:74:C5:A8:DF:28:7A:DE
            X509v3 Authority Key Identifier:
                keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:df:a3:bd:7f:66:58:a7:7d:44:d0:05:fd:88:05:90:3e:
         9f:81:54:42:c2:39:6b:4e:6c:ff:b1:3c:d2:7e:b3:a5:7d:49:
         a0:87:b1:c1:f8:83:30:75:27:59:81:4d:95:18:65:e7:47:a1:
         71:67:39:3d:07:2e:52:03:b8:e5:85:79:38:4b:e2:5f:ae:4f:
         6f:19:f2:95:ea:dd:b7:53:f4:aa:90:15:c7:a6:01:bb:90:a5:
         06:3c:dc:92:82:2e:35:ba:be:be:e2:88:56:a0:81:f8:96:3a:
         05:98:49:2d:ac:5f:73:1d:8f:2e:2d:80:66:9b:cf:a9:fc:67:
         ed:33:52:00:f8:76:8e:80:90:56:a5:0e:a9:89:d0:87:fe:a1:
         d0:9a:08:e8:af:9b:5b:15:49:61:b8:c7:90:81:43:6d:58:f8:
         13:0e:48:74:d2:02:3f:2c:3e:3b:9e:2d:ce:97:eb:21:48:59:
         1f:88:a3:65:89:e8:10:95:7f:74:9d:7b:43:31:2b:15:0c:cc:
         89:18:9d:e3:f9:47:66:a0:92:dd:4f:d5:18:72:6e:1b:74:d3:
         ff:16:05:08:b5:3f:ac:80:00:9d:3d:54:10:98:82:84:63:21:
         2f:e4:05:3c:3a:61:94:fe:9a:4a:5d:69:9e:22:21:80:7d:c4:
         ad:34:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:16:55 2026 by rpki-client