Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
File:                     qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json)
Hash identifier:          QKYi7IZ3VBPzymFDDns1uxIkufItNcWZ9BEkN99rdes=
Subject key identifier:   A9:E3:DA:55:13:F2:69:42:98:42:6C:C6:67:6F:AD:66:E2:E2:F7:72
Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
Certificate issuer:       /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Certificate serial:       136B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
Manifest number:          134F
Signing time:             Wed 04 Nov 2026 17:05:14 +0000
Manifest this update:     Wed 04 Nov 2026 17:05:13 +0000
Manifest next update:     Wed 11 Nov 2026 17:05:13 +0000
Files and hashes:         1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: oPKx5wm/WI8zLQPy1ky0GwEb7uzo+wagr5hWRLuHlTY=)
                          2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: m5xuNZTplMCUcjHyNtIG3B2SyKlaJh5IOTk259XuenA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
                          rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 17:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4971 (0x136b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
        Validity
            Not Before: Nov  4 17:05:13 2026 GMT
            Not After : Nov 11 17:05:13 2026 GMT
        Subject: CN=6aeb65ca-b689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:98:42:7c:73:a8:aa:6c:aa:9b:c5:06:7b:07:
                    71:00:d1:75:eb:53:50:02:77:bc:81:c5:7b:9c:5f:
                    af:a9:ad:59:9a:a3:24:79:90:49:df:81:02:d6:cb:
                    fd:be:37:b6:6e:68:0e:43:c4:03:31:a4:7e:71:6a:
                    d3:fd:68:46:f8:cf:f0:8e:6f:31:d4:5a:6d:c5:52:
                    47:23:34:2c:09:37:f4:9e:df:ab:07:df:14:79:cd:
                    2b:3e:7d:83:bd:45:60:1d:a2:f7:13:cb:74:15:90:
                    4e:c5:95:f4:66:b3:bb:67:4c:99:ba:f6:34:54:56:
                    4f:6e:59:59:05:bd:b3:35:63:27:a4:77:f1:f2:e4:
                    54:6e:0c:d1:72:34:f2:d2:40:e0:1e:a6:66:d0:b8:
                    1f:a4:22:1f:ee:00:06:ad:fd:55:fa:1b:18:c1:58:
                    5d:e1:9e:6e:98:4e:f5:fc:4b:1c:bb:8f:7d:d3:3f:
                    8d:cc:33:54:8e:24:4a:e7:10:1a:a3:d0:ff:b5:10:
                    9f:c8:ff:8b:ed:b5:56:02:6e:15:e5:86:25:4a:3b:
                    98:cd:1f:fb:13:d5:40:16:ad:01:23:01:58:64:7c:
                    4f:df:54:1d:16:13:6b:63:21:49:64:50:84:04:8b:
                    3b:42:d6:f3:e1:11:90:f2:0a:5a:91:c9:1d:07:42:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E3:DA:55:13:F2:69:42:98:42:6C:C6:67:6F:AD:66:E2:E2:F7:72
            X509v3 Authority Key Identifier:
                keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:d4:25:14:5a:43:a0:f0:b1:b6:b0:2b:0a:99:bb:6d:b1:
         b4:ed:9c:53:eb:a8:80:b6:d5:85:1b:da:bf:91:2f:f6:19:1b:
         87:7f:2f:3b:77:dd:5d:c3:75:9b:97:cd:3d:88:f4:a1:fc:73:
         a0:86:0e:3e:bb:03:61:a5:40:a4:78:48:11:18:78:8e:3f:59:
         68:05:a0:37:30:84:c3:58:24:f7:38:54:aa:ff:41:bd:68:4f:
         11:85:b5:4c:38:66:fd:a0:0b:25:5a:46:2b:4c:76:4f:e2:cf:
         5b:8b:f0:db:10:46:b9:42:f2:fe:a2:65:03:e8:84:53:84:a4:
         34:72:6b:96:cb:11:17:36:b7:b4:8b:21:5d:ed:c3:f5:10:d9:
         a9:89:b0:21:ee:32:cf:e0:96:fb:fd:39:3e:7e:83:6d:cc:11:
         cf:7c:d5:66:79:46:37:35:99:4e:16:9d:76:62:fd:6b:08:4b:
         d1:ae:ab:0e:78:06:27:0a:e7:65:d4:5e:7b:22:22:6d:14:97:
         6a:dc:e6:a3:bb:21:cd:2e:ef:03:95:e3:14:cf:fb:28:36:43:
         34:fc:36:75:b5:b5:74:5b:07:ed:b2:fa:0b:5e:eb:02:b6:1b:
         26:7e:9d:7e:11:d5:c7:1c:22:62:98:9d:bd:e5:5c:ff:69:ec:
         54:c2:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:41:07 2026 by rpki-client