Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
File:                     Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json)
Hash identifier:          zlUBEhexIbLlBXkflpMWsiWyEO2bKH28csjEhbk5zdg=
Subject key identifier:   45:62:5B:AA:65:96:58:12:B6:65:32:DB:EF:D7:1F:77:AB:E0:7F:62
Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Certificate issuer:       /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Certificate serial:       0598
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
Manifest number:          0587
Signing time:             Sat 24 Oct 2026 23:15:50 +0000
Manifest this update:     Sat 24 Oct 2026 23:15:49 +0000
Manifest next update:     Sat 31 Oct 2026 23:15:49 +0000
Files and hashes:         1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: 2fAhkRzLTrnSSg21lyMiF1VAwPx+28KP3m/8DQonkh0=)
                          2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: DouU0HR255E8sWinNcaYlwzhjnFkk4nKBv8m3C8lp2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
                          rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 23:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
        Validity
            Not Before: Oct 24 23:15:49 2026 GMT
            Not After : Oct 31 23:15:49 2026 GMT
        Subject: CN=6add3c25-eb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:70:5f:0a:0e:5d:a6:dc:8a:62:82:8a:6b:
                    06:33:a0:00:4a:df:c6:65:00:3e:03:24:01:f4:df:
                    a8:89:8e:a3:bc:4b:66:27:e9:ff:f6:ef:67:a4:68:
                    18:d0:0c:c6:20:d1:0d:35:b5:17:d7:d8:f1:2f:b8:
                    63:fe:4f:46:59:0c:f6:51:75:ca:61:f6:1b:2d:ad:
                    59:2c:52:35:e1:42:55:65:aa:43:7c:c6:1c:c8:21:
                    8d:15:8a:da:4d:68:b9:d1:81:b9:41:9f:0c:e2:8f:
                    22:16:28:27:8a:e1:f4:3d:b6:73:3a:87:bb:f8:9d:
                    d2:ce:04:a1:6b:f3:8a:ce:9f:f1:87:43:de:2f:50:
                    39:ce:54:d4:4e:c3:e3:f1:e6:8c:df:2e:3e:4a:c4:
                    5a:6f:4d:84:3f:be:6b:35:1f:d1:73:0d:89:ce:cf:
                    e6:67:1a:9f:99:25:51:eb:ed:ff:31:fd:28:c6:98:
                    04:da:87:ed:5c:5c:97:c8:40:12:2f:18:74:ef:88:
                    03:15:ec:db:b8:48:99:74:89:a4:a1:93:27:43:c6:
                    f0:6a:d7:66:09:eb:c9:3b:89:17:53:f0:0a:d8:e8:
                    32:65:46:fa:e7:ba:42:2a:d0:cc:22:31:5a:0b:a0:
                    a2:7b:25:ef:74:24:37:2b:49:8e:ba:05:36:42:2e:
                    0a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:62:5B:AA:65:96:58:12:B6:65:32:DB:EF:D7:1F:77:AB:E0:7F:62
            X509v3 Authority Key Identifier:
                keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ec:21:e6:1d:1f:f0:33:7c:e7:dd:35:8f:ae:73:aa:77:64:
         36:ec:6f:4a:e1:26:c4:ac:2d:bb:cb:0c:79:ae:ca:fb:de:99:
         e1:01:94:d7:00:1b:bd:84:15:9c:31:5a:5b:5c:ae:71:02:59:
         cd:a3:23:d8:2c:29:a0:5b:b8:7e:e1:18:7e:cf:8f:78:a1:08:
         9c:f5:2f:27:a1:bf:bd:aa:6b:0c:8a:e3:1e:30:7f:11:2b:a3:
         7a:cd:13:10:c6:ff:68:47:8d:36:b5:a5:48:c9:8c:ae:67:91:
         a1:6e:1e:19:4c:53:76:4f:71:8d:8d:76:af:f6:71:72:67:a3:
         05:ec:79:89:09:aa:7e:c3:9e:c8:63:4b:37:f4:43:b4:2d:e7:
         5f:49:d1:06:ea:86:d4:f2:d7:df:44:42:30:22:80:de:f2:3a:
         81:8b:35:2a:6b:33:bc:44:9f:24:b9:35:fc:b5:0d:a1:3a:4c:
         72:70:22:38:6f:2b:31:1b:15:44:ec:8d:34:6f:ec:81:cb:c8:
         fe:d3:c6:36:82:70:d6:ec:77:9e:7b:c8:95:45:ad:0b:7f:47:
         a3:9c:d8:f7:49:af:64:9c:0e:83:83:bc:5c:b4:5b:12:64:90:
         5f:22:16:52:f9:d7:9b:3d:f6:4c:c3:94:35:5e:1b:3e:b3:f3:
         f2:11:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:49:18 2026 by rpki-client