Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft
File:                     QRWv_nCd92SgzMk062huh7fv3zc.mft (raw, json)
Hash identifier:          Z1zhSjpKlubxf7sCfIpAg5J+0ZS3U3myk1du04ILLWU=
Subject key identifier:   28:7D:8F:87:92:23:D6:DD:17:20:D6:19:E5:3A:B1:EE:60:E8:CE:B2
Authority key identifier: 41:15:AF:FE:70:9D:F7:64:A0:CC:C9:34:EB:68:6E:87:B7:EF:DF:37
Certificate issuer:       /CN=A914354F/serialNumber=4115AFFE709DF764A0CCC934EB686E87B7EFDF37
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRWv_nCd92SgzMk062huh7fv3zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft
Manifest number:          AC
Signing time:             Fri 23 Oct 2026 07:45:56 +0000
Manifest this update:     Fri 23 Oct 2026 07:45:55 +0000
Manifest next update:     Fri 30 Oct 2026 07:45:55 +0000
Files and hashes:         1: QRWv_nCd92SgzMk062huh7fv3zc.crl (hash: OwpQzPAN8DCOeC0gkH7+Xb9LYC11mmHjTN1B8j7rvvk=)
                          2: 6zp0OxFq8gaHn5QymU51TKmsVWQ.asa (hash: l1seCyn93DzpLs8mC/ZbB+YrWJC5q15vkZ4sUK/K7Ks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.crl
                          rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRWv_nCd92SgzMk062huh7fv3zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 07:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914354F, serialNumber=4115AFFE709DF764A0CCC934EB686E87B7EFDF37
        Validity
            Not Before: Oct 23 07:45:55 2026 GMT
            Not After : Oct 30 07:45:55 2026 GMT
        Subject: CN=6adb10b4-ba41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:82:c0:3d:9e:0c:52:cd:5c:bb:e0:26:0e:
                    b5:5f:b1:0b:39:37:e4:6d:f1:a7:e5:d1:d3:b2:46:
                    8c:8b:2b:94:2c:ac:3c:0c:8b:28:c8:39:0b:ec:19:
                    a4:3c:10:4d:be:8c:14:4c:f4:27:31:53:5c:6d:43:
                    e5:92:ab:6f:c9:9e:79:d5:81:41:bb:1f:fa:83:ea:
                    20:9d:2f:79:9c:97:3d:cd:17:09:2e:63:fd:de:ef:
                    4e:dc:a2:3c:a6:fc:9c:52:a7:30:f0:20:77:bd:14:
                    08:8e:50:ce:ba:db:4f:30:33:4c:49:3a:97:ba:64:
                    ed:db:ad:b2:e4:b9:71:d0:4f:ce:99:54:b4:e9:ec:
                    e8:45:ad:8e:27:ec:46:ba:9a:7e:15:34:fa:f0:8e:
                    ae:53:95:28:e8:d4:93:39:1c:cc:98:34:25:59:ad:
                    fa:48:de:1f:8b:ff:e6:64:24:ab:ca:28:86:88:4d:
                    ab:2d:49:ce:29:74:df:a7:2f:6b:2c:62:99:71:ac:
                    96:fe:f7:70:74:bf:07:b9:3d:d4:13:83:d0:cb:58:
                    c5:95:13:a2:66:89:d6:e2:d8:ed:23:df:e9:f3:77:
                    31:68:e2:22:f9:d5:cd:60:1a:00:ae:8b:85:09:12:
                    b9:ee:b9:64:25:ba:e2:d2:49:70:a7:0d:82:f4:de:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7D:8F:87:92:23:D6:DD:17:20:D6:19:E5:3A:B1:EE:60:E8:CE:B2
            X509v3 Authority Key Identifier:
                keyid:41:15:AF:FE:70:9D:F7:64:A0:CC:C9:34:EB:68:6E:87:B7:EF:DF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRWv_nCd92SgzMk062huh7fv3zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:51:c9:b4:92:d6:0b:48:69:f0:e3:95:0a:a1:bb:2a:a0:08:
         83:20:1d:cd:60:ed:bd:0a:4d:90:c9:a2:ed:35:21:2b:f1:a8:
         20:0a:b8:2d:8d:e1:3d:4c:18:22:07:13:d1:0c:c0:f6:9e:2f:
         65:bd:24:53:b9:47:b8:69:87:13:d5:10:00:cb:fa:ed:6a:b4:
         4f:c5:ad:29:c8:31:6d:a9:dc:ce:83:cf:e1:d5:d7:c3:77:8b:
         5b:be:c6:2e:5b:ba:0f:d1:05:08:6f:19:8e:f0:bc:18:71:e5:
         68:54:bf:8b:a2:23:6c:39:be:1d:1f:2f:ae:36:34:0f:7b:ee:
         88:48:56:bb:f4:7d:95:b5:24:2c:a8:d1:0c:8e:7c:4b:3d:68:
         a5:c9:8d:46:4d:18:2e:43:c2:b5:ad:b2:a5:a9:48:7a:0e:4e:
         79:5e:4c:60:fb:1c:9f:a9:a7:13:36:5e:96:8c:47:1b:26:30:
         78:9b:cc:a6:fe:95:a3:05:68:5c:60:8a:23:97:21:f1:a5:36:
         bb:46:b0:d9:34:70:47:d6:56:4e:ff:94:1e:8f:13:7b:2f:f1:
         d9:99:a3:e3:03:c8:73:22:b0:83:d0:9c:0a:fc:24:95:a6:33:
         b5:66:66:48:0e:fe:c1:04:8d:48:e6:44:82:f9:7f:e4:0f:5d:
         55:d9:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:38:26 2026 by rpki-client