Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
File:                     qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json)
Hash identifier:          cakveZ87aBA2CRVLGE1rJfGe7TZawv4khbC+Y6o3Yuk=
Subject key identifier:   BE:8D:1A:C9:92:F7:8E:AE:07:C9:55:7D:3D:F0:00:3D:14:D1:9E:78
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Certificate issuer:       /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial:       086B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
Manifest number:          0856
Signing time:             Sat 31 Oct 2026 21:35:47 +0000
Manifest this update:     Sat 31 Oct 2026 21:35:47 +0000
Manifest next update:     Sat 07 Nov 2026 21:35:47 +0000
Files and hashes:         1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: Jn5YQIQgl7y5kStvaZCKAgXXyssSyG4iFjFSjPZjS18=)
                          2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: IIG9qmSY2TaUIKTKKrOdKG47AWyN/d7/Ag6RnLFCAIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
                          rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 21:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2155 (0x86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
        Validity
            Not Before: Oct 31 21:35:47 2026 GMT
            Not After : Nov  7 21:35:47 2026 GMT
        Subject: CN=6ae65f33-8bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:83:4b:86:24:dc:82:b8:db:d6:2b:c9:b5:
                    03:e0:a5:59:74:38:59:6b:83:57:56:51:99:81:f1:
                    4a:54:d0:13:da:2d:4c:94:e8:48:82:1f:63:e1:e3:
                    d1:ac:fc:77:55:b7:0d:b9:1e:00:af:95:e4:d8:6f:
                    6b:cd:65:af:af:c3:43:4f:9d:91:40:6b:b7:dd:cc:
                    d4:dc:12:ae:60:87:11:6f:a3:63:c5:43:16:97:2c:
                    80:e8:0e:eb:f8:67:31:b9:99:2e:d1:b1:08:0e:72:
                    f0:86:a5:0d:a7:c4:41:bd:1d:87:13:9b:7c:e4:8a:
                    07:33:b0:b7:8c:7d:a2:91:a2:96:ad:4d:fc:ac:81:
                    97:65:55:b3:14:6d:06:c8:84:ef:2f:4c:b5:49:dd:
                    8c:34:30:81:d6:c6:3c:4f:e0:3c:44:c7:fd:02:c7:
                    77:73:8a:c0:b0:b4:af:b6:27:f5:99:35:c1:1e:44:
                    18:05:9b:ed:3e:83:a8:cb:73:b3:e2:d7:eb:01:ff:
                    bd:79:75:39:a4:8b:42:0a:82:25:8d:7b:bc:54:7e:
                    c2:92:a7:35:30:d0:85:e7:9f:34:1b:1b:32:a5:be:
                    24:80:39:a8:89:5f:73:2b:8c:04:5e:3a:5f:30:79:
                    ac:5c:0d:a8:0a:01:77:64:b8:f9:e6:ed:71:ae:53:
                    a7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8D:1A:C9:92:F7:8E:AE:07:C9:55:7D:3D:F0:00:3D:14:D1:9E:78
            X509v3 Authority Key Identifier:
                keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:30:f0:84:02:fb:86:5e:b6:fd:21:c2:aa:a8:3c:46:2e:52:
         4c:c9:28:ac:02:64:23:90:25:19:97:2e:c5:63:60:08:a4:bc:
         6f:6d:d2:60:a6:71:1a:15:92:43:f9:4c:26:05:18:6c:4e:9f:
         cc:f5:f2:93:2e:65:4c:96:83:a9:06:72:83:13:20:39:3d:7b:
         b5:f7:b8:5b:62:06:70:7f:2d:af:72:de:62:9f:bc:36:ab:5c:
         ea:60:50:68:d0:77:78:44:a2:95:35:f6:3f:c9:18:cd:f2:95:
         95:31:95:7a:af:69:9e:92:15:69:a0:90:29:86:a4:ff:52:ca:
         b0:b4:91:ac:6b:06:a8:f9:d0:a1:48:2d:9c:8f:10:ea:2b:5a:
         28:31:0a:54:ba:5b:7c:5e:61:14:9e:cb:67:88:cd:d1:12:d4:
         23:05:e8:81:ba:39:3b:fe:9e:28:03:dc:49:d6:b8:6e:85:d5:
         4a:47:d6:fa:d7:cf:db:00:a3:81:99:56:4f:47:14:c0:c2:30:
         ef:94:56:25:2f:d8:f1:6d:e1:1c:62:b2:93:b9:fc:c9:4d:8c:
         63:1f:1b:fc:87:2d:0a:9d:80:db:b3:7f:d6:85:00:c9:0f:e8:
         91:99:dd:bc:c0:b1:6d:a2:a3:da:e7:22:03:a8:97:38:dd:4f:
         4e:32:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:41:43 2026 by rpki-client