Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
File:                     qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json)
Hash identifier:          ZSzBIgn9rMrQ6vhUM+wwXlCR407ViThe9D7oiQ/n6VM=
Subject key identifier:   2D:79:0B:BD:DC:33:BB:F3:41:82:77:04:55:7B:CE:C0:40:A2:76:A5
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Certificate issuer:       /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
Manifest number:          01BC
Signing time:             Thu 29 Oct 2026 04:34:32 +0000
Manifest this update:     Thu 29 Oct 2026 04:34:31 +0000
Manifest next update:     Thu 05 Nov 2026 04:34:31 +0000
Files and hashes:         1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: AF3t6DVQQkALO9QjwnFe+IgoiT08K9ikHeh1vNGTsZc=)
                          2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: nz3PPCvZn62oE2uMjuHkN8vXygcZxrPBWu4zQKyueQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
                          rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 04:34:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
        Validity
            Not Before: Oct 29 04:34:31 2026 GMT
            Not After : Nov  5 04:34:31 2026 GMT
        Subject: CN=6ae2ccd8-f09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:0c:08:a1:95:28:48:84:56:2d:89:f4:16:
                    e0:ee:f9:13:f8:1b:f4:46:7f:de:93:a3:60:49:6f:
                    07:80:9e:db:73:02:71:d2:7b:8e:99:4c:b1:f2:f0:
                    c3:d0:00:aa:5e:85:29:ae:e9:c6:d7:ca:53:02:e7:
                    61:2c:ed:6c:e7:50:5c:da:d0:10:d5:59:58:10:96:
                    7a:1a:ce:bb:a1:b7:00:92:7a:24:6e:bd:59:6e:ba:
                    b2:21:5e:38:dc:ef:77:e0:74:22:39:97:68:eb:f4:
                    45:50:f3:b8:c6:91:37:92:d0:84:7e:56:73:75:23:
                    56:fd:69:9b:d9:4d:5e:95:ca:87:65:af:f4:e3:f1:
                    6d:68:d6:c9:0c:f0:76:b7:b5:da:27:6d:09:86:08:
                    78:4b:cb:61:3b:26:b4:e8:1e:41:82:92:66:70:6c:
                    ca:1a:d2:5e:71:9e:3d:c7:1a:22:db:4e:f9:8f:42:
                    da:62:d8:23:81:2a:7e:0e:dc:37:2d:15:04:0d:79:
                    40:a6:8a:35:af:0b:6e:ce:a3:a6:87:0a:c7:7d:ae:
                    6a:36:9f:f5:8c:61:9d:39:13:94:ff:c3:2a:d0:b8:
                    93:86:14:9e:a5:52:bb:44:08:f9:61:22:4c:93:da:
                    c8:15:6e:58:96:61:7a:21:4a:36:ae:2f:31:47:e9:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:79:0B:BD:DC:33:BB:F3:41:82:77:04:55:7B:CE:C0:40:A2:76:A5
            X509v3 Authority Key Identifier:
                keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:67:4b:2f:b4:4c:5f:87:4f:8c:a6:17:b6:6e:99:7c:9d:
         05:9c:a7:62:1c:e1:81:62:23:d4:ab:31:37:02:3b:98:10:26:
         06:0e:6b:c3:d4:ac:aa:1f:f1:6d:b1:b0:f4:93:d1:c1:8e:a3:
         cc:af:0d:37:9e:02:46:01:87:82:3e:a4:86:9c:44:8f:84:0e:
         44:bb:ae:5c:7c:13:01:38:05:cb:98:1f:00:76:7d:15:04:71:
         15:fa:36:6a:d1:45:7e:c1:c1:20:41:ec:75:5e:cf:95:55:9c:
         ee:b7:65:e5:0a:6a:4c:40:46:72:6e:a2:87:b8:34:7a:a3:dd:
         74:a4:d8:4f:f3:0a:1d:55:ea:0a:6a:7a:4a:6d:6b:0e:7b:f3:
         6b:5f:53:27:0c:0f:a4:b5:95:41:2a:8f:1d:d2:2d:ad:7c:52:
         5a:6c:55:19:a4:84:dc:65:36:52:d9:fa:61:ac:85:f9:c4:6f:
         e2:30:b8:ab:04:54:4e:e6:ab:a3:7b:32:c0:0f:b9:72:d3:d0:
         af:4d:a0:fc:75:59:4a:c5:7e:ed:a8:49:cb:d2:cd:48:c1:83:
         32:61:fb:da:88:23:c4:52:23:6f:7b:57:7f:79:cc:8d:46:47:
         39:53:04:e8:68:3f:4e:fc:08:4c:66:0d:7c:84:27:4b:01:8f:
         61:f8:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:48:21 2026 by rpki-client