Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File:                     Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier:          O7iuKbu8nlxJQJT9eRNH5cq0XWZUoERvwauEP8a1IXI=
Subject key identifier:   E7:DE:4E:B3:01:40:AD:EA:DB:2D:8A:6A:4C:AF:FC:38:7B:91:92:D3
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer:       /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial:       04BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number:          0496
Signing time:             Wed 07 Oct 2026 00:12:58 +0000
Manifest this update:     Wed 07 Oct 2026 00:12:58 +0000
Manifest next update:     Wed 14 Oct 2026 00:12:58 +0000
Files and hashes:         1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: CA2uZNbxmJlUjDU4ZhyCNd7sSc8aVIMiFDEImzPzJ04=)
                          2: 72CC7E489B7011F1BE44BE903D11F970.roa (hash: 3I4v5qOzX+tYbITH7A5Ntx0nhzYCg2Bwe+pDTdKTk1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
                          rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
        Validity
            Not Before: Oct  7 00:12:58 2026 GMT
            Not After : Oct 14 00:12:58 2026 GMT
        Subject: CN=6ac58e8a-c026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:d7:06:52:61:41:57:25:4f:b9:64:54:c7:
                    c9:69:c6:89:aa:66:13:8a:92:6d:30:65:b9:f2:c7:
                    34:da:a3:b5:36:2e:1b:a6:87:b0:3e:99:a5:f6:8e:
                    9c:9a:34:f6:c0:4c:64:c0:aa:ab:7c:98:ff:5b:1b:
                    59:1b:1c:84:d7:86:a1:b0:d3:ee:a6:ac:64:9f:c3:
                    cf:9c:30:bb:72:4c:0e:a0:34:6a:33:82:19:75:7d:
                    76:32:e8:f0:b0:2f:92:6f:ee:66:8e:c9:a0:6a:c5:
                    a1:4d:ea:78:b2:ad:d3:e5:c3:c9:62:dd:49:52:da:
                    6a:65:54:fe:22:44:57:e4:5a:16:de:47:8e:4d:85:
                    bc:87:e3:f9:81:08:98:9b:19:c2:d5:d3:5c:04:02:
                    e3:e1:9d:8a:f7:8f:cd:f5:60:fe:96:c4:57:21:18:
                    93:14:d3:01:15:35:91:37:36:67:dd:2f:ec:8b:3f:
                    ef:49:1d:ce:97:93:84:c6:df:4d:84:5a:0a:7f:3e:
                    16:44:93:25:a1:fc:47:09:4d:4b:af:27:54:dc:4d:
                    dc:7e:c3:fb:45:a8:bc:c0:50:6d:56:14:17:f6:34:
                    9c:7d:6d:65:2a:d3:36:a7:29:2d:15:b4:d3:a6:4c:
                    05:4a:d3:20:20:4f:fb:f5:09:97:55:82:55:0d:9c:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:4E:B3:01:40:AD:EA:DB:2D:8A:6A:4C:AF:FC:38:7B:91:92:D3
            X509v3 Authority Key Identifier:
                keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:15:5d:4a:ec:cb:53:58:7b:ff:da:1c:f9:47:8e:b1:63:56:
         9a:2f:6d:20:76:01:cb:64:79:b6:2d:12:8f:c7:43:6b:6d:9e:
         a1:f8:59:46:9c:70:3b:94:71:74:57:c0:87:d1:83:2c:b7:0a:
         03:27:8c:e6:ad:91:5a:61:09:f5:03:56:ee:0a:2a:ff:6d:72:
         ad:2f:0c:ad:6f:7f:91:d9:ce:c4:19:f7:6e:b2:27:2e:2e:37:
         a2:b4:1b:91:32:0c:af:4b:f4:45:f6:2e:95:41:b0:48:ee:a1:
         32:da:64:d1:f7:93:22:85:b6:cf:c6:2d:9b:d4:fd:72:d4:af:
         f0:30:84:90:3b:a9:fb:38:22:1f:fc:33:bd:b1:bc:cd:ef:51:
         18:24:51:ec:8f:bf:5c:a2:68:1f:12:4c:0a:a4:0d:e4:5d:67:
         80:3d:83:c3:4d:9f:22:01:21:e1:54:9b:60:34:13:40:99:1b:
         20:ed:7c:e1:ed:8d:19:51:77:54:b6:fd:7b:c8:22:75:2b:5c:
         ca:00:84:cd:64:ad:29:9e:68:7e:bf:3b:af:39:d1:44:6b:82:
         4e:82:83:77:88:79:22:36:8c:0f:d7:c5:8f:6a:0e:14:04:91:
         46:aa:b4:15:be:cc:6d:0c:1e:b6:f8:0a:18:06:04:db:59:df:
         16:a6:11:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:26:33 2026 by rpki-client