Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
File:                     qEiFS7_Ou01JgBuyrj2EQIscPSc.mft (raw, json)
Hash identifier:          oyXpjtok8eanuXKPo58QKcGggJrP+1L8dTvokY0+TJE=
Subject key identifier:   E5:95:32:8D:C7:56:8B:C1:26:A6:40:8F:4F:DF:76:BB:86:0E:AF:FE
Authority key identifier: A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27
Certificate issuer:       /CN=A91BD939/serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
Manifest number:          CA
Signing time:             Sun 25 Oct 2026 07:09:25 +0000
Manifest this update:     Sun 25 Oct 2026 07:09:25 +0000
Manifest next update:     Sun 01 Nov 2026 07:09:25 +0000
Files and hashes:         1: qEiFS7_Ou01JgBuyrj2EQIscPSc.crl (hash: pczIQZkWs9W9r23yIvbKcYV+FuyBBaB4ZWUGHNY/51s=)
                          2: ABD937089D6511F0A6A3E74BC4F9AE02.roa (hash: 5zJXRvPWX0oO/+YChL7iaTRy6kpXfQLWY1KW7kQ0BS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl
                          rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 07:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD939, serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
        Validity
            Not Before: Oct 25 07:09:25 2026 GMT
            Not After : Nov  1 07:09:25 2026 GMT
        Subject: CN=6addab25-fc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:97:9a:93:c0:fa:43:01:f1:d4:e8:84:22:
                    0f:9b:02:56:d0:1f:bd:1d:04:22:bf:16:ca:e1:78:
                    b3:47:08:86:52:46:3b:56:91:67:bf:67:95:db:fa:
                    d2:8f:de:b8:2d:32:03:87:54:e4:c6:77:79:4f:d9:
                    8f:ed:53:d2:0e:a0:86:5e:09:19:c5:db:9a:a4:f4:
                    ea:19:86:ac:8e:ac:d1:0d:bd:07:37:12:aa:fc:3b:
                    c3:42:b6:05:67:b4:d1:50:04:92:c6:2b:dc:c5:56:
                    79:f1:ec:ac:b8:16:9a:c6:35:c2:76:16:45:ce:06:
                    81:0a:c6:dd:6e:3c:14:e0:4d:52:dd:04:3b:9b:8f:
                    e7:c8:ee:70:7f:19:d5:f7:a2:ae:7f:f7:f1:47:1b:
                    3a:ec:9e:1e:3d:76:9d:f9:b6:a2:32:3b:4b:c6:6f:
                    a8:2e:73:b5:76:9f:28:23:09:a8:5b:8e:fb:a5:d1:
                    a9:d2:6c:c4:b3:c9:7e:2c:18:58:b0:51:8a:ec:75:
                    ab:c8:a4:07:65:b6:01:1f:30:a7:21:2e:6c:65:97:
                    d1:69:5f:c8:e8:52:23:7e:57:98:ae:bc:d4:7a:23:
                    59:0f:00:ee:5c:6c:b1:69:8a:bf:d6:d6:41:5f:f4:
                    e8:49:87:51:5a:e2:44:f4:d4:da:10:93:b6:97:cb:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:95:32:8D:C7:56:8B:C1:26:A6:40:8F:4F:DF:76:BB:86:0E:AF:FE
            X509v3 Authority Key Identifier:
                keyid:A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:48:6d:3c:7a:09:56:10:ed:d3:f4:04:b5:e4:dd:f6:e5:
         ee:d2:d7:dd:ba:fa:35:65:02:d4:91:58:ec:ef:b4:19:4f:94:
         a4:20:81:78:2b:4d:62:7a:8a:15:3c:35:71:8c:5e:0c:46:a6:
         71:7b:39:b5:cd:77:d0:32:96:0c:57:b6:a4:d2:a9:62:d2:dd:
         24:e8:39:d3:22:18:84:df:6c:de:7c:e1:45:d9:75:ab:70:89:
         ec:50:52:c9:de:6c:40:62:cd:77:80:80:97:3c:df:ea:4c:53:
         44:96:bb:d4:70:0e:af:80:fb:3d:10:7d:60:3e:5e:34:67:50:
         19:b6:6f:bd:b9:5e:81:e3:51:2c:53:82:12:f7:e9:96:82:2e:
         e8:5e:5c:ab:db:9c:5a:00:d2:c8:22:08:4b:94:83:10:7d:52:
         a2:24:45:93:00:a6:93:21:f1:be:a3:b3:10:78:96:e4:bd:e0:
         98:91:8c:e4:25:26:87:4f:a7:fa:17:f7:54:95:4e:82:1e:f5:
         82:de:17:86:66:da:b2:5a:49:26:1e:09:0b:1d:e3:49:d4:92:
         da:39:ec:bc:88:6a:e2:bc:69:76:a1:61:58:ce:a8:de:19:90:
         e5:ce:b1:9b:92:8a:19:35:08:e0:b0:11:5d:f4:97:5e:17:0b:
         3e:20:0d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:56:48 2026 by rpki-client