Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File:                     QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier:          6rGkmnTA8S4e4BunfJBfx/KyKzxr0aGlTsURYOmWB5k=
Subject key identifier:   80:3D:FF:7A:0A:18:5C:9E:F8:82:6B:3F:E8:BC:CA:5B:8F:BB:20:F0
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer:       /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial:       1A10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number:          19CC
Signing time:             Wed 28 Oct 2026 16:26:52 +0000
Manifest this update:     Wed 28 Oct 2026 16:26:51 +0000
Manifest next update:     Wed 04 Nov 2026 16:26:51 +0000
Files and hashes:         1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: qr5Ru5BV/17iJlpG3ZKez0PiFH502Um+jCLLVPO+YHg=)
                          2: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=)
                          3: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=)
                          4: KBK53asWUj2ZH0KotP1pKmSyew4.asa (hash: 1pCe7a65qBL/IvIj+WoY+zGBW0eF4Yh/jeCUUvQaj6w=)
                          5: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: mnfTgIuPlsM7FOE7wG43XOpMDWMOBSC6RbV4JXFx0HM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
                          rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 16:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6672 (0x1a10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
        Validity
            Not Before: Oct 28 16:26:51 2026 GMT
            Not After : Nov  4 16:26:51 2026 GMT
        Subject: CN=6ae2224c-2e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:14:5d:52:f2:1a:f6:ed:1e:36:c8:ad:88:
                    25:fa:2c:44:24:ba:5d:7f:ca:4f:ee:de:48:68:6c:
                    9d:40:22:d0:e5:70:82:0b:2d:c3:23:d3:60:34:7a:
                    92:5b:fc:68:83:8d:3e:f7:fc:d8:12:86:0b:35:96:
                    c7:37:27:79:10:8d:73:56:c7:68:3e:d2:3b:db:63:
                    0f:8b:5d:e1:c2:41:4b:c0:40:9f:79:ab:3d:19:b9:
                    91:91:8f:bc:5c:3f:de:79:c5:f0:98:7a:9f:3a:26:
                    6c:33:80:21:b0:0a:12:6f:f4:1e:ff:36:81:61:8f:
                    d4:85:01:94:66:ba:0e:ed:ed:84:17:a9:58:86:2e:
                    eb:c5:c3:54:b0:3b:12:82:d1:18:c5:1a:e6:7f:3a:
                    06:92:1b:a5:cb:93:20:d8:6d:9f:25:2b:5a:fd:ca:
                    e1:85:93:70:6c:98:2c:06:e0:09:e7:f7:00:0a:78:
                    39:26:84:64:f1:c4:a7:76:d9:99:0c:5f:04:bc:72:
                    41:21:4c:d2:11:e8:00:77:c2:10:ef:a2:a1:ad:5f:
                    d6:e8:62:4c:04:d0:92:ca:72:e3:00:90:03:4b:3e:
                    35:d1:bc:d1:6f:3a:ab:88:a0:b9:f8:d8:b8:52:7f:
                    63:62:e4:43:fa:2f:37:ae:98:3a:72:b7:cd:2c:98:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3D:FF:7A:0A:18:5C:9E:F8:82:6B:3F:E8:BC:CA:5B:8F:BB:20:F0
            X509v3 Authority Key Identifier:
                keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f9:d0:fa:de:44:fd:c6:04:c6:68:52:2b:65:71:c2:f9:24:
         fe:44:a2:f1:9d:51:9b:7b:3f:f5:27:f8:d8:54:cd:e4:58:58:
         9c:3a:59:89:99:bd:b9:c5:1f:31:53:e5:c9:77:44:71:c8:50:
         09:b6:2c:66:10:f5:6b:9b:39:26:34:3f:36:13:c5:0e:9c:eb:
         4e:cd:21:f0:f7:9b:73:fd:c8:d4:15:a5:2a:f3:95:b9:2b:28:
         c0:25:87:50:db:f9:54:9b:0a:de:f4:8e:22:78:66:b3:54:1a:
         79:b3:9b:30:5c:02:63:42:8c:60:ae:3d:06:9b:77:2a:7f:58:
         1a:f0:62:b1:5f:c8:7f:54:8d:38:26:96:d2:7c:36:f2:46:94:
         ad:13:7b:0a:68:8a:5b:31:57:f7:2e:e2:4c:80:77:3a:cb:d5:
         0a:35:25:60:01:2e:9c:07:a9:86:1f:cb:08:ee:d4:c9:96:18:
         ef:cf:3a:20:35:7f:1d:19:4a:cf:4a:e0:6c:ba:eb:0d:07:4b:
         6c:a6:9c:65:ee:f5:15:c5:09:97:cc:7f:51:27:cd:6d:8a:13:
         c7:c1:86:36:83:6b:79:2f:4a:d0:d4:8c:ea:d7:6e:dd:d6:a2:
         fb:30:9c:84:18:7f:26:3d:4e:0d:3a:d1:89:38:6c:79:b8:d1:
         13:51:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:09:26 2026 by rpki-client