Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File:                     QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier:          yF3/nCxfQdi2mqr9UgHSyJkcHz10WDWeAPU0T8QBnGo=
Subject key identifier:   B2:E0:92:20:C5:91:4A:FC:0A:7C:01:54:12:4D:48:C6:61:FC:49:C1
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer:       /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number:          F4
Signing time:             Tue 27 Oct 2026 06:39:25 +0000
Manifest this update:     Tue 27 Oct 2026 06:39:24 +0000
Manifest next update:     Tue 03 Nov 2026 06:39:24 +0000
Files and hashes:         1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: 6v7fr5W4mfmBhHKADdpvG5mcAhQnO/R7/8qVmc3UcGA=)
                          2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ol5yFCZOBiVTvk8E7fVatGRyyicC3FHaDbYq9ITTPLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
                          rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 06:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
        Validity
            Not Before: Oct 27 06:39:24 2026 GMT
            Not After : Nov  3 06:39:24 2026 GMT
        Subject: CN=6ae0471d-3306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:fd:d2:c2:dc:03:13:c0:0a:0a:46:44:78:
                    87:04:37:78:f2:0d:bc:69:a4:8b:eb:68:ec:06:e8:
                    fb:e3:39:30:f7:84:cb:aa:4c:3c:af:ab:2a:10:be:
                    23:d5:bd:9e:16:dc:10:4c:96:f5:50:77:1c:f8:e4:
                    a7:85:08:96:ae:90:8c:bd:31:d9:05:49:65:cf:e8:
                    99:25:93:fb:77:51:b0:bc:f6:c2:db:f9:61:d1:56:
                    37:fd:06:25:0f:a9:fd:51:a4:da:d5:2f:67:c8:f7:
                    a9:2f:42:01:b2:29:ef:a6:31:a7:ef:81:44:39:76:
                    7a:33:93:a7:fc:7b:9c:a2:ae:a9:32:92:86:dd:a7:
                    6b:ca:ff:06:0f:ba:0e:3a:3c:4e:80:dd:eb:53:58:
                    6f:66:0d:ac:46:cf:26:44:15:c6:48:3b:0b:29:0a:
                    21:a9:4e:53:4e:97:50:99:b1:0d:ce:ad:47:04:77:
                    ff:8e:d6:4d:30:02:fb:5e:99:ac:1a:71:6a:04:00:
                    3f:65:0a:2a:94:54:be:62:8a:fc:8a:f8:23:97:d8:
                    74:3d:2c:56:15:2a:9d:d1:df:76:17:bc:13:35:db:
                    bb:3c:b4:47:1b:61:57:74:ac:6b:5f:66:b5:a7:d8:
                    fe:81:03:58:dd:58:70:e0:ed:a9:51:9d:ec:fb:b6:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:92:20:C5:91:4A:FC:0A:7C:01:54:12:4D:48:C6:61:FC:49:C1
            X509v3 Authority Key Identifier:
                keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:90:96:34:54:28:0b:76:96:f1:4b:8a:61:11:d4:7f:e0:
         b1:a0:85:b7:ac:88:a0:cd:ff:6d:40:55:1f:aa:29:8b:1f:ba:
         5b:73:8a:24:a5:40:cc:ec:e7:f8:12:49:53:9c:00:a0:84:1b:
         a7:9d:4e:93:ee:63:a1:3f:68:07:30:e0:2c:fa:0c:e3:89:6f:
         5e:9b:e6:d1:ca:42:a4:c0:2b:12:35:3b:cf:de:48:cb:fc:34:
         99:c7:19:7b:80:84:2c:c0:3d:ed:65:a7:01:da:e2:8b:df:ef:
         1c:cf:f9:71:54:b1:f1:56:c1:bb:5d:83:3e:45:ec:9f:42:68:
         a9:6c:63:25:8a:92:b6:46:95:32:b3:17:d6:cd:c3:d6:d0:60:
         b2:24:e0:25:9f:29:1b:97:8e:2e:a2:90:e3:1e:91:ce:96:44:
         1c:44:75:38:02:76:5e:51:d4:11:42:d0:c3:7b:55:28:75:53:
         8b:66:da:07:99:c7:df:82:3a:04:fd:75:c7:13:d1:a7:fa:c8:
         d6:ae:aa:e3:fe:7a:eb:1a:79:77:64:c2:8c:72:82:d8:23:8e:
         46:5e:3b:a6:2c:c0:f8:cb:ea:35:4f:a9:a6:78:3f:91:b7:a7:
         e0:a0:15:73:ac:2b:5a:ca:75:36:dd:b5:a9:4c:bb:98:2d:4c:
         90:68:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:06:37 2026 by rpki-client