Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File:                     qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier:          SlcVVZ/E7kl3+PFobepzSX9DJ7CZ+eEUNjTz2ocNiWM=
Subject key identifier:   42:EB:23:7C:A7:1B:A2:77:FC:04:57:63:50:6C:B0:88:FC:59:14:F3
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer:       /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial:       3680
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number:          35F5
Signing time:             Wed 30 Sep 2026 14:19:52 +0000
Manifest this update:     Wed 30 Sep 2026 14:19:51 +0000
Manifest next update:     Wed 07 Oct 2026 14:19:51 +0000
Files and hashes:         1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: mGRGdCvbwPapcAALWHO4EFwDYNpi2GsDHH+vi51K3Lw=)
                          2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: VMik+VP2VW8b9tXPC9B03sMT9ppFEX01lrBrKEr5WZo=)
                          3: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: YjGvu7hS1PYqJK/ZSd5JlS+EEqqiFgJ4Qzr5idGzW0I=)
                          4: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: x0LYtT3APJOM1BU3phk/GRsyUAfN6VfKZJ0ccXlvtdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
                          rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 14:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13952 (0x3680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
        Validity
            Not Before: Sep 30 14:19:51 2026 GMT
            Not After : Oct  7 14:19:51 2026 GMT
        Subject: CN=6abd1a87-ff23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:17:f6:78:9d:db:8e:3e:a2:0a:18:02:ad:
                    df:8a:d3:f5:f1:ac:ad:77:55:d7:a8:1f:8b:d1:99:
                    97:12:31:32:be:e9:39:eb:fb:7c:0e:7b:43:7d:9e:
                    ea:fe:bd:ed:a5:13:b6:ae:01:14:6a:01:56:cf:4e:
                    b5:f8:28:9a:64:10:62:3d:2c:03:92:d0:da:f5:8e:
                    61:05:59:a2:18:cb:f1:3d:26:a5:56:f6:d1:b2:be:
                    73:54:ef:e0:89:e6:f5:72:a3:f8:24:c0:10:ec:17:
                    bd:0b:72:bb:24:dc:ed:ff:9b:38:92:e3:6a:bb:0e:
                    4e:27:86:f3:a9:6b:78:78:47:67:29:a8:eb:ee:f0:
                    7d:c5:45:62:89:79:bb:e1:ec:17:94:ac:74:cf:f6:
                    ac:99:48:80:8a:7a:b2:83:82:50:fb:e4:04:16:a1:
                    52:a3:91:5c:cd:58:f1:21:da:b4:40:bd:c7:78:37:
                    66:43:2c:1f:ce:38:1d:2f:7d:5a:57:3a:05:c3:bb:
                    d0:7a:78:fe:ab:50:5a:0e:d3:dd:73:8b:ab:9b:e8:
                    67:82:f1:7d:ce:d2:67:d0:82:1b:56:cd:1f:7c:73:
                    51:2d:d4:26:ce:ad:96:61:70:d3:88:25:33:2e:5a:
                    ff:89:71:1e:cd:37:58:78:b4:95:e3:a7:9b:99:f6:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EB:23:7C:A7:1B:A2:77:FC:04:57:63:50:6C:B0:88:FC:59:14:F3
            X509v3 Authority Key Identifier:
                keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c2:a1:05:92:0c:3c:c5:bc:23:b0:85:6c:f0:2b:12:c1:1f:
         e3:73:1b:fc:87:3d:f7:f8:b3:52:c3:e6:23:fe:92:7c:fa:01:
         46:f6:f3:89:f3:91:db:c6:4a:6d:6f:59:13:e3:06:5b:0a:17:
         b2:da:f9:fd:73:94:1f:9e:48:54:56:6a:bd:1a:28:27:b3:b9:
         04:7a:a2:7a:a4:f6:35:0b:30:a8:50:b9:2e:d8:33:32:fe:0c:
         a9:98:45:ab:22:88:1e:27:49:71:31:b3:7d:63:7d:16:57:b6:
         a3:9e:6c:18:8c:26:df:8e:0b:41:1e:48:2f:7a:c0:bb:a4:fd:
         7e:2d:0d:3f:e6:06:ba:2c:48:b3:2f:c5:a3:4e:be:7e:ed:0b:
         27:c9:0d:cd:3c:bb:c2:b6:4f:d6:61:b6:18:8f:54:70:dd:6f:
         03:39:93:1c:f4:0a:53:7e:61:26:d7:82:ca:74:32:19:cb:e2:
         e4:45:ad:ad:a7:60:5f:88:a7:c4:70:db:e8:c8:de:d3:a7:7d:
         9b:55:17:80:e4:ed:53:86:6a:d0:b7:55:f9:9a:1b:1f:a5:c7:
         61:cc:ae:9d:be:2a:35:88:80:79:3b:97:58:45:85:76:15:27:
         ec:20:93:19:e7:82:5f:e6:fc:cd:6f:f2:54:5b:98:df:0f:6e:
         85:73:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:58:25 2026 by rpki-client