Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File:                     qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier:          dIlZfGUaxuz//ykJPwjpkdyGIFAOx+PwybPgB64WQzs=
Subject key identifier:   E0:B2:CA:9A:B2:58:EB:17:17:53:7C:6F:1B:F1:B4:09:CF:DA:17:14
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer:       /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number:          02B7
Signing time:             Sun 15 Nov 2026 01:45:48 +0000
Manifest this update:     Sun 15 Nov 2026 01:45:47 +0000
Manifest next update:     Sun 22 Nov 2026 01:45:47 +0000
Files and hashes:         1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: PqwkW6HV2dIT/GpTfxOGRpdEnP630glsZm26lnhnHKE=)
                          2: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=)
                          3: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=)
                          4: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
                          rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 01:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
        Validity
            Not Before: Nov 15 01:45:47 2026 GMT
            Not After : Nov 22 01:45:47 2026 GMT
        Subject: CN=6af90ecc-73cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:77:d3:d8:f5:cb:87:b1:72:be:78:e8:5a:
                    a3:22:02:d5:5d:f9:19:c5:46:13:3f:7a:a2:e9:b3:
                    9a:52:7a:5b:2f:95:69:67:7e:c5:f9:ce:41:39:1a:
                    b4:67:ff:a8:b3:c5:81:f2:76:cc:f2:8d:d7:6e:2d:
                    67:43:d3:25:82:21:2b:bf:5c:a0:e6:7b:11:5b:d0:
                    8b:7d:e8:74:8c:54:93:4a:35:6b:54:58:90:88:d2:
                    12:65:e7:3a:b5:9e:8a:3d:f8:99:48:23:0d:35:c5:
                    3f:e1:c5:a5:0a:49:87:c1:99:82:49:b9:44:e7:8b:
                    91:4a:f4:c0:e7:2f:b0:8f:a4:97:64:06:36:c1:fe:
                    54:ce:fc:3a:db:66:25:3e:56:50:b1:ef:bb:91:e0:
                    b1:cd:4b:34:96:fa:f6:40:03:3a:df:fc:d6:43:35:
                    10:e9:6e:48:d6:46:1d:8b:ee:4e:45:d6:c1:ce:c1:
                    5c:29:19:a9:e9:10:31:8d:73:16:9a:d3:e3:75:0c:
                    7a:5a:a7:48:b5:61:81:b4:d6:56:15:ee:bb:ab:8f:
                    62:f4:90:25:9e:76:03:d5:c2:35:e6:db:2f:92:ca:
                    f1:64:34:78:ed:fb:da:d9:fc:b8:b9:02:f1:99:55:
                    6f:5e:7c:22:aa:e7:d1:5a:46:81:a8:dc:2e:11:7b:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B2:CA:9A:B2:58:EB:17:17:53:7C:6F:1B:F1:B4:09:CF:DA:17:14
            X509v3 Authority Key Identifier:
                keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d9:09:78:ff:99:80:97:75:1c:bd:1a:ba:53:19:60:7b:3c:
         11:15:bc:dc:0a:a1:ff:87:b6:c7:bb:28:1c:b6:0c:c7:8b:f3:
         f3:23:af:79:f5:29:a8:48:0e:db:b4:4a:a8:15:10:ea:dc:74:
         80:2a:14:51:25:30:2d:f7:20:93:cd:a6:01:87:31:db:be:9f:
         bc:e1:87:40:10:9d:d0:86:b8:8f:4d:8f:bb:6b:f4:c3:47:f8:
         e0:ff:a6:76:a3:85:5c:a8:54:c8:02:57:aa:42:cd:d3:30:e8:
         a9:b5:ff:eb:10:f7:99:21:43:49:33:b2:62:e8:9d:f2:6a:d5:
         dc:81:b8:0a:51:63:65:12:91:45:38:73:e9:c2:ba:8f:6f:c4:
         f5:fa:de:91:2d:1f:d8:da:4b:4f:e1:65:26:53:3c:6f:df:f8:
         13:f4:58:f5:1b:bf:1d:b0:6f:2a:e1:d8:ef:fc:b0:89:cb:75:
         90:7e:55:e9:b0:ca:24:5e:0b:74:15:af:b3:f7:c8:ac:ae:89:
         fe:7e:e4:2c:fb:d5:f4:15:a0:36:7b:7f:20:76:1d:f8:c1:dd:
         1d:ea:ea:a9:de:18:9e:ca:7e:6e:6f:da:dc:bb:a8:46:32:35:
         f2:42:87:10:17:eb:66:7c:34:cc:7d:25:cd:6e:25:3f:76:a4:
         25:5f:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:59:39 2026 by rpki-client