Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
File:                     QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json)
Hash identifier:          nQh7RRwRNj8lXsED95V4SBG2O7ugxP7RPhXnHgj7VgU=
Subject key identifier:   09:EB:9A:71:20:0D:E6:58:FB:16:48:44:01:5E:F2:5A:10:6B:C0:F2
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Certificate issuer:       /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial:       0412
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
Manifest number:          0408
Signing time:             Fri 13 Nov 2026 00:08:21 +0000
Manifest this update:     Fri 13 Nov 2026 00:08:21 +0000
Manifest next update:     Fri 20 Nov 2026 00:08:21 +0000
Files and hashes:         1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: dGcioHgXhVbK1sSdbrP3Ae93nPlf77JC2pB3XlVVG8U=)
                          2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: yG7cQXlLeQDmRJWtBQ7FWthoSWhErCv5Ur1ke2twhVY=)
                          3: fVsiEqenaz7xCyxdiljsoY1rTcc.asa (hash: qbZRATNfr74xfJDhhtf77NTQ37m6grW5/TPsSKuQgIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
                          rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 00:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
        Validity
            Not Before: Nov 13 00:08:21 2026 GMT
            Not After : Nov 20 00:08:21 2026 GMT
        Subject: CN=6af654f5-32c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:5b:8e:c0:53:07:a7:6f:4c:d0:7c:71:03:
                    64:3f:dc:5f:75:60:af:ea:37:1c:f3:f8:b7:1d:dc:
                    7c:21:00:82:b9:1e:24:a9:6a:61:a1:ac:7e:cf:a2:
                    d5:e6:b0:f2:f3:a0:69:47:a8:ed:9e:bd:cd:f6:e5:
                    d9:27:2b:bb:e3:91:8d:e1:b3:4b:1f:d2:bb:78:96:
                    39:fe:bf:92:59:3c:74:37:84:28:3c:d7:af:0f:48:
                    a5:0b:a6:26:5c:29:c7:aa:bd:a9:b8:d4:65:c6:74:
                    0b:8f:5a:8b:59:3a:1b:2c:e8:64:3d:65:94:17:14:
                    ca:af:7e:97:a2:01:35:f4:3a:93:ce:ef:ca:41:62:
                    19:ee:2e:6d:4b:c9:60:86:08:29:1c:1e:4d:d7:e0:
                    4c:52:7d:e2:26:6d:0e:eb:50:00:33:c0:a0:87:98:
                    7c:03:6c:c9:dd:07:00:c7:86:8a:1a:df:e2:62:a7:
                    ba:90:64:68:ed:06:5c:f3:1d:22:84:36:94:81:e9:
                    15:fe:45:46:e5:0f:b7:6f:79:24:bc:37:36:8c:36:
                    6a:94:3a:7f:96:55:57:1b:67:ed:20:ac:d0:87:ab:
                    82:a2:c2:5f:cc:dc:f9:41:46:67:f8:35:39:f4:5b:
                    dd:c3:e8:a7:30:bb:bc:c0:94:f1:2a:8e:64:ff:a6:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EB:9A:71:20:0D:E6:58:FB:16:48:44:01:5E:F2:5A:10:6B:C0:F2
            X509v3 Authority Key Identifier:
                keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cb:cc:9f:ad:99:5b:49:a8:fa:3d:68:3d:14:b2:39:58:6f:
         eb:fb:05:5d:30:84:12:ad:38:28:cf:47:f0:d0:b4:41:c8:f6:
         28:bd:43:ac:92:36:8e:80:75:a9:e6:3e:9a:a9:ad:d1:2b:58:
         99:6a:d9:54:ed:62:3f:62:58:3e:06:03:b1:c0:41:6e:d2:36:
         58:0c:48:2c:69:b7:23:0d:b0:da:b6:ef:51:ed:c0:48:ac:2e:
         bc:85:8e:00:1b:c2:41:56:c0:02:70:45:89:50:6f:b0:1d:e7:
         5f:a3:72:14:3c:04:a5:6f:77:e9:b9:c1:96:3b:88:30:dd:00:
         0b:6b:10:7b:ac:9c:c8:cc:04:ac:96:6a:b5:28:f1:00:e6:eb:
         01:52:c3:cb:51:cd:5d:c7:40:e8:9e:c5:d8:7f:6a:05:89:55:
         31:1e:32:d1:f9:63:41:49:46:14:52:9f:87:9f:76:59:a5:03:
         d1:9d:2c:ea:59:65:4e:0f:4d:f0:d1:1a:59:db:26:d3:6e:f8:
         93:0b:2e:7e:f5:06:33:94:77:5e:35:17:b4:bb:14:cb:c7:c3:
         4d:a2:8d:58:d2:9f:c3:87:7e:02:07:f9:63:08:2f:12:3f:d0:
         45:b0:85:fd:ec:9e:e6:33:ce:76:c2:fd:72:58:c5:0e:a4:19:
         42:5c:1c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:48 2026 by rpki-client