Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
File:                     qvIbcGtV8TNNz2thfp4PMR1b9zM.mft (raw, json)
Hash identifier:          8K19B8/tKt3/EOGigkpJnSO75+HFbEyJegQiAnAB/m0=
Subject key identifier:   71:7A:D3:6D:2C:9D:12:75:AB:11:3A:F5:CA:DD:6A:BB:9F:6C:D8:32
Authority key identifier: AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33
Certificate issuer:       /CN=A91729D4/serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
Manifest number:          4D
Signing time:             Fri 13 Nov 2026 08:33:50 +0000
Manifest this update:     Fri 13 Nov 2026 08:33:49 +0000
Manifest next update:     Fri 20 Nov 2026 08:33:49 +0000
Files and hashes:         1: qvIbcGtV8TNNz2thfp4PMR1b9zM.crl (hash: qe6Ldxe4KD5AEJrz4mQInj2uCgQr8yLtpFZF9orWyVs=)
                          2: 1CCC1F3C97F911F1A1B8040E6F11F970.roa (hash: nnpgZb8pphmld77O5HH0vZJrbo5b7MyF20Uu/zQGu1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl
                          rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 08:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91729D4, serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
        Validity
            Not Before: Nov 13 08:33:49 2026 GMT
            Not After : Nov 20 08:33:49 2026 GMT
        Subject: CN=6af6cb6e-1459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e3:62:61:e0:c5:31:b5:64:a6:ea:59:70:1b:
                    d2:5a:f4:6d:8d:dc:3c:f5:4e:3c:95:e3:bb:29:b7:
                    7e:e8:86:5c:23:19:af:eb:82:13:d1:d1:1d:5e:52:
                    28:b9:5a:61:27:b9:84:11:6d:8d:e6:89:89:df:c0:
                    8a:e4:00:dd:33:1b:65:45:e2:5b:a1:51:9f:48:f4:
                    23:b3:12:1e:65:e1:34:bf:d5:ff:67:3b:d4:d6:2f:
                    70:e8:65:6d:12:68:a1:c6:76:d5:1a:da:00:b7:04:
                    0c:d1:6f:8b:cb:e0:89:cd:2b:66:65:b8:5a:7f:c5:
                    f7:a3:ea:ef:fb:c9:40:d8:e0:86:1c:5a:e6:20:da:
                    6c:50:18:4f:5e:f3:68:83:b4:5c:46:5b:b4:ed:ad:
                    14:5b:32:e4:62:38:07:d6:d7:4f:4d:aa:d7:cc:e9:
                    72:ea:d4:cb:13:55:5b:86:e3:19:49:fb:2f:c2:43:
                    a4:da:53:3a:16:5e:38:99:7d:65:44:93:1b:a4:aa:
                    f5:98:93:3e:ca:80:99:8b:94:95:2b:28:a4:90:8f:
                    20:b7:da:f0:7f:0f:06:6f:45:02:5e:40:dd:25:28:
                    8d:2f:d7:78:34:a8:54:52:77:e9:dd:f0:c3:64:bd:
                    49:45:c4:a0:66:23:f1:5c:a5:92:3a:67:be:11:a3:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7A:D3:6D:2C:9D:12:75:AB:11:3A:F5:CA:DD:6A:BB:9F:6C:D8:32
            X509v3 Authority Key Identifier:
                keyid:AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:02:18:ec:c3:23:21:cf:a8:ff:04:9f:5b:2b:b9:ae:32:b8:
         fd:c6:84:e1:c9:68:08:47:ca:c1:15:c5:a2:8b:49:44:7e:40:
         04:0b:78:93:6e:f7:da:47:5b:ed:5d:1d:74:c5:29:6f:b7:d2:
         6b:82:e1:01:3d:2e:03:39:a1:68:cc:5f:b7:17:dc:81:aa:3b:
         ce:cd:e5:6a:b2:32:22:90:87:7e:a8:1f:9f:65:b9:90:1b:cd:
         26:5c:72:49:75:92:cc:0c:62:b7:a0:c2:3b:bc:95:fe:74:7a:
         c6:48:c9:84:d5:39:3e:7c:8c:8e:84:67:da:ee:db:e7:12:23:
         08:8c:b8:8e:c3:6d:57:30:5a:05:25:96:99:35:28:4f:9d:b2:
         5a:23:f9:af:9e:80:c0:a1:da:10:24:af:27:94:fe:52:7e:98:
         d1:9a:27:db:bf:2b:fa:57:9a:fa:4a:14:d7:00:68:0d:e7:ce:
         78:6d:08:aa:b0:90:84:55:9c:30:0e:e2:a9:8d:d8:00:3b:db:
         d4:2d:05:16:51:ba:4f:26:fe:5d:35:23:b4:4b:24:5a:c9:3d:
         da:6a:98:94:9a:53:ca:08:62:b8:7a:ab:a3:9f:f4:10:63:14:
         77:4c:9c:4d:75:ce:a6:fe:c9:e1:f0:60:10:17:89:52:3a:39:
         10:cb:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:18 2026 by rpki-client