Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
File:                     _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json)
Hash identifier:          1oX8XYpzW1j/bMsdF0FdgVcnXx6fxy5L7W1V9Ui5KQQ=
Subject key identifier:   3F:4E:86:56:36:CE:A1:C9:B2:14:8F:69:E7:AE:57:9F:0B:A6:F7:E3
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Certificate issuer:       /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial:       09A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
Manifest number:          0981
Signing time:             Sat 14 Nov 2026 19:59:50 +0000
Manifest this update:     Sat 14 Nov 2026 19:59:50 +0000
Manifest next update:     Sat 21 Nov 2026 19:59:50 +0000
Files and hashes:         1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: VJ9rGSFlqidb6za/lGS4N+h8Rnt7zvtPFDJU7m/2Xxc=)
                          2: F688C1749A0311F1B9C2572E4E11F970.roa (hash: rMICtWH0y9tZq97pzfYK4czkA8rayZVUzNP4XQaSqh0=)
                          3: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: SkXRUE3AqHD0Q5S8SlDm2tMiu6Kalte8916wdm9fdsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466 (0x9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
        Validity
            Not Before: Nov 14 19:59:50 2026 GMT
            Not After : Nov 21 19:59:50 2026 GMT
        Subject: CN=6af8bdb6-fbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:96:d4:84:41:33:de:11:7d:87:83:cb:33:
                    0b:55:8d:39:a5:5f:27:2a:31:f0:46:2f:9c:c7:c1:
                    22:8d:7e:87:b8:5a:c6:45:42:70:28:70:a7:bc:e5:
                    ad:e7:78:96:1e:cc:ec:e5:ed:d6:9d:27:a0:a5:1b:
                    f9:16:74:ee:db:22:7f:0d:71:d9:38:8b:63:85:b7:
                    77:84:a1:f3:2d:84:11:0f:64:17:09:2f:f3:85:9f:
                    a1:91:82:de:c9:e0:e3:ec:14:4a:2f:0b:4a:dc:0b:
                    d1:8d:ec:91:c6:16:d5:e5:8b:5e:72:fc:9b:66:f8:
                    31:74:0e:08:85:bb:ee:df:ad:c1:a6:cf:83:8f:79:
                    7b:2b:9d:3f:90:11:95:e5:dc:2e:44:38:61:ba:f0:
                    53:c0:f6:c5:9d:67:2f:9c:d6:9f:2d:9c:fb:f4:09:
                    8d:76:6c:07:33:cf:46:91:7c:48:0c:60:18:cc:0f:
                    f5:f6:f9:39:07:86:1c:d4:56:62:8a:87:38:3f:8d:
                    13:a5:15:f9:34:d2:93:04:7b:7a:5c:4a:23:04:fa:
                    2a:9c:74:ac:03:4e:c1:1a:46:cb:2b:b2:12:72:a5:
                    f7:9c:f9:33:0f:7a:be:64:75:28:84:50:f3:69:10:
                    52:56:da:fd:03:26:59:6c:14:ea:9a:8c:2a:5e:e9:
                    ad:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4E:86:56:36:CE:A1:C9:B2:14:8F:69:E7:AE:57:9F:0B:A6:F7:E3
            X509v3 Authority Key Identifier:
                keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:90:4f:c6:83:5e:5d:d7:ac:e7:9f:db:c5:11:bc:ff:7d:36:
         76:3a:75:30:44:a9:01:28:78:ef:42:26:e4:18:e7:20:cf:c6:
         83:e5:fe:91:bd:36:6d:78:9b:cb:f6:bb:c7:10:80:d2:3f:20:
         d1:8d:f9:27:e1:02:c2:1b:6e:34:e2:10:eb:dd:9d:e8:c1:e7:
         9c:24:d9:ff:31:5a:d0:b5:ed:d1:9a:eb:77:3b:2f:e5:a3:18:
         49:a9:e4:28:db:26:31:0f:1b:74:d9:56:cf:f3:11:93:4f:75:
         e2:b7:2a:4d:3d:4c:03:ae:7d:19:22:8f:be:a1:fc:32:ab:56:
         f8:b2:7b:b0:30:39:c9:72:18:f0:10:49:07:13:df:5e:75:04:
         9e:6d:7e:06:44:30:09:a2:87:8d:48:1e:55:8e:24:59:7a:27:
         63:b4:29:85:b9:22:68:14:ff:bf:b5:37:b3:87:d4:e0:0c:0e:
         8a:f2:a7:5a:85:2a:4e:79:4c:7a:0a:4d:54:90:07:61:6a:37:
         d9:93:6d:cc:4e:1c:40:49:eb:77:fc:ae:52:90:10:2f:a6:f0:
         63:4f:a4:9b:12:b4:d3:54:59:65:89:80:61:71:10:4f:23:d9:
         4d:0e:3f:28:c1:8e:ac:91:17:e6:5c:4c:c4:ef:83:d5:9d:f5:
         6d:fa:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:28:20 2026 by rpki-client