Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
File:                     QF5asHUAe6PYUmLWiyUZhsbp3V0.mft (raw, json)
Hash identifier:          +NIEI8MKIiqyoKnICsd9AHYboLEod9BQ6D399teYq64=
Subject key identifier:   2E:3D:DB:8A:44:5F:CF:1B:70:DA:AF:8E:30:05:62:C8:C5:43:77:63
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Certificate issuer:       /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
Manifest number:          B5
Signing time:             Mon 09 Nov 2026 07:14:47 +0000
Manifest this update:     Mon 09 Nov 2026 07:14:47 +0000
Manifest next update:     Mon 16 Nov 2026 07:14:47 +0000
Files and hashes:         1: QF5asHUAe6PYUmLWiyUZhsbp3V0.crl (hash: rM+ffgiJ7PS0DcKI+gMYqZo6sn7vPqdfCRF9oMd3KRk=)
                          2: BFA7DB2EB8BF11F19F9061496D11F970.roa (hash: MPR4NHdHnvvgE6hmqwS4hbLAySjghA7dW/cEaXsXZ3A=)
                          3: E7C4738EF69011F0944A82D5396F56BC.roa (hash: FMzFZrlslBMIjQSp5kS4GLLPEkEhvoj8LXFantUsG14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
                          rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 07:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
        Validity
            Not Before: Nov  9 07:14:47 2026 GMT
            Not After : Nov 16 07:14:47 2026 GMT
        Subject: CN=6af172e7-6341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:6d:04:d0:2f:0e:9b:8b:53:bd:39:af:92:
                    bd:3b:13:51:0c:ba:ee:c9:ed:5f:c4:77:d2:d7:5b:
                    6e:e4:00:4e:2f:7d:d0:79:0f:c8:b0:a1:4b:34:30:
                    83:78:18:58:00:bb:23:57:86:c7:2c:2f:22:be:f5:
                    5c:43:8d:0c:c8:2c:52:19:94:04:cb:8b:2a:ca:6d:
                    71:48:9f:3b:b2:4f:ef:41:57:b5:c1:39:f0:a0:88:
                    76:e3:09:45:cb:74:ec:d7:f8:1a:3a:e4:0b:b1:e1:
                    a2:60:5a:39:8a:0d:c9:6f:aa:21:57:d4:2e:85:b0:
                    8e:c7:36:fa:8e:12:23:6b:ea:e9:89:17:5d:56:6c:
                    c9:ef:87:f6:a1:4e:1a:c5:02:f0:27:fb:e2:69:1d:
                    3a:56:93:d1:44:bf:58:53:be:c7:db:de:de:f0:00:
                    b1:b4:21:d1:87:4f:dc:33:f1:03:d7:27:f3:8d:71:
                    b2:67:45:f8:9e:cd:d3:70:9b:16:f6:4a:c8:40:dc:
                    6b:ff:fa:69:37:73:4c:08:78:a9:7c:fb:6f:e9:38:
                    fb:58:78:f3:ed:c6:f5:de:3e:06:2b:58:6a:da:dc:
                    fe:0e:22:01:a8:98:fc:a6:87:7a:44:09:3c:ef:13:
                    73:27:16:bb:5a:45:ef:23:18:3d:7b:3d:0f:86:e7:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3D:DB:8A:44:5F:CF:1B:70:DA:AF:8E:30:05:62:C8:C5:43:77:63
            X509v3 Authority Key Identifier:
                keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c3:0c:7c:c8:8d:6e:fd:e4:30:c3:e7:de:f3:77:25:76:02:
         23:74:1d:d5:ff:c8:6e:7e:ee:fd:8e:f7:60:87:cf:e1:c2:12:
         a4:85:6b:51:7b:fb:82:97:74:df:45:44:2b:41:c8:12:dd:54:
         76:ab:ec:cc:79:f7:28:af:52:27:38:7d:6c:56:bb:1a:94:30:
         93:b4:47:4d:81:7b:8c:f4:35:f8:e5:ca:57:84:03:e1:78:50:
         f1:3c:fd:e7:02:70:60:2b:90:d3:b2:5a:85:ef:2b:2f:58:48:
         b5:8f:81:a2:45:a0:6e:9a:08:7e:7b:13:31:87:2d:93:01:4c:
         f5:e3:de:3a:9d:3a:22:24:78:fe:fe:2e:fa:0e:01:f7:bc:6e:
         30:54:05:f2:1f:36:01:96:33:29:08:d2:f2:68:83:d7:75:17:
         32:d6:15:d0:d0:d0:3e:5e:ab:04:3f:8d:a8:bb:bf:79:7b:19:
         05:ec:cc:a3:67:fb:0a:fc:db:10:93:6b:e8:f6:1a:d2:8f:47:
         54:8d:54:e9:16:5b:e4:65:29:6d:51:51:d9:92:42:45:af:0b:
         46:0d:d9:5e:3f:ad:fa:ed:89:f7:d1:94:77:e8:ea:34:74:b1:
         1b:ef:33:a7:1f:99:52:68:00:63:4c:17:17:ba:9e:8e:87:95:
         b3:15:12:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ2MzkxMTAvBgNVBAUTKDQwNUU1QUIwNzUwMDdCQTNEODUyNjJENjhCMjUxOTg2
QzZFOURENUQwHhcNMjYxMTA5MDcxNDQ3WhcNMjYxMTE2MDcxNDQ3WjAYMRYwFAYD
VQQDEw02YWYxNzJlNy02MzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1qBtBNAvDpuLU705r5K9OxNRDLruye1fxHfS11tu5ABOL33QeQ/IsKFLNDCD
eBhYALsjV4bHLC8ivvVcQ40MyCxSGZQEy4sqym1xSJ87sk/vQVe1wTnwoIh24wlF
y3Ts1/gaOuQLseGiYFo5ig3Jb6ohV9QuhbCOxzb6jhIja+rpiRddVmzJ74f2oU4a
xQLwJ/viaR06VpPRRL9YU77H297e8ACxtCHRh0/cM/ED1yfzjXGyZ0X4ns3TcJsW
9krIQNxr//ppN3NMCHipfPtv6Tj7WHjz7cb13j4GK1hq2tz+DiIBqJj8pod6RAk8
7xNzJxa7WkXvIxg9ez0PhueHeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4924pE
X88bcNqvjjAFYsjFQ3djMB8GA1UdIwQYMBaAFEBeWrB1AHuj2FJi1oslGYbG6d1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDYzOS8yQkEyM0M4Q0Q1
QkYxMUYwOERCQzdDMzFDNEY5QUUwMi9RRjVhc0hVQWU2UFlVbUxXaXlVWmhzYnAz
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FGNWFzSFVBZTZQWVVtTFdpeVVaaHNicDNWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDYzOS8yQkEyM0M4Q0Q1QkYxMUYwOERCQzdDMzFDNEY5QUUwMi9RRjVhc0hVQWU2
UFlVbUxXaXlVWmhzYnAzVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmMMMfMiNbv3kMMPn3vN3JXYCI3Qd1f/Ibn7u/Y73YIfP4cISpIVrUXv7gpd0
30VEK0HIEt1UdqvszHn3KK9SJzh9bFa7GpQwk7RHTYF7jPQ1+OXKV4QD4XhQ8Tz9
5wJwYCuQ07Jahe8rL1hItY+BokWgbpoIfnsTMYctkwFM9ePeOp06IiR4/v4u+g4B
97xuMFQF8h82AZYzKQjS8miD13UXMtYV0NDQPl6rBD+NqLu/eXsZBezMo2f7Cvzb
EJNr6PYa0o9HVI1U6RZb5GUpbVFR2ZJCRa8LRg3ZXj+t+u2J99GUd+jqNHSxG+8z
px+ZUmgAY0wXF7qejoeVsxUSeg==
-----END CERTIFICATE-----
Generated at Tue Nov 10 11:47:56 2026 by rpki-client