Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
File:                     qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json)
Hash identifier:          xpuuuD1cQ71sWkyFnYhNyKLXIAzlgbgDlCkUO+VULQc=
Subject key identifier:   60:88:C6:B1:2A:C9:A5:75:7C:DB:6D:63:74:64:4D:FA:2F:9C:8F:CD
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Certificate issuer:       /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial:       2DD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
Manifest number:          2D90
Signing time:             Fri 18 Sep 2026 15:28:46 +0000
Manifest this update:     Fri 18 Sep 2026 15:28:45 +0000
Manifest next update:     Fri 25 Sep 2026 15:28:45 +0000
Files and hashes:         1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: NzVkqtiBt+wa6um3eQuwgi2biXeCrQqmROVXrHSEUps=)
                          2: 4K4sYOPp1OdnqZhNCAHovgwEGsI.asa (hash: IkbhtV0qkqLtYBezyKo7K0nWl9Dcci1N/rfZNyA4EMg=)
                          3: 70FD3F6A5B1811F0B719DE67C4F9AE02.roa (hash: pBvFUTYssj4vjoTQHE5P+AyOXCqCn83doA5H9txyVO0=)
                          4: RvLlMd5jV4-83DfZLag45ugVSmI.asa (hash: mI2p+H7bktJhoQcAPiXwlRbBMnDqOl2EtBhwK/NlVbs=)
                          5: 8EB2901C9ADE11F1876DC4BF5011F970.roa (hash: jGALiT5fbfq9OBi/ljIXIlqv9yPBsBdmbvnqV4zKJM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
                          rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11728 (0x2dd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916216D, serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
        Validity
            Not Before: Sep 18 15:28:45 2026 GMT
            Not After : Sep 25 15:28:45 2026 GMT
        Subject: CN=6aad58ae-a1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:6c:d8:fe:ae:22:f4:c1:c5:44:b0:ea:19:
                    ff:3b:24:4c:08:74:94:e7:5f:8e:2b:d4:90:6a:f0:
                    d1:a9:5d:ed:b1:38:9e:57:3e:00:6a:17:fa:49:68:
                    82:97:65:10:4c:1a:a4:a6:55:b0:72:82:dc:76:e5:
                    73:df:4f:c5:12:41:8c:82:77:73:f5:17:65:ff:0b:
                    df:1c:fc:48:bc:c9:3c:f3:1b:7c:91:61:24:63:11:
                    2d:7e:51:e0:d0:ac:40:e3:7f:e6:6d:20:a7:7d:96:
                    5d:ee:d7:43:f8:3f:47:fc:d3:d9:fc:f1:6a:c8:69:
                    3b:2c:bd:09:40:9b:3f:d6:78:b6:cd:6f:b8:d5:2c:
                    fa:d2:3c:2d:d2:8f:b6:b5:91:7a:33:f2:bc:7b:74:
                    66:c1:8b:3b:97:8f:53:c2:08:a8:5a:67:a3:62:b2:
                    69:16:7a:8e:96:2b:2c:8c:a0:7f:41:16:59:30:23:
                    6e:22:f6:47:49:08:68:e7:b3:8e:ea:a1:42:c7:fa:
                    f6:93:17:30:2b:23:97:ad:10:6e:59:75:83:4f:92:
                    c3:12:48:78:98:f7:c4:8c:3f:e1:67:a1:ba:5f:13:
                    f6:48:19:28:2a:53:65:14:9d:79:22:24:d5:c7:ee:
                    99:af:44:a6:74:ae:0c:38:a4:79:48:41:6e:15:48:
                    ac:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:88:C6:B1:2A:C9:A5:75:7C:DB:6D:63:74:64:4D:FA:2F:9C:8F:CD
            X509v3 Authority Key Identifier:
                keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:54:3e:11:22:47:b2:84:19:b8:7d:57:73:e1:74:85:aa:08:
         52:fb:eb:c3:91:47:89:e7:63:db:ab:54:1b:8b:13:cc:50:db:
         89:cc:cf:65:c6:60:e2:68:cb:8f:66:3f:6f:bc:58:b5:e0:19:
         66:c4:5e:11:3a:b0:b3:a4:01:89:e7:b1:e9:17:b1:1c:d0:dd:
         a2:1d:71:0e:ec:e0:0f:6a:39:10:0d:e1:ef:48:b0:56:2c:94:
         49:bf:ad:fd:7b:f0:4e:9b:05:cc:55:5d:a4:a4:cb:5f:c0:40:
         74:ed:27:aa:f2:d0:19:8f:59:e2:19:93:b8:49:80:dc:a0:35:
         26:53:30:00:e5:38:f6:8d:87:86:71:cb:dc:a2:0f:6a:f0:0e:
         3e:05:0f:3a:36:7b:fd:ba:30:97:9c:ff:a6:89:65:f0:df:44:
         a4:d8:0e:3f:a9:b0:c5:6f:10:82:d8:07:80:09:80:57:b6:57:
         fe:d9:37:a0:e9:ae:42:be:cd:67:d0:4f:48:36:ff:07:69:ad:
         f0:e5:db:1c:ab:24:1c:1a:08:d8:32:ff:22:a3:02:78:16:b2:
         04:6e:7e:c4:72:e2:b9:3f:dd:04:eb:e8:3d:4f:d6:6c:7c:ee:
         83:10:71:9c:24:38:fe:f6:f0:b5:1f:58:62:5a:5c:40:39:cd:
         25:05:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:15:50 2026 by rpki-client