Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File:                     qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier:          mvmORhhQVpe6rWx7WSNo1DEFFreiYuLM9SpTKkjYrj4=
Subject key identifier:   19:81:BF:57:D4:06:63:59:09:8D:58:85:5F:85:B5:B4:7F:EE:6A:E1
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer:       /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial:       097A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number:          0943
Signing time:             Sat 14 Nov 2026 20:05:27 +0000
Manifest this update:     Sat 14 Nov 2026 20:05:26 +0000
Manifest next update:     Sat 21 Nov 2026 20:05:26 +0000
Files and hashes:         1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: tzgk8ZG3YQe6LjyYhnK6MhxHBwJUr2A7b4URX6it+mE=)
                          2: 4CE392F2C14511F1972FD06E4D11F970.roa (hash: TazzGsstWHLlIBaJwURZcNELCOCiN8bjbuBjX+p4Nvo=)
                          3: 82F98D926DE911F1BE416AB35CA30FBC.roa (hash: JsW+CAaBnE5R9k4pb5HSw7eUPDMX6zRJXzW5WoiPdMY=)
                          4: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: u+OE92KeExG7I6GhxPypiPeStuTv8Vqe48CTLfDMRps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 20:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426 (0x97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
        Validity
            Not Before: Nov 14 20:05:26 2026 GMT
            Not After : Nov 21 20:05:26 2026 GMT
        Subject: CN=6af8bf07-091f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:cb:13:ea:c3:38:fd:0e:9b:60:42:c8:aa:
                    bb:7e:72:62:ae:79:9c:19:e8:25:d5:fd:2c:25:a9:
                    63:04:5e:20:a4:ca:7b:0c:8d:b4:cb:68:b0:f0:be:
                    59:51:28:42:79:83:0f:b7:23:58:f8:01:f4:01:6f:
                    bd:ac:0d:27:18:1a:43:b8:e6:4c:2a:f7:59:0c:75:
                    85:8d:87:ac:d2:1d:98:af:79:6c:cc:88:fa:b9:01:
                    37:10:f3:f7:60:7d:ce:24:89:dc:81:1f:0b:c5:45:
                    de:bb:82:43:d9:62:17:1e:bb:27:ff:b8:87:b3:a5:
                    14:3e:9d:70:65:c0:e8:7b:f8:38:fa:54:db:e7:b1:
                    31:3d:60:a3:9b:cb:01:43:e0:62:a8:fd:f1:79:9a:
                    c1:a0:27:e2:b8:66:4d:44:1e:58:d4:7b:4d:cd:6e:
                    88:c6:ca:f2:f8:06:61:06:6c:6d:6c:53:8e:fc:a5:
                    7c:8a:a8:1e:20:34:7f:18:a8:1c:d9:4e:4c:ff:e9:
                    14:f7:41:ad:df:63:d0:65:ee:eb:08:76:06:f7:cd:
                    50:ae:59:27:5b:1f:ae:df:f1:b7:33:76:6b:8c:4b:
                    ef:d1:8d:a3:41:09:98:12:98:49:25:cb:cd:1d:cb:
                    a5:8b:8a:be:ba:0f:a0:7e:30:d5:92:f1:bf:76:a3:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:BF:57:D4:06:63:59:09:8D:58:85:5F:85:B5:B4:7F:EE:6A:E1
            X509v3 Authority Key Identifier:
                keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6a:a9:d8:77:00:1a:6d:4b:0f:1a:25:71:b8:f6:77:07:3b:
         36:cc:ad:32:b6:16:88:c6:da:3f:ad:4b:7f:82:87:0a:bf:84:
         4f:c4:47:43:73:b1:0b:35:cf:db:d1:db:cf:b4:a1:0b:b6:3e:
         16:98:54:bf:68:0a:e3:2a:3d:5f:d2:58:cb:78:e4:72:19:f3:
         e8:fe:b8:b4:57:a7:44:a2:a4:dc:90:1a:34:64:c2:66:78:8d:
         15:1e:cb:cd:8b:a5:40:1c:ea:cc:3e:4a:fb:aa:76:2c:55:b4:
         dd:d0:9e:99:09:4a:b8:3b:7c:78:9b:a3:f7:ed:a7:b4:42:50:
         04:78:d7:6f:ed:3c:67:97:f8:b4:32:39:f5:8e:19:a5:c3:c2:
         ad:67:73:ab:48:a9:12:94:a8:61:a3:09:90:fd:8f:30:ff:6f:
         03:38:be:95:f9:5a:28:32:71:ab:ca:bf:1d:2e:9f:f2:68:51:
         81:a1:9c:d5:bc:9a:7b:c7:5b:74:50:98:3b:22:b2:77:e4:fb:
         cd:b2:dc:30:47:95:5f:e1:ec:a3:21:d9:e0:b5:87:4e:db:c8:
         b5:0d:c8:02:20:2c:6e:05:15:74:2d:50:d6:6a:db:f0:fe:00:
         f0:e7:7e:de:4f:43:63:34:c8:4b:8f:eb:48:c5:7e:cc:24:1b:
         c2:be:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:57:05 2026 by rpki-client