Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft
File:                     QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft (raw, json)
Hash identifier:          5w20pv9CYzGE33AK94j7FH1/qAQLRHxO3TmbZdGJyw4=
Subject key identifier:   BE:27:25:6C:06:D2:E8:5C:31:86:0E:DC:94:39:9A:5D:59:22:95:29
Authority key identifier: 41:01:45:FC:DD:7E:8F:1D:6B:39:40:EF:0C:EF:B7:65:91:74:2B:EC
Certificate issuer:       /CN=A91EC167/serialNumber=410145FCDD7E8F1D6B3940EF0CEFB76591742BEC
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft
Manifest number:          35
Signing time:             Sun 27 Sep 2026 09:14:56 +0000
Manifest this update:     Sun 27 Sep 2026 09:14:55 +0000
Manifest next update:     Sun 04 Oct 2026 09:14:55 +0000
Files and hashes:         1: QQFF_N1-jx1rOUDvDO-3ZZF0K-w.crl (hash: W7SCFizA4/O/ZAhqkpZSwCtya056v8XqoqorFMtu470=)
                          2: 504168B26F0F11F1A17F76C284A30FBC.roa (hash: l5YgF6ZQdhgOiQeWG6KLPed1ijBj6GSOGCDGFs/IBf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.crl
                          rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC167, serialNumber=410145FCDD7E8F1D6B3940EF0CEFB76591742BEC
        Validity
            Not Before: Sep 27 09:14:55 2026 GMT
            Not After : Oct  4 09:14:55 2026 GMT
        Subject: CN=6ab8de90-84ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:9f:a2:79:34:23:0d:32:96:f4:db:6a:2d:
                    2f:4c:df:2e:04:26:ed:00:33:cf:89:ef:e8:31:41:
                    29:d9:a1:b3:b7:03:5c:69:62:2e:05:a1:00:a0:79:
                    bf:e1:31:17:f8:23:7c:5b:99:f9:b6:c2:62:da:e5:
                    d5:2a:c4:f2:ba:ea:4b:1b:1b:66:42:7f:85:98:f1:
                    49:7f:44:3d:81:94:b2:68:1b:98:9a:4b:3e:9b:74:
                    3d:90:96:b1:7d:98:2d:36:95:26:ca:91:52:e5:f2:
                    81:fd:0f:75:ac:35:7f:47:5c:1e:91:0f:30:0c:e4:
                    d5:d7:17:03:dc:5d:50:96:bb:6b:27:e2:97:77:06:
                    12:7a:b5:c6:16:cc:72:7f:3d:13:a8:7d:1d:07:3b:
                    e8:74:91:0a:d5:9e:b1:00:3c:45:95:95:1b:1d:64:
                    34:c9:71:46:72:2a:37:5c:d5:c8:aa:1e:5b:da:79:
                    eb:03:45:bb:f7:0f:2d:c3:aa:32:a1:15:1b:c6:d8:
                    5b:fd:66:3d:eb:21:52:e6:f3:9a:79:92:72:7e:d4:
                    2d:ed:df:ee:5f:93:bd:c8:1d:12:80:da:e6:84:9b:
                    d3:3f:dd:3a:7a:48:38:3d:1f:26:d8:50:f2:d0:8d:
                    d4:d2:2b:59:d6:92:51:46:1b:71:ae:5c:51:25:94:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:27:25:6C:06:D2:E8:5C:31:86:0E:DC:94:39:9A:5D:59:22:95:29
            X509v3 Authority Key Identifier:
                keyid:41:01:45:FC:DD:7E:8F:1D:6B:39:40:EF:0C:EF:B7:65:91:74:2B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:cb:36:df:b0:ff:36:10:5b:81:3d:f3:bc:9b:60:f6:18:82:
         60:39:55:be:db:a1:be:5b:5a:ae:06:57:8c:98:09:55:85:dd:
         8b:f2:cb:84:34:76:92:cc:f2:d4:1f:3a:d1:15:a5:df:8a:53:
         e6:dc:5a:9c:ad:2d:06:ad:80:ab:56:f5:16:c2:a3:74:6c:66:
         fa:34:21:8c:f3:c2:e7:e7:80:3b:eb:1c:6a:4a:03:37:c6:8b:
         47:4d:bf:34:58:38:77:f4:c7:93:5f:26:9b:80:a6:db:d8:06:
         fd:2d:4a:60:92:5c:54:8b:2e:52:4c:ee:a0:44:78:ac:89:33:
         16:46:a6:45:cb:c5:9d:86:45:52:9e:0f:ec:e6:4d:ed:4c:c1:
         df:83:f8:8a:43:b4:83:06:13:d8:a4:41:e8:a6:4e:99:6e:5d:
         13:fa:f0:1b:5f:17:3f:fd:8c:1a:89:a4:97:a5:19:48:67:88:
         7a:2b:fe:2f:e3:e3:7a:8a:63:63:81:78:14:8b:17:3b:46:12:
         08:63:57:fc:45:61:ec:29:b6:02:2e:0d:17:f7:19:55:a9:14:
         c2:28:e4:80:fb:27:7c:4f:85:42:ef:63:f3:f4:0a:bf:ab:ba:
         2f:ca:d9:16:37:45:84:97:fd:4d:ee:cb:03:bb:90:5d:75:81:
         11:a0:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:32:27 2026 by rpki-client