Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          1gMtJJSAEG9BaEqjdU9l0pNeR2a9YsOcd8u+bP8+vt0=
Subject key identifier:   B4:EF:30:3F:90:3F:36:DA:AF:C7:EB:33:A8:CC:2C:5A:E8:A2:63:D9
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0A9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          0A90
Signing time:             Wed 22 Jul 2026 19:57:03 +0000
Manifest this update:     Wed 22 Jul 2026 19:57:02 +0000
Manifest next update:     Wed 29 Jul 2026 19:57:02 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: pQeaG/afWCZHpxKap25Mdhjaq75Tm3ohh6l7MA69zhY=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: jXanFcd2OFvsxX5D2BrX4J7Nao5tNnF9dCbsWq67DMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2715 (0xa9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Jul 22 19:57:02 2026 GMT
            Not After : Jul 29 19:57:02 2026 GMT
        Subject: CN=6a61208e-09f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:73:9a:0f:8d:f7:39:2b:2f:50:9a:16:82:
                    63:e6:fb:df:40:96:f5:ad:0a:82:13:21:92:81:2e:
                    b0:20:0e:e6:cb:51:69:bd:7f:a0:8f:1c:03:0f:b9:
                    39:e3:99:d5:51:ef:eb:60:ce:2c:a1:79:a5:f6:27:
                    bd:ec:1f:5d:e7:95:a4:b8:7e:5e:a8:fb:01:ca:32:
                    c6:17:d9:4e:0b:7b:22:13:01:97:09:c1:e9:03:ac:
                    21:fa:9f:9b:ab:fb:91:08:46:78:96:9d:27:0a:f2:
                    47:fa:53:42:fa:8a:74:2d:12:ba:bf:10:ca:50:5f:
                    c4:7d:f4:f5:f5:37:2a:76:93:e4:bc:0f:04:3c:1e:
                    ca:2e:70:3e:a4:3b:66:d5:d0:69:f0:cf:a6:3e:bc:
                    10:eb:60:57:ef:83:7e:d1:15:c0:ec:4b:24:eb:e9:
                    bf:f8:18:1f:8a:60:2a:26:05:9f:e7:1f:ea:0c:05:
                    20:39:de:45:2f:a9:ae:97:41:e8:e0:6b:77:05:bc:
                    16:92:aa:21:20:73:d1:21:82:92:c8:38:c3:f1:a6:
                    bd:4c:0c:5b:f0:13:de:44:bd:9a:48:97:14:0a:15:
                    53:69:5e:3e:25:3e:35:ba:30:5e:2d:df:5a:67:e9:
                    b6:a7:4d:38:b2:bc:3e:61:4e:5d:84:8e:aa:4a:ed:
                    2a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EF:30:3F:90:3F:36:DA:AF:C7:EB:33:A8:CC:2C:5A:E8:A2:63:D9
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:28:d4:b1:26:6b:e1:26:43:74:0c:1a:fe:18:76:04:4f:5e:
         12:7e:b0:8d:66:1f:47:6f:ec:4b:b4:42:b7:a5:c9:36:3e:8d:
         77:5c:ee:91:5f:3a:2c:b9:d7:b3:89:0b:97:26:52:00:fc:09:
         b2:b4:25:55:8c:68:4a:ff:ea:51:5c:d8:3f:f4:52:c7:fc:62:
         27:b2:69:be:2d:b9:a2:b3:11:08:97:42:b7:38:ba:f0:64:e1:
         a5:51:6f:4f:cd:85:5e:5a:07:25:63:25:26:14:d6:82:01:9d:
         a6:27:5e:ab:dc:37:30:50:37:3f:a0:12:53:70:fc:f1:0b:a4:
         9f:b4:6e:87:6e:ed:aa:e8:79:23:e3:f0:27:67:19:71:31:13:
         c0:8a:13:e4:54:b2:17:52:ce:96:68:11:a6:2f:a1:c1:af:7a:
         82:7b:21:b7:e5:5e:a5:7e:ad:5b:87:1c:6c:12:03:e8:56:1d:
         0e:c6:fa:99:a5:53:24:ec:46:3f:b6:f5:18:d9:0d:a0:91:52:
         77:3c:e0:d2:49:d1:63:03:12:30:4c:95:73:93:c9:ad:98:3f:
         ea:90:1c:48:e9:42:0e:4f:c7:a3:c2:b9:95:49:31:7c:3c:60:
         33:77:71:5f:f3:be:40:c7:1d:2b:8a:10:68:e7:1b:3d:38:65:
         5d:11:e7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:23 2026 by rpki-client