Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File:                     qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier:          eSTNuXIHQEcNYLuBUFunC+/zUCkuVGG/+q9PcvkufPA=
Subject key identifier:   00:1C:AE:BE:AB:2D:BB:38:A6:F2:8B:69:34:DA:66:BD:0F:3C:8A:BF
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer:       /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial:       365C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number:          35D1
Signing time:             Wed 22 Jul 2026 14:18:56 +0000
Manifest this update:     Wed 22 Jul 2026 14:18:56 +0000
Manifest next update:     Wed 29 Jul 2026 14:18:56 +0000
Files and hashes:         1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: o4FmKeFPdbM447tpBabL6nvhrUvTCx7lG6vrlwwKN80=)
                          2: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: x0LYtT3APJOM1BU3phk/GRsyUAfN6VfKZJ0ccXlvtdg=)
                          3: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: VMik+VP2VW8b9tXPC9B03sMT9ppFEX01lrBrKEr5WZo=)
                          4: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: YjGvu7hS1PYqJK/ZSd5JlS+EEqqiFgJ4Qzr5idGzW0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
                          rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13916 (0x365c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
        Validity
            Not Before: Jul 22 14:18:56 2026 GMT
            Not After : Jul 29 14:18:56 2026 GMT
        Subject: CN=6a60d150-86bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:71:5e:8d:01:ba:6e:c3:54:01:7c:47:d5:
                    5f:df:fb:43:96:33:16:2b:fd:84:f8:39:2f:b2:07:
                    26:1a:6c:ef:b3:8d:4f:aa:10:4c:9e:7b:e4:72:d8:
                    34:6e:c9:1e:7e:44:66:20:00:34:f0:a6:e3:5a:f7:
                    5c:55:53:6a:42:88:ac:b5:12:64:f6:26:cc:42:ce:
                    ad:3f:07:ce:66:58:d8:65:63:82:19:af:56:41:9d:
                    a4:b5:75:d4:2c:19:57:16:36:f3:32:ae:17:b3:0b:
                    1b:c8:62:f1:fe:1d:09:98:64:d2:a9:1d:ee:b2:e5:
                    7c:e1:a4:fd:09:1b:10:2a:bc:8f:31:3c:0b:a1:2e:
                    ba:e0:66:21:b5:04:fd:17:58:26:ed:0b:cd:0a:8c:
                    3d:62:0f:da:60:63:b0:d6:54:01:7e:0d:03:8e:b1:
                    c0:77:54:01:5c:4b:e8:05:08:01:2c:7e:c4:29:9f:
                    1b:f7:ef:0f:f0:27:41:dd:39:ac:75:5f:ce:60:27:
                    83:48:62:60:14:48:d0:c2:2a:c8:32:f8:b7:39:7b:
                    65:db:7c:ce:01:38:01:4e:dd:00:10:79:79:8b:fe:
                    c5:69:b8:29:ef:ac:3e:44:ea:c5:6e:6e:7e:58:0e:
                    cb:25:6c:cc:cc:05:35:19:b1:7f:46:92:f9:bc:ed:
                    4f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1C:AE:BE:AB:2D:BB:38:A6:F2:8B:69:34:DA:66:BD:0F:3C:8A:BF
            X509v3 Authority Key Identifier:
                keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:df:bf:f2:51:0f:5a:14:21:71:d5:39:0a:3b:3b:33:68:fa:
         a1:cb:36:ea:f2:37:df:ab:03:e3:8e:ad:62:0c:2f:23:80:6b:
         74:f0:a1:cd:d2:b5:32:a4:6c:ff:6e:fe:bb:8a:30:00:e0:0c:
         57:1a:6c:21:37:9c:2f:f1:00:6a:ea:2c:23:5d:e8:2e:52:6c:
         ac:e3:fb:b9:35:52:bf:72:fa:64:04:dd:bc:91:16:70:92:8c:
         c5:42:f1:5e:cd:be:41:c6:f7:fe:67:ff:91:2a:4f:76:e3:e2:
         4e:9d:88:08:fe:be:d2:e5:f7:83:59:27:fc:87:6b:47:48:ac:
         d8:ea:0c:f2:ab:6d:85:e3:61:f0:e8:9c:44:15:20:9d:ad:80:
         f3:2d:7f:01:56:a1:b5:c2:b9:99:d2:2b:2e:b6:c4:cd:6f:49:
         c6:a7:82:ff:07:4a:1c:b6:54:99:4d:bd:65:cd:b1:d8:c5:85:
         d6:fb:10:3b:d3:ff:09:51:42:a2:c2:fe:00:8f:33:4d:e3:24:
         23:e5:20:72:65:90:09:00:1f:8e:54:dd:16:7e:8b:2f:34:4e:
         6d:49:9b:07:a9:d6:f1:4c:a6:4d:af:a0:85:81:8f:f3:90:30:
         5b:62:19:82:3f:4a:44:63:fa:8c:aa:16:35:c0:56:2c:c9:33:
         aa:47:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:34 2026 by rpki-client