Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
File:                     QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json)
Hash identifier:          I5Gh2J2dS8fr2zz1LZyfE15NPMmP4HPrJgjDf1Xr7k8=
Subject key identifier:   2D:46:B8:E3:3A:44:3D:D5:39:21:FB:A6:C8:21:BE:26:F8:E3:8D:2A
Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
Certificate issuer:       /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Certificate serial:       030E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
Manifest number:          0308
Signing time:             Thu 23 Jul 2026 02:07:52 +0000
Manifest this update:     Thu 23 Jul 2026 02:07:52 +0000
Manifest next update:     Thu 30 Jul 2026 02:07:52 +0000
Files and hashes:         1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: eC2HEvq897JTGdXH63AAAX0AM8CFgCI5hnMxEMZPrYc=)
                          2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: /KIj4VbCDG5XB/rAb/Z+SKRxFKv9fYPAbyIf2+zzEmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
                          rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
        Validity
            Not Before: Jul 23 02:07:52 2026 GMT
            Not After : Jul 30 02:07:52 2026 GMT
        Subject: CN=6a617778-1e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:3e:b5:32:07:ec:c0:4a:cd:bd:86:3d:70:
                    79:b4:90:ec:57:64:a8:ef:f2:28:f9:ab:8b:d1:15:
                    33:82:75:62:5e:00:e0:59:26:71:c1:13:c0:6d:6c:
                    90:79:a0:7f:99:db:87:24:cf:ca:5f:c5:35:29:1b:
                    9d:05:61:d7:64:c7:dd:96:0f:62:30:18:77:e5:7b:
                    28:d0:de:30:49:4d:aa:20:cd:b9:31:b6:00:54:a4:
                    73:86:8e:77:71:0b:9e:70:08:9a:49:14:f0:56:55:
                    a7:c8:d8:90:17:64:ab:33:23:53:14:b9:9d:c7:99:
                    21:70:77:aa:40:a0:3f:e0:b1:6d:c6:3f:18:0a:b6:
                    51:0f:92:c3:25:bd:a1:ae:ee:38:0d:e4:8a:32:31:
                    8c:7a:37:5e:13:85:da:9c:20:ae:a8:29:69:0e:68:
                    4d:0f:46:95:04:c4:4b:50:08:c6:cc:6c:44:55:72:
                    71:90:3c:8e:70:5b:0d:bc:3f:e6:3f:4d:ef:20:de:
                    c2:34:0e:f7:15:9d:de:b9:71:b1:4f:1e:aa:1a:1d:
                    c3:46:3c:d1:a8:9f:6f:23:74:3d:4c:6b:28:2a:05:
                    a1:8c:58:2c:40:02:f4:5b:3d:dc:58:cb:44:1b:be:
                    4f:7b:4e:c1:67:03:5f:66:bc:ca:3d:d6:b1:01:19:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:B8:E3:3A:44:3D:D5:39:21:FB:A6:C8:21:BE:26:F8:E3:8D:2A
            X509v3 Authority Key Identifier:
                keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:8a:47:a1:cf:0c:3f:21:45:76:80:c2:6c:cd:68:50:92:b7:
         5b:fd:09:66:92:33:2a:a6:db:2b:ea:82:89:7b:4e:fa:57:bd:
         f7:2b:bc:5c:70:db:29:59:30:d7:d6:c6:40:b2:a2:0b:8b:60:
         a9:34:c0:67:1c:10:ce:a3:d9:b8:e0:82:da:78:1c:6b:d0:89:
         d5:ba:db:41:5a:e5:b3:92:99:cc:eb:7d:2a:a6:e2:f9:92:77:
         b2:aa:1f:ce:64:f3:0b:f3:9b:25:d8:f9:93:44:1f:ad:83:58:
         52:6e:be:17:66:6d:1e:84:ba:d8:de:12:55:f6:31:81:b7:7f:
         8a:86:64:47:bd:6f:b9:6b:a3:57:7f:ef:4b:79:ff:c2:6b:89:
         0c:e4:3f:09:f5:54:0c:0a:ac:86:84:e4:a8:68:d0:0c:0e:ff:
         93:66:5d:3e:c8:9a:19:1b:6f:ec:24:ab:91:ea:c9:25:27:95:
         a1:0d:3e:0c:df:a6:6e:85:c3:32:a6:73:c5:64:94:6b:d3:30:
         90:ef:3f:66:cd:7e:93:b0:f1:f5:fa:46:64:85:71:9c:de:33:
         e3:cd:5b:35:a2:f7:a7:48:22:fa:73:a7:44:9c:d0:92:ad:28:
         4d:3d:ed:38:8c:4e:be:57:6c:b3:5a:52:ce:90:f8:26:0a:cc:
         b3:00:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:46:14 2026 by rpki-client