Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          qBqyVhKyJWPUNvVJyWm/s/c9QPY9Yxzg61G1pHPYQSA=
Subject key identifier:   21:AD:FB:B8:52:AA:FA:7B:C4:69:35:8D:C1:E6:2A:F3:E1:52:56:34
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2756
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1B1B
Signing time:             Wed 22 Jul 2026 17:38:57 +0000
Manifest this update:     Wed 22 Jul 2026 17:38:56 +0000
Manifest next update:     Wed 29 Jul 2026 17:38:56 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: y9pln354I/A3IRNAI0nB/CK2HvRDN9LvCOi+5G4OqQ8=)
                          2: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: vQEbhJ8auYq9x3EecwXq87HLZ/JnoCZJRBiGLMc4sA4=)
                          3: B53FD334575411ECAA094876C4F9AE02.roa (hash: X0WqMduBFpFu177iP2oZPdFqVCKo3t67uPNJcyev/0U=)
                          4: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: mcn0ZVG55P1HZ+c5tOfv4ldz8ybxCBzv2i3kgRE6eCE=)
                          5: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: tijk8+7R5ocWBvWHdRRYG7JX5+4WVVnKF/vJ0GQ6668=)
                          6: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: epbDGYMjkBjgCB8zOENg9JA5Dqcx6zSsCf3WSlYM71Q=)
                          7: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: NT+gqmZoY06EG/FbKKxXt8qiPx2+Rsm1huN7twr6hzs=)
                          8: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: oh12tPPyo0aWXq9QoIEWfwxMhcXGEQDCqo5UuHvVvl0=)
                          9: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: +/WJzifpij/OX1Rp9/kIJWL8qj5quDZq9BQi1XlB3MY=)
                          10: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: cQKYZfkgbkJUbhvtH5bCihqRqaA2EA0EYMRpPCO51mc=)
                          11: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: UWliRVlokhXmNFKtQbU46hk9m/mXCKg/o2n3Q6d6stU=)
                          12: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: m8Q8VlnRcl/GHb41ywtnMXRFzOLrg9RM9ywdaVX0ju8=)
                          13: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: TOfN0XhsNW5IKIguVjPm1s1TcacnnEpG18DEzhfII+M=)
                          14: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: x63jZuccY3EFvN+dQbF4Rjcil5MsUqwIGk9y/9imM7Q=)
                          15: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: H//vvi5SlLrCtYa54Q+H3er1MSoemnRtrVuPU9bXRyo=)
                          16: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: WC0LdiQwemGFBu/b/DSzTFNyGXY5R3yQGpKxZ/joZ5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10070 (0x2756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Jul 22 17:38:56 2026 GMT
            Not After : Jul 29 17:38:56 2026 GMT
        Subject: CN=6a610030-a829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:3f:d5:97:69:e3:2c:0c:8e:ca:a4:21:42:
                    2b:97:99:47:38:89:6b:13:14:90:3b:0d:af:e1:21:
                    e7:8f:58:9a:03:65:da:bd:8a:45:a0:c7:1d:5c:00:
                    f6:b1:0a:c3:9b:99:1c:04:91:a2:39:cb:d6:e0:0b:
                    5c:8e:f1:2c:97:55:7c:03:45:8d:0b:34:03:2d:b6:
                    1b:10:5d:52:c4:74:73:a7:2a:5b:bc:23:24:6c:98:
                    d8:bb:0e:4e:33:f4:72:8d:69:d3:95:1e:d4:eb:cd:
                    12:f0:46:d4:aa:1a:41:ed:e1:eb:34:7e:24:e2:82:
                    0e:04:c2:3e:89:f2:a8:de:a8:88:21:61:43:5c:81:
                    cf:0e:39:89:19:29:6c:10:fe:65:b7:f8:aa:58:54:
                    37:bb:65:45:fd:83:c5:30:d0:c5:38:b8:19:ea:7d:
                    76:3f:a1:29:24:3c:9c:b9:83:2c:93:84:70:11:bf:
                    cd:71:c6:a6:2c:f3:07:56:30:ee:de:8a:d2:2e:33:
                    0b:4b:fa:6d:7c:90:35:29:92:ac:aa:ab:3b:10:3f:
                    07:08:f4:a3:49:2d:9c:ae:a4:c4:db:35:de:a2:47:
                    99:73:02:d8:48:c7:92:65:db:99:72:9c:57:8d:bc:
                    a1:8b:2c:4e:94:db:76:51:1b:ad:55:fd:3d:f3:f9:
                    c6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AD:FB:B8:52:AA:FA:7B:C4:69:35:8D:C1:E6:2A:F3:E1:52:56:34
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ae:1f:29:dd:ea:d9:1c:58:7d:0f:ca:67:10:5b:31:a3:b8:
         06:87:e8:11:f7:08:82:fd:6c:26:55:91:a0:77:d1:49:01:06:
         1e:50:d3:35:b5:36:21:80:7f:fa:88:5c:3d:70:7c:4e:a4:59:
         38:4a:37:66:69:b9:b4:42:f0:af:6f:73:d8:12:8b:9d:48:22:
         0d:21:a2:b4:7d:71:c4:76:30:93:0d:ca:e3:a2:ca:a8:bf:05:
         46:d3:fe:c1:91:23:a0:b6:45:16:9b:f7:af:fe:49:6d:5e:ca:
         e3:c0:69:f8:c0:97:a1:7b:c3:98:6f:9f:1f:40:af:8b:e1:13:
         43:73:47:97:4f:79:dd:1d:3d:b9:69:c0:0e:9b:0e:c7:ec:d2:
         d4:bf:5a:ca:e9:7b:dd:86:e5:b0:b0:2c:8e:33:4e:a0:e9:72:
         2f:99:e3:cc:63:f5:a6:5d:89:9b:a5:f5:0e:f2:e7:73:e7:e4:
         1d:8d:c5:2b:d6:5c:44:8e:db:00:6d:2e:fc:18:42:0c:d0:9e:
         12:3a:81:8e:c4:d3:c7:4e:42:14:41:dc:0b:b7:0f:e8:2f:f8:
         84:4a:45:97:8a:33:49:56:54:77:0d:91:25:d5:32:ff:6a:ab:
         83:06:06:19:cc:3f:bd:05:cd:e5:9d:73:44:60:cd:1b:d9:cc:
         b3:f8:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:35 2026 by rpki-client