Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
File:                     QVEOswnqHt6pCF-PaC289YblBfg.mft (raw, json)
Hash identifier:          dIEwNzqb6yfA0pAhiP7f7Kzn7ZEaDNuJ8OFqPyC9L4w=
Subject key identifier:   30:24:BD:C1:55:7F:35:41:F1:D2:A8:5A:9A:B4:F7:32:A3:69:32:51
Authority key identifier: 41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8
Certificate issuer:       /CN=A914EBB2/serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
Manifest number:          32
Signing time:             Thu 23 Jul 2026 05:55:42 +0000
Manifest this update:     Thu 23 Jul 2026 05:55:42 +0000
Manifest next update:     Thu 30 Jul 2026 05:55:42 +0000
Files and hashes:         1: QVEOswnqHt6pCF-PaC289YblBfg.crl (hash: cJXvcfhJ1aCcJk8Mexg+bZToZIBSTSLl1kSXkCIAI/A=)
                          2: 04A267BC3A1C11F18A86C54FCE833773.roa (hash: 23knBDl73gfXNd3iGv8o2CcfU2NSZeIUWhdKE2kDL2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
        Validity
            Not Before: Jul 23 05:55:42 2026 GMT
            Not After : Jul 30 05:55:42 2026 GMT
        Subject: CN=6a61acde-a971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:dc:e7:86:1d:56:63:80:0a:5f:51:b7:3e:
                    be:0c:1e:6d:38:ce:97:da:f3:e7:6c:a5:a6:c0:90:
                    8f:5c:c3:37:49:d4:33:d3:76:df:c4:5d:48:3e:ae:
                    4d:c8:98:0e:f0:1e:d0:71:be:a3:c1:49:6a:e3:05:
                    40:8e:a0:49:bc:9a:2a:44:83:5b:eb:90:c3:aa:77:
                    c8:f4:f3:1c:10:3e:dc:3e:08:a9:4b:0f:ab:81:d5:
                    49:40:b1:2f:1d:2c:3c:a3:a3:1f:34:8a:c7:2b:93:
                    bf:af:2e:d5:9b:ce:ed:e0:f5:b6:96:2b:30:c9:fd:
                    b7:cf:71:39:e9:9b:ca:af:6f:e2:64:a0:49:a5:32:
                    f8:a2:65:5c:79:db:28:39:5d:f2:e2:00:55:b0:40:
                    d7:37:24:f8:8e:1c:db:83:ea:55:fd:7c:50:6f:8a:
                    b8:39:df:33:7c:2f:ee:c8:39:ea:2c:d0:c6:a5:d2:
                    d2:ea:9e:ea:11:7c:58:7d:f7:37:8b:7a:51:33:44:
                    ef:15:c8:6d:99:54:bb:af:66:61:c6:e9:ad:f9:aa:
                    33:a4:5e:b0:8e:fc:4e:1f:e4:94:7c:88:63:b2:1c:
                    14:57:42:55:7b:93:b5:11:94:07:9d:d0:29:45:d5:
                    cb:89:2a:6e:3e:94:8c:a9:e5:29:3c:19:c7:93:d6:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:24:BD:C1:55:7F:35:41:F1:D2:A8:5A:9A:B4:F7:32:A3:69:32:51
            X509v3 Authority Key Identifier:
                keyid:41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b5:39:a2:0c:f5:4f:a1:1b:3a:cf:0c:1b:02:b6:e6:64:81:
         bf:18:4a:49:d0:d1:f4:2c:ff:ab:70:c0:37:14:a1:67:a9:97:
         82:84:5a:a8:0a:41:3a:76:7f:ca:9f:6d:08:2a:1c:b0:98:ba:
         6a:28:d5:6e:df:12:f4:ad:04:7d:f5:7c:d8:16:ae:c5:d8:a6:
         c4:05:43:99:a4:62:a3:a7:f3:c0:24:b4:f1:ff:5e:4d:2f:9d:
         01:a1:cc:50:e5:f3:6e:5e:47:21:ca:16:25:e0:5f:62:d1:d7:
         b4:1c:ea:4a:d1:a5:ef:dc:7b:eb:ad:8b:d4:fc:36:5a:18:24:
         6a:0f:7e:8f:04:99:8e:48:64:79:5e:2e:29:cf:78:21:fc:db:
         a7:34:c9:9f:bd:3c:15:05:32:d9:cf:e4:18:97:83:fb:50:9f:
         c6:a2:19:79:61:97:34:23:20:ca:c9:3e:e2:05:4d:73:53:0d:
         a9:7b:94:06:68:61:72:69:d3:ea:e4:b9:a2:09:49:2d:e8:c9:
         07:9f:50:09:27:b0:76:80:33:a3:05:e2:2e:06:1c:f3:5a:c8:
         30:f9:c4:c6:24:cd:e6:c9:cc:c8:3e:08:56:09:5d:55:f0:65:
         32:61:64:8e:2d:0c:17:fa:e7:08:b7:6c:0a:38:83:1f:83:96:
         b5:39:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:51:56 2026 by rpki-client