Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
File:                     QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json)
Hash identifier:          0s8lIw5AQRwISymlfQAhxUvPoExHAr7LmTeWN+6OdP0=
Subject key identifier:   66:38:C7:F8:97:A2:4A:75:49:97:FA:2F:11:18:78:D0:32:47:9F:0C
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Certificate issuer:       /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial:       03D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
Manifest number:          03CC
Signing time:             Thu 23 Jul 2026 01:29:48 +0000
Manifest this update:     Thu 23 Jul 2026 01:29:47 +0000
Manifest next update:     Thu 30 Jul 2026 01:29:47 +0000
Files and hashes:         1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: gVvyz1Tc5PX3OtKu4UNgNH1AMqQZjw03h6ZOnjl16ps=)
                          2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: yG7cQXlLeQDmRJWtBQ7FWthoSWhErCv5Ur1ke2twhVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
                          rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
        Validity
            Not Before: Jul 23 01:29:47 2026 GMT
            Not After : Jul 30 01:29:47 2026 GMT
        Subject: CN=6a616e8c-06ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:7e:4e:6f:06:bf:0d:fa:dd:d5:05:8c:53:
                    b2:3c:c3:a0:2c:6a:fe:b1:c1:40:41:c1:d2:76:5f:
                    c5:03:64:47:41:ba:e1:06:b8:fb:c7:db:82:66:4a:
                    7b:fd:2d:e8:ec:88:65:4d:e4:32:2d:9c:1d:49:46:
                    f1:3e:6a:c9:c0:f9:af:c3:fb:1e:a2:62:39:27:81:
                    8d:d8:f8:9f:05:a5:00:9b:c8:6c:98:9b:50:67:32:
                    4f:e1:6f:65:fd:d0:dd:14:90:94:f8:16:ea:b7:18:
                    b4:82:a1:76:ca:bd:ca:df:6a:62:5f:f0:c5:5e:a0:
                    96:db:eb:02:8f:d0:ea:39:f7:9b:c4:50:6d:39:a3:
                    c4:c3:bf:98:46:d7:c3:5c:c1:ed:de:7c:07:47:2e:
                    a2:65:22:e6:29:10:09:38:ef:f3:24:b5:7e:12:86:
                    69:a1:f6:b1:41:13:38:8c:bf:b3:c9:2d:2f:32:44:
                    20:f0:f7:86:83:f4:2c:61:d6:65:db:64:fc:27:ac:
                    a0:3c:54:f5:12:43:95:13:23:90:f4:4f:6b:d9:12:
                    df:75:0d:d2:3e:24:db:a2:73:ed:21:b1:d4:91:62:
                    04:3f:0e:d1:19:36:93:9a:3a:57:4d:2b:8f:4f:34:
                    e6:fd:76:65:09:6b:cb:0d:24:6a:a5:95:39:48:39:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:38:C7:F8:97:A2:4A:75:49:97:FA:2F:11:18:78:D0:32:47:9F:0C
            X509v3 Authority Key Identifier:
                keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:f9:47:82:92:cf:7f:52:78:bb:5c:7f:76:fc:08:6d:89:
         4a:1a:ea:89:1e:28:e9:98:e1:a4:de:c6:26:24:f6:79:0f:ac:
         05:9f:ef:26:4b:4b:d7:e5:cf:da:29:03:56:0a:ff:f0:d9:26:
         ba:a9:31:f3:2d:39:39:f0:05:bb:96:70:ce:e8:5d:6f:49:ab:
         6c:86:bc:74:7e:bb:56:4b:25:8d:f3:24:f5:b6:83:08:35:b2:
         60:6c:41:ff:14:99:16:28:62:50:94:97:c4:c8:03:f7:9e:9c:
         13:05:e3:08:52:ad:92:7a:79:d1:9e:81:19:e2:21:29:24:97:
         52:54:ec:a3:02:e3:c7:4d:a9:a1:da:0f:fd:d5:ac:c2:65:53:
         72:ef:57:ae:41:ed:ab:3c:c4:cb:cc:38:f6:33:e6:5b:86:3d:
         93:f6:24:23:9c:d3:35:ce:2d:13:3e:03:af:55:66:4d:5a:8c:
         43:d6:6f:97:bf:3b:36:cd:ef:f4:67:ac:1f:ec:f0:4c:21:a0:
         09:68:96:07:0b:f7:b5:00:ce:93:c6:19:8a:71:d2:46:56:12:
         69:e1:c0:98:49:44:e4:7f:5c:bf:1b:8d:f9:38:87:ac:4c:8f:
         0c:c3:c4:e7:a9:9d:02:db:48:e7:73:1f:c2:b8:dc:ee:c5:48:
         06:1c:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:06 2026 by rpki-client