Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
File:                     qfCsl7nBjDLiFpwBpJhsemwlX_4.mft (raw, json)
Hash identifier:          N3Z6Agn1CxCLfqLE5aRsdR+RmH+hiJ6z/hS87dDswq4=
Subject key identifier:   1F:15:C3:E0:52:A8:5B:91:F1:D5:AC:49:40:98:C4:37:99:C5:31:88
Authority key identifier: A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE
Certificate issuer:       /CN=A91585F0/serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
Manifest number:          BE
Signing time:             Thu 23 Jul 2026 08:49:29 +0000
Manifest this update:     Thu 23 Jul 2026 08:49:29 +0000
Manifest next update:     Thu 30 Jul 2026 08:49:29 +0000
Files and hashes:         1: qfCsl7nBjDLiFpwBpJhsemwlX_4.crl (hash: EWeqVEPgrkD297rQ/1h9e3TI7fJKsS7j4YpvF06Ry5Y=)
                          2: C9479880646611F0B371D156C4F9AE02.roa (hash: EiYvwU0YQnjRK3Tvv8B2ub2+aNVUJVhtBwUBXxQFVDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl
                          rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91585F0, serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE
        Validity
            Not Before: Jul 23 08:49:29 2026 GMT
            Not After : Jul 30 08:49:29 2026 GMT
        Subject: CN=6a61d599-7ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:cd:c9:b8:f6:5b:1c:05:c1:c6:a6:e5:90:
                    12:91:9c:46:65:eb:84:3d:2f:3a:a3:be:7d:9e:80:
                    7a:09:f4:84:5e:9f:0a:87:0f:5f:ca:81:91:3c:01:
                    3c:70:d1:b5:6f:1c:49:af:82:ba:4b:17:56:eb:d6:
                    05:09:8d:83:8f:ed:be:1e:53:ea:39:4f:3b:8a:cd:
                    c7:11:ed:19:5e:36:a4:34:02:c1:f9:83:48:12:9b:
                    7a:6c:e0:52:ad:66:ab:2f:14:cd:5f:c5:56:99:2f:
                    cd:32:5d:53:57:43:cc:11:c6:85:1b:93:2f:e0:54:
                    5f:40:b2:b3:fc:71:10:02:32:d7:2d:5e:3a:7c:d6:
                    79:39:f3:de:53:13:23:6b:20:53:50:0e:c5:a0:01:
                    ac:82:32:03:eb:c5:0f:b5:3e:9e:f4:c9:da:c2:94:
                    26:ba:00:84:b4:ee:1c:34:f6:13:d3:0d:b1:7d:b4:
                    89:d2:30:73:a1:5e:93:4d:16:69:36:07:9b:a9:62:
                    fe:1c:43:28:a1:36:5e:26:5e:62:a1:77:f7:18:76:
                    66:d6:44:99:64:a4:0d:03:3e:29:01:98:98:c7:ab:
                    39:ff:3d:8d:c1:b4:b5:3e:24:50:ad:41:bf:f1:e0:
                    81:3b:77:42:b8:2e:1f:c9:c2:46:f9:bd:eb:70:ff:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:15:C3:E0:52:A8:5B:91:F1:D5:AC:49:40:98:C4:37:99:C5:31:88
            X509v3 Authority Key Identifier:
                keyid:A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e2:1f:9f:8c:f6:bd:d3:7e:5b:b5:b6:16:c0:a5:ae:93:cf:
         9c:62:ba:23:4e:44:32:6d:ef:15:f5:ef:99:fa:28:ca:48:26:
         8f:61:ee:db:90:57:3d:2b:d7:57:db:66:04:1d:e8:e5:ca:4c:
         7b:89:67:ff:59:38:42:7b:5a:2d:49:97:dc:22:1b:0c:b2:1d:
         9e:ae:98:a2:3b:08:c2:e8:a8:ba:d1:6a:54:a4:fa:01:e3:58:
         80:63:d5:22:40:7e:f2:e2:36:20:96:ce:f5:55:6d:0c:3d:be:
         08:ca:ba:39:2e:d7:61:fe:aa:ee:65:01:26:40:36:8c:97:be:
         df:c5:f7:3c:82:53:22:9a:82:c5:e1:82:9e:e2:7b:5e:5a:cb:
         45:79:44:a6:de:ef:67:c6:49:ac:35:64:88:ff:0a:0b:4b:e4:
         b0:de:c7:f2:e5:0a:87:75:5c:9b:41:d7:87:3f:64:30:45:71:
         20:1b:f0:20:af:a0:4f:7a:a2:3d:05:77:8a:ee:01:92:4b:4d:
         2a:18:ab:f5:cb:87:5b:9b:38:14:cb:a9:99:f0:01:e7:1c:77:
         cc:08:58:27:22:95:37:8f:5f:9d:d4:a5:a1:88:2d:22:80:1e:
         bb:88:d5:5d:cc:c5:37:bd:f1:28:15:cb:81:7d:9d:db:bd:8d:
         f9:2c:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:13 2026 by rpki-client