Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File:                     qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier:          Ru2W3drbgRsezTvkXdaM7uXRfGHOEiCpND2TddZbD8o=
Subject key identifier:   07:EC:15:14:7C:07:71:E7:C5:80:5E:ED:65:9A:74:42:48:67:6A:33
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer:       /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number:          0249
Signing time:             Thu 23 Jul 2026 03:35:34 +0000
Manifest this update:     Thu 23 Jul 2026 03:35:34 +0000
Manifest next update:     Thu 30 Jul 2026 03:35:34 +0000
Files and hashes:         1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: qZ3SCO6+x7pTy3+IbqGp7EdrY2XlIcAC65DBBFEPp9Q=)
                          2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: zpm4WI/rpoX+PhSp4A1fa7cTi+uUSsWISqGvT07i/hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
        Validity
            Not Before: Jul 23 03:35:34 2026 GMT
            Not After : Jul 30 03:35:34 2026 GMT
        Subject: CN=6a618c06-dcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:38:2b:a2:42:5c:80:bd:1b:51:81:ac:6d:
                    e1:41:4c:bd:c1:85:80:3b:4e:84:f6:8b:f1:b3:93:
                    06:e4:7a:97:8e:94:d5:d3:a1:62:12:aa:c7:2d:5d:
                    9b:0f:6b:73:7d:10:85:7c:d9:a1:8c:37:79:4c:97:
                    e2:fd:03:cd:98:56:e1:cd:bf:f6:48:37:d0:fe:8d:
                    b4:2f:a1:54:54:15:be:bb:8b:80:0b:7f:21:90:23:
                    86:19:07:ef:fe:0f:09:8f:18:b7:28:ee:88:b8:d2:
                    10:f8:9c:45:66:d9:ab:93:b1:9d:27:f4:6d:72:b5:
                    d2:73:2f:6c:56:89:aa:0d:b0:0c:22:87:d7:66:85:
                    9a:c4:62:55:e2:32:df:98:95:c8:2e:bb:e9:f9:38:
                    57:f3:3a:79:e8:15:8c:8a:11:81:18:8f:db:7a:b4:
                    6f:82:2d:41:80:06:df:9e:28:34:50:ce:15:9a:7a:
                    95:85:ab:2c:65:7e:5f:b9:d1:c8:de:6c:73:10:7f:
                    a6:4d:86:17:20:0f:be:c7:19:bc:ad:ba:99:a1:f5:
                    b2:01:32:9e:56:3f:9c:b8:c9:c9:a0:ce:5e:29:8b:
                    29:e0:85:13:51:fe:f2:e3:fd:66:17:1c:99:ff:eb:
                    7c:60:b0:c0:5a:c5:02:0d:f8:6e:5f:84:4c:2d:76:
                    78:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EC:15:14:7C:07:71:E7:C5:80:5E:ED:65:9A:74:42:48:67:6A:33
            X509v3 Authority Key Identifier:
                keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:dc:99:f8:ac:e7:91:d8:fd:08:63:c4:b3:7c:1b:28:12:67:
         a9:ca:40:d4:8b:a2:6e:58:a3:3b:7f:2c:66:62:ce:4d:65:a9:
         51:ca:04:fb:71:5d:33:3e:2d:d7:e1:13:7e:dc:f8:3c:00:04:
         7a:a0:0a:8b:2b:34:60:24:cc:7b:77:4a:93:e1:2e:00:38:cf:
         cd:d5:85:64:17:56:cb:7d:06:a0:13:0d:40:06:ce:db:b7:7f:
         1a:99:7c:2c:90:50:d0:eb:99:b8:0a:3b:b0:55:e6:a0:2c:af:
         ce:fb:02:5e:9b:69:3e:c3:05:9c:d4:1b:56:f2:7a:26:60:70:
         48:05:9e:30:f8:23:bc:ab:82:7a:7e:3d:65:1b:d3:dc:4e:24:
         05:a1:09:1d:11:0d:19:39:ae:ec:d7:b0:5a:b5:2b:a9:12:d0:
         b0:05:54:0e:0b:73:c7:89:62:35:41:e7:f7:bc:33:a8:e2:9a:
         ac:87:cb:ce:8e:5b:07:0e:41:4e:0b:d9:49:a0:35:4c:a2:b3:
         72:c7:96:4c:17:9a:d1:43:f7:44:27:f2:cc:d1:56:12:cb:cf:
         3e:95:1b:79:b8:bd:2a:7b:d7:e0:d5:19:ca:a9:ee:9f:74:ac:
         82:36:7e:64:33:c2:b8:08:b8:50:d7:d2:f5:bf:a5:f9:ac:65:
         f4:fd:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:02 2026 by rpki-client