Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File:                     QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier:          TbPph8bj6DIgzUZjCHr9HboY2x0iaKYw02EaKWHFrZU=
Subject key identifier:   90:59:0D:69:E6:83:6D:CC:25:CF:15:CA:54:96:16:5F:62:9A:63:9C
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer:       /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial:       04CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number:          04C3
Signing time:             Thu 23 Jul 2026 00:40:26 +0000
Manifest this update:     Thu 23 Jul 2026 00:40:26 +0000
Manifest next update:     Thu 30 Jul 2026 00:40:26 +0000
Files and hashes:         1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: vkce8+ZQk3mFvy4Kmmqrob3zrgtm4WC7gGmjf8fM3f4=)
                          2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: UDGIexCjWZjf9oWBoZsn81ywHvMY4QFQvNjug6FA+Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
                          rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228 (0x4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
        Validity
            Not Before: Jul 23 00:40:26 2026 GMT
            Not After : Jul 30 00:40:26 2026 GMT
        Subject: CN=6a6162fa-4415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:8e:4c:af:cd:b7:6e:b5:4d:71:07:16:92:
                    49:f8:e2:17:45:bd:26:ef:f2:5f:29:88:94:bf:2b:
                    34:83:f8:3c:08:9b:9c:7b:f6:66:c7:bc:4f:b3:ff:
                    ff:65:35:bf:98:28:4c:7d:d9:f1:6e:89:6d:ac:28:
                    a8:11:3e:b1:f0:e9:21:ff:3d:10:38:a9:0d:53:60:
                    0a:a3:ca:e8:08:95:05:3d:8e:c0:1c:76:2d:94:bc:
                    3e:5e:57:1a:08:f7:5b:9c:20:6f:e0:f3:a3:cf:d2:
                    a4:ba:4d:17:2e:7a:5c:42:00:63:91:6c:09:b2:99:
                    d3:d5:b2:d9:56:4f:67:dd:00:51:d4:fd:c7:20:28:
                    f9:57:89:4b:92:1b:cd:f1:51:c7:f8:ae:8b:2f:0c:
                    6e:43:4e:da:78:a4:01:e3:f3:8b:1c:88:7d:ce:a8:
                    59:e8:fe:dc:b9:f6:37:cf:b2:8e:5b:43:3a:fa:ea:
                    7e:af:b5:07:34:b8:53:19:0a:ed:3f:ed:70:48:8c:
                    16:61:00:29:21:ea:b2:1a:f4:c3:f0:ed:d8:5d:9d:
                    1f:43:66:eb:20:82:5c:ba:83:e8:f3:05:93:86:ce:
                    07:d6:aa:cf:25:7f:74:f3:13:7a:9d:a0:62:e3:31:
                    bd:13:e8:28:8a:54:8a:ed:90:5f:0b:dd:0c:7d:e2:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:59:0D:69:E6:83:6D:CC:25:CF:15:CA:54:96:16:5F:62:9A:63:9C
            X509v3 Authority Key Identifier:
                keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f5:83:73:e1:db:c8:03:0a:ac:bd:53:2d:5c:b0:f4:c4:d1:
         e4:f1:de:2a:44:d4:77:52:bf:f0:ca:79:4f:1c:d9:76:2a:0c:
         8a:36:4b:a7:20:09:cf:81:7d:59:00:f6:ef:28:6e:89:50:34:
         ee:75:e7:7a:80:45:59:6b:97:9c:7d:b1:54:5b:12:89:b8:75:
         65:3f:47:18:b7:31:35:c2:9f:35:d6:0d:06:58:7e:49:7e:b7:
         d0:d6:f3:06:f9:d4:e0:18:fe:28:7c:ae:d0:cc:89:db:f0:28:
         2d:3e:8f:44:2b:90:5d:77:fb:d4:ff:91:db:3d:f1:09:99:18:
         5b:db:b9:c3:bd:df:16:b4:d8:ad:aa:06:7a:5b:53:ad:ba:ad:
         34:43:e6:04:ff:3d:99:17:2a:2a:1b:ba:61:2a:8e:11:d8:44:
         f3:6d:a2:38:2d:7f:bb:cc:f4:20:92:a4:d7:fa:a4:bf:53:7d:
         7d:04:0e:fe:e8:0b:94:5a:33:fd:84:42:37:15:b3:08:c7:00:
         f7:c4:cc:2b:ef:68:9d:04:83:48:45:60:ba:14:e4:dd:fc:2d:
         14:9e:a0:b2:bf:cb:c5:33:8b:89:80:42:6c:b0:7a:e1:c5:12:
         76:02:19:6d:5e:a6:82:66:ab:51:97:0a:26:2f:65:26:a9:b4:
         14:be:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:07 2026 by rpki-client