Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
File:                     QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json)
Hash identifier:          7n6obdnweSSwO1x0d/DP7KXyf4g3a0mHWVwtjathiZo=
Subject key identifier:   0A:52:83:82:43:9B:87:29:4B:3B:FD:60:C8:31:3A:0B:B5:98:66:0D
Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
Certificate issuer:       /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Certificate serial:       191B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
Manifest number:          190D
Signing time:             Wed 22 Jul 2026 16:32:14 +0000
Manifest this update:     Wed 22 Jul 2026 16:32:13 +0000
Manifest next update:     Wed 29 Jul 2026 16:32:13 +0000
Files and hashes:         1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: Z32ddG0NzQjJ3cgSLzVTKyikVWDADW3DZzcbZF8eZRg=)
                          2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: abf25FbH719hRhMiSj4RTqIJD+/I5r3H2hRBfJwMFgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
                          rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6427 (0x191b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
        Validity
            Not Before: Jul 22 16:32:13 2026 GMT
            Not After : Jul 29 16:32:13 2026 GMT
        Subject: CN=6a60f08e-709b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:df:19:88:8a:0b:37:e3:da:f3:a9:ac:70:
                    ae:35:e8:f0:ea:c2:c7:9a:11:ca:a3:8c:33:cb:ed:
                    76:2f:1b:a7:9b:f5:16:21:fc:84:42:84:9a:db:be:
                    e2:6b:68:2b:80:63:2e:b7:ce:44:de:bb:ed:d6:12:
                    7b:9e:14:35:12:cd:f1:a2:ae:c9:0f:84:07:bf:fb:
                    ac:02:f2:34:38:e2:ee:17:83:74:6b:1d:bd:40:27:
                    49:61:48:f3:ef:25:a0:fb:c0:2f:97:27:58:8f:fc:
                    85:b6:e2:02:f3:4f:7a:ab:79:0d:d8:5b:a5:e3:5f:
                    e2:fe:be:50:b3:9e:ad:c6:51:16:24:5b:c3:fd:aa:
                    94:bd:29:4d:f5:a2:4c:db:69:3c:8a:8e:9f:f8:a0:
                    95:52:54:91:a1:85:b0:f5:40:c3:06:de:f2:5f:7f:
                    4a:a7:3e:1d:b4:da:40:0a:9c:20:4d:83:5d:01:6a:
                    f4:6a:f6:ac:c4:f1:d4:8e:a7:9e:b7:4b:26:f4:6b:
                    20:b2:63:a5:2b:ca:01:84:d8:67:77:10:dd:a9:c3:
                    a5:58:40:01:fc:c8:06:e7:e4:f6:3a:0b:1e:4d:e3:
                    40:db:28:b6:d6:c3:bf:e0:49:c0:ac:c8:c6:49:3c:
                    cc:c9:80:8a:64:30:95:ce:65:bc:c6:bf:43:c4:2a:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:52:83:82:43:9B:87:29:4B:3B:FD:60:C8:31:3A:0B:B5:98:66:0D
            X509v3 Authority Key Identifier:
                keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:22:9e:da:ff:f4:e8:5a:29:dc:84:38:35:82:c3:a0:64:
         09:ce:dd:f4:ee:86:b1:82:62:30:eb:fd:c2:56:f0:f6:49:06:
         66:9a:e8:32:f8:87:7f:d4:04:aa:b6:36:cc:d1:f1:30:e2:ee:
         1f:9b:7a:bd:ce:28:5c:d1:1e:4b:2e:65:e3:81:cd:11:dc:53:
         ce:1b:5c:4f:61:be:1f:f5:82:29:70:9d:e7:2a:5e:90:76:59:
         4e:03:8d:ce:23:16:45:32:58:e3:d1:d1:08:44:03:30:c9:10:
         7a:ab:ee:1d:8c:9d:b8:1e:1e:7f:cc:dc:bd:44:4a:14:e5:c5:
         c1:d4:fd:f5:b1:14:26:f5:4a:90:98:24:04:77:da:de:8d:95:
         7d:ab:dc:21:2b:e3:fb:55:17:18:79:95:9d:eb:b3:c9:91:f7:
         e9:0f:00:40:55:72:c9:76:43:ae:fb:fc:6e:fe:9c:be:12:14:
         b9:c1:97:5a:19:f2:f7:85:e3:8f:89:6c:fe:73:98:e6:d1:cf:
         a2:9d:93:54:89:3a:cb:6d:0b:80:e7:26:44:58:fb:63:a5:71:
         09:c2:77:0d:c6:4f:fb:32:98:a2:48:77:47:5b:3c:96:4d:76:
         d0:76:6f:23:ed:7c:ba:63:18:96:42:55:2d:26:6d:9c:0d:b0:
         aa:d9:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:30 2026 by rpki-client