Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
File:                     qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json)
Hash identifier:          NEa+9DXIVNSNQF2HNVk8Qf4AgLS36VtCfnMhm7F+sCQ=
Subject key identifier:   67:C6:7B:F4:08:AB:4E:E6:D5:34:4E:4F:74:87:C3:1F:FC:FA:A4:2B
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Certificate issuer:       /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial:       0315
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
Manifest number:          030E
Signing time:             Thu 23 Jul 2026 02:07:00 +0000
Manifest this update:     Thu 23 Jul 2026 02:06:59 +0000
Manifest next update:     Thu 30 Jul 2026 02:06:59 +0000
Files and hashes:         1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: nDjVlS4MunvyiB6ZH/XD4dIY4GgWJhxvYtgqb+R1eQg=)
                          2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: 7veWVwTDcJIQiqB140/ZwdfOWsgZaB/7p0PlC1ugVfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
                          rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
        Validity
            Not Before: Jul 23 02:06:59 2026 GMT
            Not After : Jul 30 02:06:59 2026 GMT
        Subject: CN=6a617743-1360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:a1:8e:dc:1b:98:23:78:ab:fc:6a:49:42:
                    ef:72:98:9f:23:06:87:b9:71:e8:18:39:a4:0e:4f:
                    8b:99:24:3c:42:8e:ef:7a:a8:87:cd:9b:9c:a8:b0:
                    e5:21:9e:c5:6f:f0:72:eb:05:91:23:a8:c3:a7:64:
                    e7:d6:ae:8a:59:f8:fa:ad:67:71:d4:2d:c4:f3:bb:
                    23:e5:97:33:32:2a:ef:73:ff:34:9d:81:bf:63:79:
                    6b:01:9b:4a:e2:b4:e6:92:d8:a0:c4:36:ae:18:90:
                    c3:b7:d1:cb:63:50:5c:29:af:4b:c7:be:37:b9:0b:
                    18:cd:29:dc:34:09:92:19:2b:31:bc:8a:0e:61:ef:
                    59:bf:63:4f:94:6c:73:c0:84:0d:13:71:00:96:94:
                    44:3d:06:c1:3c:08:67:49:8b:f6:6b:4e:f4:1a:18:
                    ba:d1:69:5f:d2:ef:a4:35:a3:aa:39:e2:56:86:9b:
                    29:57:2e:44:11:1c:67:61:86:36:5d:77:26:4d:f1:
                    ed:de:eb:56:d8:1e:d8:2b:f6:9c:75:7e:0c:35:31:
                    06:5c:b2:be:eb:25:b5:bb:bf:25:55:cc:1b:bc:33:
                    3d:c3:89:eb:7f:9e:86:17:fb:36:36:11:56:6f:6d:
                    69:19:16:c1:32:4a:d2:53:94:9a:bb:45:d2:fa:e6:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C6:7B:F4:08:AB:4E:E6:D5:34:4E:4F:74:87:C3:1F:FC:FA:A4:2B
            X509v3 Authority Key Identifier:
                keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:5c:ef:94:04:86:e8:81:fc:ef:d4:9e:1e:16:a7:65:3d:
         e5:5e:65:5d:f5:5d:bc:43:80:ed:8e:78:8e:39:09:9d:29:c6:
         01:98:3d:1f:4e:ea:b5:e8:6f:91:e5:8e:07:ff:09:12:3a:80:
         ff:b8:af:0f:9a:ac:35:e8:f7:5b:52:fa:86:da:07:44:09:52:
         66:15:54:55:3a:61:52:26:a5:dd:2e:19:f8:46:d3:4f:ed:6c:
         09:9c:16:aa:be:4e:45:4c:49:46:e5:30:e0:a9:90:60:22:ae:
         19:11:c2:cc:bb:65:b2:6c:b9:5d:38:d3:73:d6:c9:5d:7a:f5:
         14:78:b6:64:8b:90:f9:97:c1:d3:69:02:03:83:9c:13:59:e5:
         61:f0:73:79:4f:03:50:9f:c5:c7:99:e5:23:a9:9a:e2:b8:cc:
         fe:c5:c3:78:08:1e:93:b0:a9:5e:03:ae:73:28:09:cb:98:80:
         b5:bc:2b:74:18:10:7e:ab:8a:9c:25:32:7f:f2:aa:17:f6:1c:
         a4:01:8b:65:23:03:85:48:52:d2:09:e9:90:c1:5c:9a:91:a4:
         fb:1a:ea:b5:c4:3e:59:18:82:40:00:66:63:f1:fc:3d:f2:06:
         c3:50:23:82:ab:eb:15:db:88:c7:ae:e7:96:b2:39:39:75:de:
         f9:24:79:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:29 2026 by rpki-client