Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
File:                     QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json)
Hash identifier:          st+NKNkDZuTS72JJ7CzSAE0abFBaNENTQSRmTXygzmY=
Subject key identifier:   D9:D2:31:50:D2:FB:94:C0:7C:9D:71:E7:0C:9E:18:E5:96:32:9A:63
Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED
Certificate issuer:       /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED
Certificate serial:       66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
Manifest number:          64
Signing time:             Thu 23 Jul 2026 10:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 10:00:34 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:34 +0000
Files and hashes:         1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: ID5R3E7n97nNF/QL0co+W+gXqtk7SZ0l+9k4i7KBBXw=)
                          2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED
        Validity
            Not Before: Jul 23 10:00:34 2026 GMT
            Not After : Jul 30 10:00:34 2026 GMT
        Subject: CN=6a61e642-67db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:39:f1:2f:e1:1c:b5:32:28:4c:ce:f5:a6:
                    9f:39:db:96:57:5a:73:46:22:bb:92:55:fc:4f:8e:
                    cf:06:14:64:42:af:d7:57:c4:90:65:51:1d:8f:53:
                    66:ff:25:5e:1c:b8:0b:76:bd:34:45:0c:25:51:03:
                    e1:e1:9f:60:d4:9c:0c:ff:0b:12:54:3a:20:05:57:
                    4f:29:0d:af:c9:d8:ab:bf:a3:3c:7c:b5:c9:10:49:
                    ed:79:7e:40:e8:e9:6f:c1:c3:23:ac:f8:fd:f3:25:
                    46:1c:53:4e:83:50:74:f4:f8:72:0e:ff:0c:1a:78:
                    c6:44:6e:98:45:d3:aa:87:96:74:f1:a5:b0:3e:d0:
                    23:82:fd:a9:d1:0b:08:cd:5a:13:54:bd:af:23:89:
                    ad:9e:f6:8c:ab:b6:29:b0:8e:ee:ba:64:e3:91:64:
                    63:f6:37:f2:a7:17:4a:a2:df:ed:42:a8:8a:6d:94:
                    82:2e:58:fe:50:18:71:d5:68:ba:84:8c:86:a1:53:
                    54:52:91:cc:55:0a:32:a6:31:5d:ae:2e:35:1c:72:
                    15:c5:62:3e:d8:f9:c5:6b:d1:60:8d:d0:ac:1a:40:
                    f7:bc:6a:74:b1:e4:a1:24:d1:a4:1f:47:e5:7f:57:
                    d8:80:8e:4d:b2:03:15:9a:01:fa:1f:26:5e:d1:9a:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D2:31:50:D2:FB:94:C0:7C:9D:71:E7:0C:9E:18:E5:96:32:9A:63
            X509v3 Authority Key Identifier:
                keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a5:c2:2b:88:e4:ec:33:8d:c7:6e:93:0c:35:5f:5e:74:4c:
         7a:f0:93:c1:2b:e5:7f:d9:ca:34:39:b5:e0:1a:75:2e:7c:ec:
         08:0d:04:a9:0a:0c:63:27:66:28:c9:d5:e1:0d:77:2d:23:2c:
         10:71:54:c5:da:86:09:c0:8d:f9:c1:32:2a:5e:33:5c:72:cc:
         c0:fe:ff:bd:e5:b6:e7:25:72:0c:55:d8:87:99:f0:3b:de:8b:
         be:be:2a:68:d9:0c:d6:3e:e9:2c:54:d4:fc:4c:fd:95:55:a2:
         7a:81:cd:a4:3c:15:d2:69:ac:a2:db:81:ad:b3:44:0d:3d:00:
         d5:a8:25:61:31:8c:5a:f5:6f:3e:50:4e:68:e4:9a:f7:5d:74:
         7b:7d:1a:78:31:9f:1b:5b:ca:d0:15:76:2c:63:88:63:65:8b:
         49:60:f4:dc:c4:9f:a0:be:e3:72:3b:78:6c:7f:bc:9f:51:09:
         1c:88:2f:e1:c1:85:74:0b:5a:4e:91:e7:a7:a9:0a:4f:46:cc:
         c4:d2:55:67:78:80:82:25:ec:4e:34:a8:8a:1a:96:4a:f4:3f:
         0a:64:38:de:d4:c6:a4:74:62:c1:f9:be:18:90:45:cf:f8:2a:
         f2:16:2f:60:e9:b1:cc:85:96:5f:ef:a6:f7:bd:06:59:22:6c:
         8b:c0:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:27 2026 by rpki-client