Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File:                     QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier:          1axs5/EUjOLhtnLGwpg1jDICJXsyYuLs/2Hk2MiFPt8=
Subject key identifier:   61:07:79:35:42:EE:1F:47:0D:AD:DD:AA:F9:FF:41:BB:67:EA:46:80
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer:       /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial:       356B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number:          3563
Signing time:             Wed 22 Jul 2026 15:03:37 +0000
Manifest this update:     Wed 22 Jul 2026 15:03:37 +0000
Manifest next update:     Wed 29 Jul 2026 15:03:37 +0000
Files and hashes:         1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: hBGJRg92NrocpT5M9XJe2K7M8TX5e0eAuF7MsWlKcog=)
                          2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: uzaZKpbjTrWsFfOiIa8WfR03ueqsK9oa9a46XDa7tCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13675 (0x356b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
        Validity
            Not Before: Jul 22 15:03:37 2026 GMT
            Not After : Jul 29 15:03:37 2026 GMT
        Subject: CN=6a60dbc9-4167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:95:d6:eb:dc:2d:72:4d:6e:39:79:5a:19:
                    4c:5b:50:20:a8:3f:84:d3:1f:15:4e:62:a8:96:d9:
                    1f:8b:e6:88:fe:ce:1d:81:0a:f7:3b:33:1c:a4:11:
                    ee:1e:31:2b:5d:b6:6c:c3:1c:27:ad:16:2a:0f:d6:
                    f4:90:73:cc:7d:cc:5e:a7:e4:70:dd:aa:36:65:60:
                    0a:18:91:7d:c6:16:a9:1a:c4:21:c8:5b:12:4c:af:
                    66:53:be:3d:a0:67:42:3e:f5:62:41:5d:7f:f3:29:
                    1f:a3:3c:bd:67:bb:3f:08:14:22:74:ee:62:8c:d5:
                    ba:d8:95:15:36:98:68:43:c2:1d:81:e4:d1:61:70:
                    40:35:cb:36:cc:0d:e3:f3:3e:8d:d9:0d:50:da:54:
                    6e:b4:25:5e:81:a8:ee:5f:ce:47:51:2a:a5:b5:3d:
                    c1:21:98:27:6f:f7:4a:01:c2:23:e1:c2:c1:5f:67:
                    6a:fa:20:3a:56:ff:c8:43:52:1b:4a:e4:e1:0c:36:
                    fb:e0:54:16:ed:2a:2c:f8:9f:27:3b:2c:79:a6:78:
                    7d:21:aa:b1:a5:9f:f9:42:e5:8c:58:27:f5:0b:53:
                    0b:ea:7d:22:03:94:7e:ce:49:85:d1:5d:34:f4:74:
                    b2:2b:22:80:f6:b2:3c:7b:d7:af:88:f8:87:5d:2c:
                    a5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:79:35:42:EE:1F:47:0D:AD:DD:AA:F9:FF:41:BB:67:EA:46:80
            X509v3 Authority Key Identifier:
                keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:22:4a:43:45:aa:66:05:09:cf:bc:5a:7a:92:62:05:23:a9:
         d1:92:83:8a:b4:bc:58:1b:d6:71:8f:f2:e4:6e:68:be:ea:a1:
         1c:b4:0b:b8:d9:bd:57:b4:f0:90:fe:30:77:fa:48:39:3f:e1:
         8a:2c:74:5a:e7:28:d3:31:07:00:82:cf:a7:1a:a3:0d:d6:51:
         1c:fe:3c:63:eb:4c:7e:aa:5b:c8:6c:ec:6f:5f:47:77:a1:47:
         d7:87:34:de:19:33:95:a7:c3:29:ed:21:58:96:6e:28:18:3d:
         9f:6c:df:9c:98:d9:05:cb:0b:07:c4:3b:f8:86:87:f4:73:7a:
         e0:17:be:27:75:16:d4:ca:61:de:5c:94:d4:92:34:58:64:1e:
         fb:40:82:d2:65:71:71:80:d7:ff:dd:8e:ad:bd:3c:20:37:27:
         39:bd:a3:e7:bc:2b:94:ce:d9:9d:ba:10:6c:a3:64:fb:0b:ea:
         ff:95:b2:4f:b4:46:b8:0d:e4:c3:2c:b9:bc:0c:47:6d:2d:e7:
         d1:89:7d:3a:2e:26:13:aa:a6:c9:54:0a:be:04:b7:5a:3b:1d:
         b4:5e:00:4c:3d:75:8e:74:26:10:06:fd:00:ed:22:10:81:89:
         74:97:cf:1e:5c:92:d8:f3:d4:d0:6e:72:2d:df:ef:52:c8:d8:
         71:d1:28:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:52 2026 by rpki-client