Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft
File:                     QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft (raw, json)
Hash identifier:          dNHbD8UOtwBRZtdll7bKfcjf9I9rZ7m+oG7ZsDkzpOw=
Subject key identifier:   27:EA:4B:99:66:DC:DD:06:07:C4:6A:D7:C3:CD:09:FE:A0:1F:CD:80
Authority key identifier: 41:01:45:FC:DD:7E:8F:1D:6B:39:40:EF:0C:EF:B7:65:91:74:2B:EC
Certificate issuer:       /CN=A91EC167/serialNumber=410145FCDD7E8F1D6B3940EF0CEFB76591742BEC
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft
Manifest number:          12
Signing time:             Thu 23 Jul 2026 11:09:30 +0000
Manifest this update:     Thu 23 Jul 2026 11:09:29 +0000
Manifest next update:     Thu 30 Jul 2026 11:09:29 +0000
Files and hashes:         1: QQFF_N1-jx1rOUDvDO-3ZZF0K-w.crl (hash: sEUfwp+fKDnum6ixZ9RiKZAGJ4S0pDw7gp+iYi9Ulfc=)
                          2: 504168B26F0F11F1A17F76C284A30FBC.roa (hash: l5YgF6ZQdhgOiQeWG6KLPed1ijBj6GSOGCDGFs/IBf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.crl
                          rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC167, serialNumber=410145FCDD7E8F1D6B3940EF0CEFB76591742BEC
        Validity
            Not Before: Jul 23 11:09:29 2026 GMT
            Not After : Jul 30 11:09:29 2026 GMT
        Subject: CN=6a61f66a-fe5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:5d:da:3a:19:2c:a8:dc:13:81:18:83:b6:
                    45:ee:41:ed:15:58:06:2c:d0:37:e2:14:6b:8e:b3:
                    eb:2a:49:4f:c0:ab:80:c0:dc:e1:f5:35:c2:6c:42:
                    a1:ea:95:28:ed:01:8b:4a:ad:73:e9:e7:34:22:f9:
                    32:3f:10:27:41:ce:33:03:0e:97:64:8c:a1:ae:0d:
                    41:fe:30:36:86:f9:04:3f:87:15:2d:3a:70:61:6b:
                    fc:19:01:82:c3:6d:4a:eb:ef:6c:0e:c0:21:ea:a7:
                    1c:4c:67:db:62:b3:05:23:6b:95:d0:e0:8e:96:8c:
                    8b:ee:7d:ab:31:ba:8f:6a:fd:cf:21:3c:01:d2:f8:
                    38:1c:a7:94:dd:56:dd:8c:1f:01:02:2d:1f:7b:b3:
                    15:eb:2d:24:80:b0:3f:f5:ee:74:71:86:8d:d2:ea:
                    d1:97:c5:29:3d:de:18:5a:6b:c9:2f:8f:80:c5:c0:
                    8e:4f:23:42:eb:16:4b:8d:a7:f0:de:89:2e:e2:14:
                    bd:14:8e:f4:ec:75:9b:89:fe:33:1c:c6:34:d0:87:
                    3f:b1:ec:7e:27:86:6d:c7:aa:ab:10:e0:ed:b5:25:
                    d7:43:81:11:f5:06:49:9c:5a:25:34:ad:85:e8:eb:
                    00:90:58:94:60:d7:e9:29:42:93:19:da:ba:1d:6f:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:4B:99:66:DC:DD:06:07:C4:6A:D7:C3:CD:09:FE:A0:1F:CD:80
            X509v3 Authority Key Identifier:
                keyid:41:01:45:FC:DD:7E:8F:1D:6B:39:40:EF:0C:EF:B7:65:91:74:2B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:17:3d:41:2b:12:93:95:7b:2f:af:e3:8a:5c:ce:20:66:
         bb:ed:cd:cd:c1:d7:79:6f:c7:93:37:71:78:9d:ec:05:56:81:
         ab:e8:6b:9f:6d:55:61:1c:b3:ef:1d:05:8c:a7:ac:31:af:07:
         31:fb:53:87:a6:de:34:b1:2f:5c:e2:5c:78:d1:c3:85:9b:f8:
         fd:5e:fb:11:11:19:a2:fb:16:37:43:7c:ae:c0:e5:58:58:a8:
         6b:9a:49:a0:33:3c:08:a5:e1:39:a4:ee:eb:0b:1d:ca:a6:68:
         70:57:8d:f2:a2:4b:da:24:22:92:c5:9f:a8:df:3e:59:0e:c4:
         f7:7e:7b:21:35:b0:97:11:4b:00:2b:58:f8:4e:94:9f:65:18:
         6a:d4:7e:3d:01:71:e2:aa:cf:a0:5e:9d:a3:ab:17:b2:0a:a9:
         32:52:d9:14:81:eb:1b:2c:d0:ba:7a:5c:b0:ab:66:b9:52:4f:
         47:51:ed:9b:57:7f:e3:2c:a4:23:03:b2:76:86:84:5e:79:79:
         e5:88:3c:77:6a:2f:f0:0a:34:bb:c6:33:ec:a9:b4:f2:13:07:
         74:1f:41:68:ef:fd:e1:8a:4f:13:1b:cd:32:86:b8:6e:0f:77:
         da:94:1e:52:89:90:c4:9c:c8:05:8f:55:60:45:e8:03:0c:39:
         49:df:5f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:58 2026 by rpki-client