Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File:                     QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier:          EV9G711nUiUWN0an7v6QFWeCY3y+s6sFAiYrjQ0WXKI=
Subject key identifier:   71:BC:A9:7F:29:01:B7:0E:F5:E4:80:11:5C:42:0A:74:3B:26:36:8F
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer:       /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial:       19DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number:          1999
Signing time:             Wed 22 Jul 2026 16:30:36 +0000
Manifest this update:     Wed 22 Jul 2026 16:30:36 +0000
Manifest next update:     Wed 29 Jul 2026 16:30:36 +0000
Files and hashes:         1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: nctgLex2+TNcnpkzpd0sd5V7RSDDDIigY356dZ+IIN0=)
                          2: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: mnfTgIuPlsM7FOE7wG43XOpMDWMOBSC6RbV4JXFx0HM=)
                          3: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=)
                          4: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
                          rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6620 (0x19dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
        Validity
            Not Before: Jul 22 16:30:36 2026 GMT
            Not After : Jul 29 16:30:36 2026 GMT
        Subject: CN=6a60f02c-965f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:61:bd:fd:e6:03:5c:9c:40:cc:da:1b:20:
                    f5:da:79:9d:dc:63:14:04:cf:a0:4a:44:7b:b5:1f:
                    7c:1f:5d:ed:65:a8:a0:4f:1a:76:8e:99:20:7f:b7:
                    75:5d:96:59:bb:e5:ac:56:bf:ad:72:1c:0d:73:3b:
                    d7:60:db:d4:ce:bf:e2:74:5b:45:18:fd:49:7d:72:
                    ef:6f:26:e4:97:a0:aa:08:c4:30:2e:2a:68:eb:67:
                    09:f5:b2:55:81:3d:12:13:95:45:92:24:14:e6:c6:
                    69:91:6e:2d:e5:d1:70:56:c3:48:53:0a:d6:69:c1:
                    48:d4:6d:bf:0b:54:24:80:ce:7a:53:eb:f3:5c:21:
                    0b:a1:13:8f:09:34:74:5a:2a:ba:84:d9:e5:b7:c6:
                    b9:e1:d8:26:2c:68:0a:cb:2a:84:f1:72:d9:aa:58:
                    0f:c6:36:10:9a:3b:7d:9c:12:65:ef:41:84:be:8b:
                    8d:51:25:7e:67:c7:e2:1b:c6:24:35:b0:d8:61:e7:
                    6b:10:b7:e3:b2:bf:d6:6c:ed:3f:d3:01:50:9d:97:
                    0e:9a:62:3a:88:fb:fe:37:79:dc:57:a9:3b:e9:93:
                    f7:0f:ac:66:3c:48:d9:5e:37:74:e2:ff:fc:2a:0c:
                    73:21:d2:61:26:f3:c7:d5:08:76:68:3c:12:7f:26:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BC:A9:7F:29:01:B7:0E:F5:E4:80:11:5C:42:0A:74:3B:26:36:8F
            X509v3 Authority Key Identifier:
                keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:87:3d:eb:44:a9:88:f1:bd:21:d3:7d:0c:f7:61:27:0b:4b:
         e7:55:2e:df:67:e5:74:c9:a2:11:69:8c:ef:a5:d9:2f:2c:07:
         80:73:fc:7d:be:29:e9:10:a6:ca:f3:58:c1:cb:c6:f2:65:08:
         93:5d:1b:d3:7e:49:64:22:bc:8e:5e:28:bd:65:33:32:07:82:
         d2:51:9b:3c:77:8a:b0:03:d1:d2:6d:f3:e4:f3:4b:4e:bd:07:
         41:26:fb:08:fc:38:12:8a:a6:3c:45:26:72:04:ec:ac:56:6c:
         31:63:5b:19:7f:3c:58:95:b6:38:ca:24:9c:3a:e1:c7:64:fa:
         7d:45:9f:ea:7e:1d:3e:2f:5f:93:45:60:28:2e:b9:7a:52:14:
         8d:41:59:1b:75:fc:31:3c:d8:c9:b5:cb:17:19:43:aa:62:6c:
         32:68:e3:f0:62:53:f5:59:fe:5b:4c:e7:51:65:d7:7c:be:30:
         ec:47:93:30:95:d6:f7:a9:41:5f:ad:03:f5:76:ee:8e:9c:09:
         af:b5:9a:93:40:63:99:9c:75:46:7e:e2:d2:0d:58:2e:fb:30:
         35:81:a1:0d:7f:ff:c1:6e:22:c6:25:05:13:9a:25:23:f8:25:
         59:c4:b5:44:49:8a:dd:d1:d5:2f:9d:02:10:11:bb:95:f5:b6:
         20:13:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:56 2026 by rpki-client