Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
File:                     qUY-3mcgvjW60R9aiYbbsXpMMqs.mft (raw, json)
Hash identifier:          FmVJ0rJkptvtDdyoVATvHUQISnVQZe1thfUe18UUUEE=
Subject key identifier:   BA:50:36:BF:9C:57:6D:4D:DD:A2:5D:7F:72:83:A8:1A:B1:0B:C9:AA
Authority key identifier: A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
Certificate issuer:       /CN=A91F8AD4/serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
Manifest number:          1C
Signing time:             Thu 23 Jul 2026 11:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:15 +0000
Manifest next update:     Thu 30 Jul 2026 11:00:15 +0000
Files and hashes:         1: qUY-3mcgvjW60R9aiYbbsXpMMqs.crl (hash: L7VA9/67cYe3dWEae0ICsfsTwb1sAuQoYNwvynPPlno=)
                          2: 0DD665AE5B6411F1BCACB5ED9D833773.roa (hash: Zw6PGn1J7/f1qbg4N3OXHky/Z2t3N4xuVTg/093VRwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AD4, serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
        Validity
            Not Before: Jul 23 11:00:15 2026 GMT
            Not After : Jul 30 11:00:15 2026 GMT
        Subject: CN=6a61f440-5ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:ac:ed:06:03:61:15:77:0c:f5:e6:ef:7f:
                    5d:d4:3d:9b:46:13:dd:c5:e9:a6:53:ce:46:91:ff:
                    87:9a:11:90:ed:ad:fe:7d:61:57:b7:50:a5:39:8e:
                    97:9d:bb:fe:f3:f3:0e:55:15:d5:b1:98:47:a1:bb:
                    56:21:9a:d1:76:88:a1:dc:96:6e:c5:d5:cf:fb:e3:
                    7f:bb:28:fc:7e:88:2e:98:57:b5:10:30:55:62:75:
                    84:4e:d6:c6:33:23:55:d0:f6:11:13:e8:7b:b8:c9:
                    ad:c5:e4:6e:a1:17:17:ad:16:fe:e8:5d:9f:35:50:
                    1e:c9:be:4f:5e:75:46:07:b6:dc:2f:75:d7:50:46:
                    a1:d2:90:51:c3:62:7c:1c:d0:b6:a0:11:34:96:52:
                    40:73:b2:ce:3a:48:b1:71:6b:2e:fa:d3:61:65:92:
                    9f:6b:6c:7d:ca:e4:af:b7:f1:17:52:e9:f9:9b:28:
                    42:bf:f6:82:77:75:f3:70:4b:a3:0d:cc:94:cd:4a:
                    85:94:59:10:ab:4d:66:64:71:86:4f:ff:c1:03:f0:
                    66:10:1b:ad:4a:8e:02:a9:8a:53:30:ed:3c:18:1b:
                    c8:ac:ab:1b:2e:b0:84:1f:53:83:78:3b:6d:31:25:
                    a1:0d:41:33:a4:6a:e2:dc:80:fa:59:bd:06:59:e9:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:50:36:BF:9C:57:6D:4D:DD:A2:5D:7F:72:83:A8:1A:B1:0B:C9:AA
            X509v3 Authority Key Identifier:
                keyid:A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:aa:2d:2e:00:58:c3:7c:a0:9c:48:c2:e9:e8:a5:48:c5:3f:
         7a:f5:db:a5:61:be:f7:ef:d5:1d:7e:7a:b9:ea:92:83:f5:75:
         2b:a5:3d:4c:4c:93:e1:18:35:70:a9:8b:be:0c:82:8e:63:cc:
         bc:52:25:91:3b:56:a9:ad:0b:da:b5:48:17:36:81:b0:da:ff:
         2b:75:0c:56:fa:49:c5:38:e8:17:03:9e:9c:8d:21:61:5a:31:
         b4:bc:6f:72:43:8e:c7:53:3c:17:22:61:71:09:88:f5:b2:3d:
         15:55:2e:fe:79:ee:c2:1b:77:8c:a0:5d:03:2a:c7:7d:2e:ce:
         90:a0:28:46:b8:9f:cd:c7:72:18:b8:69:bc:e6:98:fc:c5:e8:
         07:6a:22:8e:b6:3d:8f:9a:38:b8:a3:f4:3b:ba:6c:df:d6:cd:
         08:9f:d1:41:cb:36:b5:d0:eb:ee:87:6b:bf:b0:9a:6d:78:f0:
         3e:e2:80:35:83:87:30:f6:43:79:ca:70:5b:4f:b1:cb:a8:34:
         c5:8d:8c:fb:b6:6b:5e:4e:5a:16:cf:ef:77:ad:c4:df:7b:cd:
         f6:4a:a5:57:04:a8:71:6e:7a:f2:d2:74:79:9f:c4:5d:71:b6:
         9e:89:8b:45:f8:2a:6f:03:f7:ee:c3:80:a3:36:f0:0c:05:a2:
         b9:5b:89:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:55 2026 by rpki-client