Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
File:                     QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft (raw, json)
Hash identifier:          iDvXMmbspFkDBX1p3+m1NhavWJIrodLNQY6mUbuCrpg=
Subject key identifier:   DB:E8:AB:89:69:6B:74:CF:84:55:1F:80:30:62:17:15:56:A0:14:45
Authority key identifier: 43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A
Certificate issuer:       /CN=A91FFA9E/serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
Manifest number:          76
Signing time:             Thu 23 Jul 2026 09:45:18 +0000
Manifest this update:     Thu 23 Jul 2026 09:45:17 +0000
Manifest next update:     Thu 30 Jul 2026 09:45:17 +0000
Files and hashes:         1: QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl (hash: GZvKPM82OjUroPG5TQt9Rj6BwOxEpjIUgGiCDeFpdt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl
                          rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFA9E, serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A
        Validity
            Not Before: Jul 23 09:45:17 2026 GMT
            Not After : Jul 30 09:45:17 2026 GMT
        Subject: CN=6a61e2ad-7712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:1d:50:8a:25:a6:e1:c9:2d:ee:85:1e:6c:
                    0d:96:f8:80:7f:f2:95:e8:6d:f3:55:60:cd:c5:57:
                    02:db:8f:97:05:45:7f:b7:aa:90:3e:3e:df:ec:fb:
                    c9:b8:82:d7:1c:e7:96:74:6d:8e:e7:4d:1c:c0:ca:
                    f8:06:6b:26:f2:fb:a0:53:59:af:af:51:54:ea:23:
                    da:8b:d6:ff:1c:d4:1f:43:5a:4a:ac:47:7f:ac:f4:
                    10:94:f0:ad:dd:40:7d:90:be:7b:ff:14:ae:23:e3:
                    bf:a7:a2:f6:7a:ac:e7:05:4d:a0:3a:ad:d7:15:84:
                    62:2d:ea:96:7e:c6:4d:06:5a:0c:24:90:a6:d6:00:
                    af:66:c9:e8:3b:3e:11:84:0e:bc:2d:1a:10:e6:04:
                    f3:bb:2c:d3:f6:8f:03:f0:5a:31:92:3f:3f:3b:34:
                    23:58:27:c8:58:18:3b:51:e1:0c:29:1f:13:b3:43:
                    b7:5f:89:ad:50:45:20:7d:f2:c3:8e:df:22:fe:db:
                    17:00:32:27:fc:5b:27:72:d9:ff:b3:53:95:59:63:
                    ae:85:5e:61:bc:59:32:df:c0:46:c1:db:36:f1:93:
                    55:aa:e2:30:e5:32:33:89:b5:85:4c:6a:72:f4:9a:
                    f2:03:59:e9:fa:b5:9d:e9:bd:4a:91:ea:35:9d:e2:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E8:AB:89:69:6B:74:CF:84:55:1F:80:30:62:17:15:56:A0:14:45
            X509v3 Authority Key Identifier:
                keyid:43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:9f:a0:43:32:8f:45:7a:a5:5b:e3:8a:f4:e3:3f:4c:c4:
         26:e2:99:53:0c:b2:1f:b7:1e:82:c1:da:e1:e5:80:5e:84:6b:
         ac:86:40:41:30:76:f8:a1:81:1b:1c:79:5b:d5:a8:df:95:26:
         e6:bc:2d:2a:89:ce:ce:fb:14:ba:5b:81:3f:8c:fb:15:b3:c4:
         e5:e7:55:39:43:98:ff:df:e7:e2:b2:a6:3a:2c:53:7a:42:5a:
         7f:10:f4:17:db:fa:5a:2f:03:c9:be:e0:09:7e:0e:d0:6e:cc:
         28:96:ff:d4:6c:34:b2:fb:c3:5c:ac:43:f2:c1:f6:8c:f2:23:
         d9:00:07:7c:0e:34:3a:1a:97:79:2d:fe:38:83:40:2f:5c:17:
         40:e2:6a:a2:86:34:98:52:c3:c3:dc:bb:bc:b1:23:4b:32:cd:
         c0:59:09:f5:2b:be:e5:1c:6e:18:ee:71:ff:09:71:8e:09:ed:
         6e:41:f7:44:56:15:2d:48:cf:66:d0:28:58:25:20:67:cf:6d:
         a4:51:2d:45:ac:74:ab:f6:bf:4b:91:52:2b:c7:86:15:9b:b3:
         0c:87:b6:2b:6d:13:8c:ca:1b:86:04:e4:76:ea:99:1f:7f:8e:
         4a:54:dd:48:d1:73:c1:ba:e7:2a:4b:c5:ec:57:84:3d:ca:be:
         b0:b4:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:45 2026 by rpki-client