Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
File:                     Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json)
Hash identifier:          bd7fq0xqAPifwRfZScdRMUJ7lSGeuewmUg/epBYWx+g=
Subject key identifier:   7E:EF:07:62:A0:93:60:06:15:DC:53:15:DD:E6:41:10:CF:0B:FD:AA
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Certificate issuer:       /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial:       1CEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
Manifest number:          1CAF
Signing time:             Sun 26 Jul 2026 16:17:58 +0000
Manifest this update:     Sun 26 Jul 2026 16:17:57 +0000
Manifest next update:     Sun 02 Aug 2026 16:17:57 +0000
Files and hashes:         1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: P4TtZzheXQCK75IXDp639uT+QQ5Okfr6YdO8Mkd7S+A=)
                          2: E007C458C1F111F0BF3C4B61C4F9AE02.roa (hash: 5s6wPVYQGH5s3qyYU5XWxXqoobJzGy5t477auxbm+wA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
                          rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 16:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7406 (0x1cee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
        Validity
            Not Before: Jul 26 16:17:57 2026 GMT
            Not After : Aug  2 16:17:57 2026 GMT
        Subject: CN=6a663336-e983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:b0:7f:f7:d2:db:1b:3a:cd:e1:68:d0:43:
                    09:60:7e:6e:00:8b:fc:4d:df:42:e8:b8:5a:b4:d3:
                    11:6c:06:a0:19:7a:00:32:7a:df:37:b0:c1:60:f3:
                    28:93:43:2b:3b:53:65:be:1a:da:40:9f:14:ec:98:
                    61:fb:d6:75:b1:11:38:12:1f:6f:f6:d3:9e:58:f8:
                    52:6a:b5:77:6a:c3:aa:d3:8e:ce:99:ec:d2:cd:af:
                    c2:e1:a4:74:63:4f:b4:a5:b7:c4:8a:ec:c9:e2:56:
                    39:20:ee:e2:cb:3b:6f:0c:ba:20:9f:e0:15:cf:3c:
                    52:c1:28:5d:81:64:32:76:89:77:f6:c7:a7:17:1e:
                    4f:a9:c1:89:98:de:14:17:a9:3e:2a:7e:e9:7e:4b:
                    12:f9:bd:1e:b3:bd:b4:d3:6e:49:ad:ce:f8:d2:19:
                    9e:4a:d1:d0:5c:0b:0b:0f:8e:16:db:31:b7:08:49:
                    94:54:fa:8b:ee:25:06:e9:36:4f:e2:0d:4f:f5:5b:
                    07:b0:ed:63:d9:7b:60:9f:ae:2a:20:23:91:3e:a4:
                    1f:8e:cf:73:a1:ea:a2:06:a9:3d:b3:e4:5e:fd:b6:
                    29:1f:eb:ef:8b:fe:5b:df:bb:46:4c:b4:38:f5:34:
                    ee:5b:15:36:3d:fa:f3:73:a6:99:07:63:9d:a6:42:
                    ea:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EF:07:62:A0:93:60:06:15:DC:53:15:DD:E6:41:10:CF:0B:FD:AA
            X509v3 Authority Key Identifier:
                keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9e:46:04:bf:e0:db:09:b5:92:a9:12:13:c2:94:56:89:15:
         f3:bb:7d:a4:4a:57:58:66:49:04:df:36:1f:d8:9a:ef:0c:35:
         93:c0:24:bd:f1:61:11:3d:eb:e4:ff:7d:1b:cd:94:3e:5f:e7:
         63:0f:8a:53:50:1c:41:26:49:cd:a9:c2:fe:b5:30:13:5b:fb:
         5d:2c:0d:17:5b:9e:11:11:9d:7e:aa:77:6a:ac:9f:4b:49:49:
         11:ee:7e:f3:a0:8e:28:a5:aa:6f:da:ff:16:40:70:3a:78:06:
         33:0a:74:91:e3:ec:fd:a5:31:f9:06:a3:50:0e:01:38:c2:24:
         c4:71:b8:94:35:42:2d:19:69:b9:bd:45:a7:10:ad:d9:83:d6:
         ee:ea:dd:01:74:d1:7f:cd:bd:1c:71:22:bc:49:b5:06:5b:d5:
         f0:ae:03:df:e1:3e:46:83:85:15:14:50:f1:e5:bc:74:ab:a6:
         ba:de:6c:97:5d:f6:3e:5f:91:9b:c8:57:94:81:70:76:68:09:
         18:ca:c6:3a:d8:c4:1e:ed:8a:16:94:92:45:79:80:85:0e:6f:
         9c:96:88:44:c6:d6:0c:96:33:65:ed:d5:d4:e5:9b:92:77:c1:
         92:6d:06:95:64:ee:be:b5:7d:d7:0c:4c:7a:8f:37:b6:e2:d1:
         42:c5:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:46:51 2026 by rpki-client