Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File:                     QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier:          G3WKP+cjx/KZjVs8FcLZUzadlpWP5M+J54/5gKlJEa8=
Subject key identifier:   56:49:B7:50:57:78:F0:B2:19:9B:36:06:31:57:F5:3F:8C:B0:52:C8
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer:       /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial:       358A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number:          357B
Signing time:             Tue 18 Aug 2026 14:39:47 +0000
Manifest this update:     Tue 18 Aug 2026 14:39:46 +0000
Manifest next update:     Tue 25 Aug 2026 14:39:46 +0000
Files and hashes:         1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: +qYcRN494cOxo6BoO4ObNW6KWgSD9SBaRafj/5xz19k=)
                          2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 0OdTWHoxd21Qjwnz0s44P4D4gReHVyaUQbCaa6G9U74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
                          rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13706 (0x358a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
        Validity
            Not Before: Aug 18 14:39:46 2026 GMT
            Not After : Aug 25 14:39:46 2026 GMT
        Subject: CN=6a846eb3-2243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:90:48:2f:51:2f:28:58:a5:a5:cf:3d:c6:
                    55:69:63:24:c3:94:e7:e3:be:a9:45:bd:7b:36:46:
                    1a:8a:98:2d:82:e7:28:14:55:68:73:1b:07:01:bf:
                    bf:27:7b:6e:91:0b:bd:eb:47:3d:7e:94:90:ad:dd:
                    7b:f3:1d:6a:43:bb:53:47:b9:9c:c5:fb:28:7a:b5:
                    48:7e:71:b1:5a:f8:f8:38:a4:00:ca:ab:6e:3f:3e:
                    7c:c3:c0:48:8b:70:79:03:a6:1a:6f:14:7c:f5:29:
                    8b:ab:72:5a:8d:9c:c5:83:96:fb:3c:4f:d0:40:37:
                    11:18:cb:3d:ba:c6:ed:93:2c:7c:a9:e6:01:68:e1:
                    82:21:22:fc:c5:ce:9e:89:f7:bc:6b:88:29:4f:f0:
                    de:ed:fb:ee:ad:75:3c:6e:20:8d:da:90:fc:a6:44:
                    61:ed:d6:36:97:91:67:52:24:00:09:6c:ca:ff:0b:
                    83:03:8d:23:70:1e:6b:c4:2b:a8:06:31:a9:31:2e:
                    fb:c7:ee:c8:66:37:e1:a1:00:b4:a5:eb:5b:1c:1a:
                    61:e3:87:0a:bd:f3:35:34:7d:10:ee:40:b0:ad:18:
                    d4:5b:80:f4:a1:2a:53:c7:35:43:cf:d6:a1:e7:a7:
                    65:f8:02:52:90:16:e5:83:a4:f4:ad:cd:f6:86:f7:
                    c6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:49:B7:50:57:78:F0:B2:19:9B:36:06:31:57:F5:3F:8C:B0:52:C8
            X509v3 Authority Key Identifier:
                keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ba:d7:e1:04:89:d2:5c:e6:43:f7:a9:d9:ad:af:ab:3a:59:
         75:fe:b2:b9:b9:16:7d:34:6f:54:a9:ba:38:3a:ca:34:de:89:
         96:0f:67:b3:a7:42:b4:8f:ec:f0:a7:31:f7:36:0b:ea:36:93:
         0c:26:5b:f9:30:ce:4c:6f:14:38:de:ac:1d:2f:a5:d0:06:31:
         31:c1:e5:34:7d:91:7b:66:12:8f:fd:09:aa:9f:59:6b:fd:f6:
         30:1a:aa:bd:27:b2:2f:95:41:d0:52:72:26:a9:23:c5:92:7b:
         75:e7:80:50:04:5c:e7:18:6c:5e:83:20:07:7b:a1:92:4e:77:
         43:bc:97:6e:c0:26:17:1b:c0:2a:20:40:ef:65:95:72:f8:18:
         8b:71:41:8d:d4:ec:49:bf:34:da:de:12:aa:ad:b2:4d:9b:c1:
         5b:99:c0:b8:2e:3c:6b:2b:7d:48:2a:ca:14:91:a9:6f:18:eb:
         d2:40:90:28:4e:52:81:3f:5f:e5:53:15:b8:7a:aa:18:c4:0b:
         b9:c4:10:f7:74:89:0c:f3:00:66:f0:75:3e:a8:db:a3:3d:b5:
         e2:5d:6f:5a:f5:e3:a8:da:6c:48:75:28:1c:d5:1b:1e:d3:6c:
         a5:1b:71:7e:84:31:12:1f:77:52:ed:02:71:c6:90:d5:f0:75:
         8b:be:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:26 2026 by rpki-client