Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File:                     QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier:          PZn4wMqozGpbJ+lPV4oX0vjc7BeIky1D3yMw/MJoeyA=
Subject key identifier:   C0:FD:44:A7:0E:7E:62:7F:C7:7A:BF:D7:C6:4F:42:73:5F:43:DD:9D
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer:       /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial:       02C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number:          02C5
Signing time:             Wed 19 Aug 2026 01:45:53 +0000
Manifest this update:     Wed 19 Aug 2026 01:45:53 +0000
Manifest next update:     Wed 26 Aug 2026 01:45:53 +0000
Files and hashes:         1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: smDIEc5yYKvFNyj2VNsvIWCeCjybG9+Vpd64tyHMrmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
                          rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
        Validity
            Not Before: Aug 19 01:45:53 2026 GMT
            Not After : Aug 26 01:45:53 2026 GMT
        Subject: CN=6a850ad1-c9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:9d:28:fc:b4:7f:4e:16:74:6e:be:59:05:
                    03:9c:02:c6:87:00:17:55:79:06:1f:35:d5:6a:76:
                    8c:d6:11:1e:d9:77:33:6b:e4:a2:3f:ff:2d:52:0e:
                    0e:e4:1d:76:c7:fe:dc:a7:c7:a0:ef:95:d6:c8:0e:
                    88:50:68:9b:70:03:dd:7f:a1:24:6b:ab:f0:7c:76:
                    d5:d9:bd:87:c4:41:78:75:91:52:c0:8f:58:32:8e:
                    c0:8a:39:16:76:7c:f0:b3:5a:4e:6a:04:9d:9d:c1:
                    e7:02:cd:05:9c:a8:9a:4a:3c:57:81:f2:85:91:41:
                    73:e4:3d:68:ff:f8:02:fa:96:b3:7d:b9:3d:db:4a:
                    dd:60:fb:a4:56:49:35:d9:43:d1:bf:49:5c:7b:50:
                    0f:10:d3:46:af:4a:da:c6:e0:fd:ef:cc:bd:a3:54:
                    8c:86:e0:ef:aa:5e:2a:93:36:59:06:27:1d:66:b9:
                    3e:66:e4:8f:76:05:35:24:8d:da:f7:c8:0a:c0:c7:
                    fc:d7:16:ce:b9:4b:0b:18:81:3e:31:22:cc:a2:45:
                    4a:0d:54:ea:bd:53:e7:24:d9:e7:d9:70:0d:71:12:
                    62:75:12:df:f1:d4:7d:29:04:05:fc:f2:17:65:05:
                    00:74:e6:b8:fb:0f:a5:3a:ae:27:7a:d5:71:c7:c4:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FD:44:A7:0E:7E:62:7F:C7:7A:BF:D7:C6:4F:42:73:5F:43:DD:9D
            X509v3 Authority Key Identifier:
                keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:79:53:5f:0c:b2:7f:83:0d:26:98:56:cb:33:6d:9b:b7:7d:
         58:74:da:a9:85:57:cc:9a:6b:27:52:5d:ef:12:89:0f:c3:a8:
         a2:4f:db:5a:d4:49:03:13:07:7a:0e:7f:6f:cf:82:9c:95:95:
         db:d3:4c:ad:2b:4e:6d:a9:9b:55:d8:85:0f:b8:21:b0:c7:2e:
         64:33:78:82:9e:f9:3a:8f:53:ae:f7:af:5d:e4:eb:b7:b1:0f:
         fa:cf:f8:fb:25:01:66:76:b7:bd:7a:66:ff:0a:5a:bc:ba:8b:
         0a:00:30:8d:82:94:42:61:73:66:dc:1d:90:a9:92:74:9a:c8:
         0b:00:bd:d2:dc:30:91:68:45:c8:87:81:4b:40:53:ef:99:26:
         21:d0:fa:44:16:e6:a0:82:90:12:80:50:7e:03:8e:6c:87:3a:
         e5:31:85:fb:c3:0a:dc:3d:52:53:09:0d:1e:72:9d:a7:2d:a6:
         22:e5:23:1a:98:95:f9:56:02:08:04:c4:f6:c9:c6:42:c8:ff:
         86:76:ac:88:30:e1:e8:f7:ad:ac:32:cb:1e:6d:29:12:67:eb:
         50:66:84:57:b5:aa:5d:c9:88:7e:d6:6a:b9:dc:d8:c7:38:c8:
         9b:e6:15:5a:ea:7b:fb:43:07:00:36:32:f0:2b:d5:26:aa:82:
         eb:46:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:42 2026 by rpki-client