Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
File:                     QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json)
Hash identifier:          mQ2UpOtBGMxK6D/+j6aR3M/v5JInGehqFetwhUQPy9E=
Subject key identifier:   6E:F7:CA:F8:B1:F6:0D:CE:9F:95:DC:7D:55:9B:C0:A8:EB:48:A3:9A
Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
Certificate issuer:       /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
Manifest number:          0136
Signing time:             Fri 17 Jul 2026 03:33:19 +0000
Manifest this update:     Fri 17 Jul 2026 03:33:19 +0000
Manifest next update:     Fri 24 Jul 2026 03:33:19 +0000
Files and hashes:         1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: 9+s8IvK6J2FSNeJWuDHytwvhe0qQernPZX1d9Cw0S7I=)
                          2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: nm2UCTkclazTr/7WzMfdVFXL3WRseCw/Hw2jR9nACPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
                          rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
        Validity
            Not Before: Jul 17 03:33:19 2026 GMT
            Not After : Jul 24 03:33:19 2026 GMT
        Subject: CN=6a59a27f-d688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:5b:9e:9c:f6:fb:17:99:27:ac:eb:e1:d8:
                    d0:3a:98:9d:be:a9:3b:b6:a9:92:b7:9c:6d:f0:e9:
                    ee:24:b2:9e:1c:57:c9:57:90:41:bc:70:35:8c:d4:
                    25:8f:f4:fa:e6:f4:9f:03:59:28:a0:77:e7:00:7f:
                    62:f3:ca:0d:fa:c5:52:c1:a5:2f:7c:55:37:0f:71:
                    b4:ef:8c:c3:d2:15:33:86:a7:cb:db:00:78:0a:21:
                    f0:49:5c:35:f9:0a:8c:bc:a7:5d:87:d2:65:29:ea:
                    cb:5c:82:ea:b9:c0:6c:3d:0f:97:fe:26:6c:91:93:
                    56:4f:03:55:cb:57:1a:c5:2d:e8:9a:4a:f3:20:1a:
                    2d:2a:d7:43:3c:40:b5:87:9f:c6:38:02:6e:b5:02:
                    cc:71:c6:8b:fb:d5:47:a3:44:ab:92:b1:7e:be:ba:
                    97:78:ea:22:02:d6:32:7e:21:8a:a2:f8:ed:b8:47:
                    b7:15:0e:88:10:8e:b0:e3:94:2f:d6:37:a5:ac:52:
                    bd:4e:be:4f:ad:7d:77:fd:1d:76:e6:4a:d5:d3:b9:
                    9a:b6:76:a1:38:da:18:8a:3d:f5:76:f7:6e:3d:78:
                    e4:0e:67:cc:de:84:b6:a6:de:95:f5:bb:46:92:ed:
                    bd:9d:5c:8e:19:43:2a:02:0f:c5:c3:30:5b:dd:f7:
                    f2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F7:CA:F8:B1:F6:0D:CE:9F:95:DC:7D:55:9B:C0:A8:EB:48:A3:9A
            X509v3 Authority Key Identifier:
                keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0f:f7:6f:fe:a3:fb:2a:50:57:d0:fb:b1:47:0a:bd:40:bf:
         69:7c:4e:00:6f:ef:8d:3b:95:fe:9d:77:0d:a7:f2:fa:c3:8c:
         92:d7:74:9d:9c:cd:cb:0f:42:e0:50:7f:3e:4b:df:e7:74:c5:
         3a:c4:a1:b7:7a:0c:81:c4:a2:f7:07:eb:23:70:c7:b7:43:d0:
         93:a8:de:a4:c0:45:05:6e:cc:9a:83:ed:5f:d9:23:5f:29:92:
         1e:2f:75:c2:04:07:44:af:e4:b9:63:ac:4f:50:a2:41:5f:f4:
         f9:9b:bc:9d:34:61:7f:af:c8:ea:4f:4c:9b:af:f8:bb:7a:06:
         a1:ea:41:2c:4e:d5:80:e0:22:12:99:10:21:73:32:ed:d1:06:
         e6:ad:ea:2f:79:55:83:46:55:e6:0b:2e:05:41:83:03:98:37:
         31:62:fa:65:fd:4d:d3:bf:f6:3a:90:39:bc:e1:c6:ab:35:82:
         11:97:e1:c7:76:32:e1:0e:21:e0:25:90:a4:b1:c5:0b:00:80:
         4b:0e:a0:b5:22:ff:2f:f5:56:ab:5c:f5:05:f5:6f:dd:37:39:
         5e:6f:dd:e3:e8:88:e0:14:f4:2e:8b:17:88:28:d2:51:26:a8:
         bb:57:fb:e1:9d:72:09:33:7b:bb:e0:18:ca:36:2d:2b:a5:fa:
         b6:1c:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:48 2026 by rpki-client