Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
File:                     QVEOswnqHt6pCF-PaC289YblBfg.mft (raw, json)
Hash identifier:          BXZezfWLc/s0X9+ybB6xmhXaHlNqEqpPacUHP+R10S0=
Subject key identifier:   34:57:CB:2D:76:3C:A9:7F:23:23:E8:8F:D8:EF:46:7E:C6:90:59:5C
Authority key identifier: 41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8
Certificate issuer:       /CN=A914EBB2/serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
Manifest number:          48
Signing time:             Thu 03 Sep 2026 04:24:16 +0000
Manifest this update:     Thu 03 Sep 2026 04:24:16 +0000
Manifest next update:     Thu 10 Sep 2026 04:24:16 +0000
Files and hashes:         1: QVEOswnqHt6pCF-PaC289YblBfg.crl (hash: nNsMxnrTbxi7PJ2mduxSifvJY+IE6obZkXAAFmdr1TE=)
                          2: 04A267BC3A1C11F18A86C54FCE833773.roa (hash: 23knBDl73gfXNd3iGv8o2CcfU2NSZeIUWhdKE2kDL2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
        Validity
            Not Before: Sep  3 04:24:16 2026 GMT
            Not After : Sep 10 04:24:16 2026 GMT
        Subject: CN=6a98f670-3e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:6d:d0:32:22:73:2a:f0:d1:07:55:e8:b6:
                    d2:ca:91:81:4b:49:c4:5e:2a:a6:8a:19:dd:d4:7b:
                    dd:4d:16:06:40:fa:35:84:d4:9f:d9:04:cb:9e:51:
                    2d:e9:eb:b5:5b:ba:d5:ac:95:86:c6:33:ca:9a:a6:
                    2e:79:41:78:47:87:4d:c4:42:85:0c:5f:58:41:57:
                    e5:1a:2a:85:ae:24:f7:5b:ef:3a:f7:fc:45:ba:00:
                    03:74:54:9c:28:6a:24:f9:8b:e5:96:1f:b7:0b:d1:
                    93:9b:b4:9f:c9:4c:06:86:af:fb:2f:14:74:9f:9f:
                    7e:2f:b5:66:51:ff:20:7a:ec:b4:4f:3c:d2:bf:62:
                    e9:8a:be:91:48:e9:fd:f1:bd:f0:97:31:be:d3:73:
                    02:b0:8d:43:38:e8:de:21:4a:58:5d:c2:b8:5e:fd:
                    43:62:32:d9:45:be:58:58:7c:39:0a:68:e0:2f:f7:
                    3a:07:55:bb:9d:87:f8:80:8d:cf:8b:5c:5f:be:9a:
                    31:fc:b4:72:c6:e0:cf:18:b2:04:29:97:77:e7:0a:
                    4e:a6:d4:84:5b:11:20:85:02:ea:b5:17:73:53:42:
                    fc:ec:31:08:a8:00:b2:fa:c9:ae:06:c3:f6:64:20:
                    9a:c6:df:2a:6c:05:fa:5d:a6:d9:a7:8a:d9:f9:d3:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:57:CB:2D:76:3C:A9:7F:23:23:E8:8F:D8:EF:46:7E:C6:90:59:5C
            X509v3 Authority Key Identifier:
                keyid:41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:df:7d:1e:b7:65:97:90:3f:25:8f:3d:9b:80:d5:5d:63:a7:
         31:5c:72:10:54:ee:ca:5e:a9:8d:13:df:67:0b:a9:8c:d0:4a:
         8c:0b:a0:b5:30:31:6d:4a:21:88:90:0e:6a:cc:09:9a:14:f2:
         8f:41:4b:a3:83:88:0e:47:27:55:82:ce:2b:c1:15:32:67:73:
         7b:70:dc:d0:56:1e:0a:e2:da:ea:32:3b:ad:76:58:36:11:c1:
         c3:d6:78:4b:c5:3f:c9:af:93:d3:d7:67:4e:e5:1b:fd:db:28:
         e8:e6:65:7b:16:9a:4c:73:c6:3f:ae:26:bd:46:0e:49:83:15:
         7a:e1:5f:78:de:34:cb:e7:d7:0b:54:0c:27:2b:7d:51:ce:0e:
         39:3c:e7:b5:a8:e6:08:34:b4:12:fa:cd:50:8d:77:37:c8:dc:
         a2:b4:83:d4:d5:72:0d:e9:93:c0:2c:e8:b5:54:e3:cb:09:22:
         2f:5b:a1:b8:65:05:15:36:52:15:54:2f:d9:0b:0b:7e:01:10:
         27:4c:32:fa:82:7a:35:4e:24:8f:19:b0:a0:bc:54:cc:8b:a8:
         64:f6:15:8f:67:65:eb:84:fa:07:a6:a3:be:9d:e2:2e:e8:c4:
         fa:01:cb:db:11:15:50:38:f7:69:9b:10:e9:0b:b8:a9:af:dc:
         93:ec:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:22:07 2026 by rpki-client