Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
File:                     QVEOswnqHt6pCF-PaC289YblBfg.mft (raw, json)
Hash identifier:          L+Lx+haAAyy1N3pQPV/7XIwi8xyJH8yDXHbvPOyQot0=
Subject key identifier:   9F:C7:B1:8F:1B:CA:E1:FA:63:B2:85:CB:CA:05:9A:26:68:F2:B6:41
Authority key identifier: 41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8
Certificate issuer:       /CN=A914EBB2/serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
Manifest number:          31
Signing time:             Tue 21 Jul 2026 05:56:06 +0000
Manifest this update:     Tue 21 Jul 2026 05:56:06 +0000
Manifest next update:     Tue 28 Jul 2026 05:56:06 +0000
Files and hashes:         1: QVEOswnqHt6pCF-PaC289YblBfg.crl (hash: AZktq9SjiB3BUV+8LqDgejyOIrlx9W6FL4CpK3D7kLA=)
                          2: 04A267BC3A1C11F18A86C54FCE833773.roa (hash: 23knBDl73gfXNd3iGv8o2CcfU2NSZeIUWhdKE2kDL2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
        Validity
            Not Before: Jul 21 05:56:06 2026 GMT
            Not After : Jul 28 05:56:06 2026 GMT
        Subject: CN=6a5f09f6-5387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:01:18:2e:13:ce:09:41:1d:ed:36:53:ce:
                    81:3e:fb:03:1a:f8:65:01:8b:2f:40:ac:4a:70:a4:
                    07:cf:86:cf:00:a3:bb:f1:52:92:03:82:90:78:83:
                    3f:e4:28:34:bb:51:8f:ca:2c:18:fd:9a:1e:d9:3f:
                    a2:9a:8c:99:8a:6e:23:40:e9:e1:fd:12:36:b0:63:
                    76:83:2f:cb:4e:ee:51:52:54:1a:2a:c2:20:b3:9e:
                    b3:3e:f6:e3:68:81:e7:98:6a:68:6a:26:37:7f:a9:
                    b8:fa:8a:b7:61:79:69:38:19:49:e4:1b:4d:f6:de:
                    cf:23:23:29:2f:8e:cf:ab:20:a8:57:1c:05:07:4a:
                    d2:cf:6d:75:87:c9:6d:a3:a8:1f:55:0f:91:f0:18:
                    9d:b9:8d:71:a9:cc:bf:96:aa:4a:19:84:f9:26:68:
                    ca:0b:a6:c2:c2:39:4d:61:21:72:ef:f4:4c:09:c9:
                    ff:34:8b:ec:5f:c2:37:cc:65:62:3f:57:12:30:2a:
                    9b:e4:7f:c3:0a:cd:d1:24:97:e7:bb:70:62:50:c5:
                    3a:af:12:a4:10:9c:3a:a8:c4:cd:df:c3:33:70:4e:
                    4a:f6:d3:32:47:75:61:e7:80:b7:52:bd:0e:47:ac:
                    25:70:c8:c2:55:12:85:39:be:a7:b3:7f:8f:84:86:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C7:B1:8F:1B:CA:E1:FA:63:B2:85:CB:CA:05:9A:26:68:F2:B6:41
            X509v3 Authority Key Identifier:
                keyid:41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6e:62:2b:ea:66:3c:4b:97:b1:6a:cb:36:00:b3:69:bb:d1:
         87:0b:35:f9:f5:0c:d1:af:08:05:45:9a:5d:13:9e:52:21:c5:
         e2:60:d2:a7:7d:57:73:0f:65:dd:7e:06:3f:47:26:ff:f2:3c:
         01:c5:c7:aa:b8:5d:cf:00:0d:82:7b:aa:98:e2:0c:1e:cd:03:
         6b:f2:02:51:f7:99:ed:9d:28:42:e0:ae:be:95:3f:0c:9b:92:
         89:a7:ea:d6:96:56:ed:df:b1:0b:fb:63:1c:23:fd:65:ca:e2:
         65:07:25:a1:30:9f:92:fb:f5:ad:1a:4d:28:c9:80:54:2d:ec:
         77:ce:5d:56:04:94:0d:67:7c:91:8c:32:3f:a3:34:9b:ec:f4:
         3b:b2:f8:6e:16:e5:56:58:60:4b:61:78:7b:d5:46:17:e2:3a:
         c4:ba:03:29:fc:18:6a:67:f9:25:54:02:ca:fd:51:58:38:b4:
         b9:9f:a2:89:7d:2d:c5:c7:07:95:44:a6:4e:da:67:3a:d1:e0:
         a5:1b:02:d9:b3:4f:df:51:e5:0f:1e:37:80:a5:b9:5d:5c:d3:
         54:3a:4d:c9:8e:48:7b:a9:36:c1:c6:ee:b9:00:78:87:d3:64:
         83:8b:d1:4d:bb:0c:a1:ff:1f:cf:32:2f:bf:cc:b7:bf:74:23:
         3d:bc:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:09 2026 by rpki-client