Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File:                     qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier:          hNd//737Y/oQjKvpnIpDRBI5HqNqN2AYsHcWoMjiUu4=
Subject key identifier:   75:90:5D:5A:90:CB:9C:D6:E7:3F:EA:24:33:B3:6E:03:09:3E:8F:EB
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       01C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number:          01A8
Signing time:             Fri 17 Jul 2026 05:20:48 +0000
Manifest this update:     Fri 17 Jul 2026 05:20:48 +0000
Manifest next update:     Fri 24 Jul 2026 05:20:48 +0000
Files and hashes:         1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: 2pmvpriqKrz0OTUUc71bA93v+r1uCaee0ciVmFdl7tQ=)
                          2: 77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (hash: S0GbV2uCmeoviSkKmr830JmB3p8jmN3VMhk4MtRUTHg=)
                          3: F72A12FA5C1311F1BF7F3AF193833773.roa (hash: mRNtO5ipsZo1qT2QZLktkRT25NV0Ov7UED9rbrgZkrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: Jul 17 05:20:48 2026 GMT
            Not After : Jul 24 05:20:48 2026 GMT
        Subject: CN=6a59bbb0-58d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:e1:74:e8:6a:6b:e8:3d:c3:c8:7b:61:ca:
                    1f:c3:21:84:1e:db:a9:3b:ee:a4:2d:66:2e:01:aa:
                    e8:8d:01:c7:ac:a5:2d:ed:e7:ea:4e:c1:48:a9:54:
                    17:29:d1:a0:a5:7c:bb:d3:09:e7:98:28:02:e1:66:
                    8a:ca:2a:27:a6:13:5f:a1:a7:c7:2c:cf:f5:fc:4e:
                    fc:8b:a1:12:7b:09:81:39:ea:87:1f:97:fe:d6:fa:
                    23:7b:3a:85:31:0d:f0:91:09:ef:db:f2:ff:22:69:
                    38:18:09:a2:6b:dc:9f:ae:c5:a3:3a:b8:23:ae:93:
                    36:18:5f:1c:e7:55:8b:1c:d4:ef:ed:e3:16:f6:4c:
                    af:5b:1c:b6:1d:e0:df:7d:4a:c0:37:d8:60:f6:7f:
                    0d:15:82:67:dd:c9:7d:f6:11:68:95:28:31:51:79:
                    de:49:9b:e1:b7:df:37:72:97:1c:ed:a6:87:78:cb:
                    54:56:12:f6:8a:79:b3:6d:98:ac:24:18:9e:1b:11:
                    1d:76:10:39:07:80:2d:bf:5e:24:b5:90:e5:eb:68:
                    a1:d0:b1:87:c9:13:76:30:eb:60:a0:37:2c:a0:19:
                    3a:c8:4d:13:97:76:4a:be:45:ec:b0:e0:62:a7:40:
                    28:f5:e4:02:0f:93:f6:f2:55:1b:e7:c5:70:89:47:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:5D:5A:90:CB:9C:D6:E7:3F:EA:24:33:B3:6E:03:09:3E:8F:EB
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:01:32:5b:dd:5b:93:2e:76:29:ca:51:8c:4e:96:d6:3a:3b:
         4c:27:d2:7f:6b:63:18:3b:4b:26:8e:98:18:4a:01:5a:7e:40:
         1d:a6:6f:2d:8f:01:b0:58:90:56:53:0d:6f:03:2a:74:5c:7e:
         62:b4:6a:2f:bb:df:dc:20:64:48:15:cb:13:6b:94:0f:b7:01:
         38:83:46:4f:2a:50:72:9b:75:d4:7e:1f:60:04:c7:70:6c:5e:
         1f:d2:dd:cd:0a:4e:14:37:25:ba:74:60:92:0e:d0:a8:98:1a:
         97:ec:32:09:93:ab:5e:11:0e:7a:a0:78:15:53:32:c9:b4:28:
         9f:f3:43:85:b9:ad:a5:e5:e4:2b:a2:cb:c0:b2:02:e8:09:df:
         5e:c2:1e:4f:18:e2:9c:d3:35:35:87:d2:41:b4:cf:67:03:e3:
         1c:ff:c8:65:50:60:65:a3:4f:0a:85:1e:ad:0a:9d:fc:e6:b8:
         6c:89:5c:fc:de:67:2a:71:fd:d0:6b:22:0b:9c:50:e1:e6:54:
         aa:ac:cd:67:4f:da:13:59:8e:cd:1a:a1:6d:a8:65:16:ec:be:
         97:29:1f:76:35:07:b5:fe:bb:7d:c6:c7:f9:58:7c:6c:c2:2d:
         58:ee:e7:30:b0:50:ce:21:22:df:64:59:ea:6b:57:9a:ba:c3:
         41:43:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:37 2026 by rpki-client