Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A0F/3DC9F756478911F19E2C1BF59A833773/QggmBzCRxqIBeWGCNl-J5mIx_w4.mft
File:                     QggmBzCRxqIBeWGCNl-J5mIx_w4.mft (raw, json)
Hash identifier:          oVdDR/ZH+2G9aCfbIVP26vHfRhe5qH6wnPHpot7rnT4=
Subject key identifier:   EB:01:87:66:60:C4:67:FC:2C:8B:5A:0E:32:4E:B7:D8:64:23:4A:B5
Authority key identifier: 42:08:26:07:30:91:C6:A2:01:79:61:82:36:5F:89:E6:62:31:FF:0E
Certificate issuer:       /CN=A9174A0F/serialNumber=420826073091C6A201796182365F89E66231FF0E
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QggmBzCRxqIBeWGCNl-J5mIx_w4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A0F/3DC9F756478911F19E2C1BF59A833773/QggmBzCRxqIBeWGCNl-J5mIx_w4.mft
Manifest number:          3A
Signing time:             Wed 19 Aug 2026 09:19:37 +0000
Manifest this update:     Wed 19 Aug 2026 09:19:37 +0000
Manifest next update:     Wed 26 Aug 2026 09:19:37 +0000
Files and hashes:         1: QggmBzCRxqIBeWGCNl-J5mIx_w4.crl (hash: SZQWC2gCrXUgE3jVId2aWtvDCv1a5Ax6Y6eXuyc0mcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A0F/3DC9F756478911F19E2C1BF59A833773/QggmBzCRxqIBeWGCNl-J5mIx_w4.crl
                          rsync://rpki.apnic.net/member_repository/A9174A0F/3DC9F756478911F19E2C1BF59A833773/QggmBzCRxqIBeWGCNl-J5mIx_w4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QggmBzCRxqIBeWGCNl-J5mIx_w4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A0F, serialNumber=420826073091C6A201796182365F89E66231FF0E
        Validity
            Not Before: Aug 19 09:19:37 2026 GMT
            Not After : Aug 26 09:19:37 2026 GMT
        Subject: CN=6a857529-1a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:f8:cb:b0:fc:c3:94:87:b5:b7:5c:e5:0e:
                    3d:ad:86:49:7f:5d:07:f9:60:50:63:16:80:b0:a9:
                    59:57:c8:ec:46:b9:83:a4:c1:f5:29:6c:32:52:f1:
                    57:8d:ea:a0:6b:75:15:3a:04:a4:5c:91:77:8e:95:
                    df:30:41:12:2f:cc:4a:bf:e1:44:9d:ad:37:c1:97:
                    a1:85:cc:82:54:58:3b:87:1a:83:79:1f:6a:14:8f:
                    f5:ba:48:3a:44:fc:0b:61:9e:36:df:b5:a8:88:d0:
                    db:e1:2a:54:d7:b5:a1:8e:b2:eb:30:ef:0d:81:9a:
                    7c:61:d8:bc:6e:51:d8:33:c6:f2:6b:b3:0c:7d:c3:
                    16:3f:62:1e:37:b4:ea:72:39:0b:19:30:2b:a5:4e:
                    57:9f:35:c9:6c:05:ea:73:76:b5:e5:32:7e:cf:57:
                    62:92:d5:1c:12:bd:d6:e1:24:72:ba:e4:99:9e:03:
                    ac:b3:93:83:92:5a:30:6d:53:00:1d:56:44:85:fe:
                    7b:58:aa:13:f4:e2:32:35:90:0b:b6:15:b8:3d:c7:
                    e9:06:bc:ea:de:22:e5:b0:e7:57:1b:14:2f:5e:a3:
                    9a:5c:6a:cb:e9:cc:10:52:e8:2e:83:b3:2b:16:42:
                    2e:87:40:9f:7d:06:20:82:b0:e4:32:03:69:67:d6:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:87:66:60:C4:67:FC:2C:8B:5A:0E:32:4E:B7:D8:64:23:4A:B5
            X509v3 Authority Key Identifier:
                keyid:42:08:26:07:30:91:C6:A2:01:79:61:82:36:5F:89:E6:62:31:FF:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A0F/3DC9F756478911F19E2C1BF59A833773/QggmBzCRxqIBeWGCNl-J5mIx_w4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QggmBzCRxqIBeWGCNl-J5mIx_w4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A0F/3DC9F756478911F19E2C1BF59A833773/QggmBzCRxqIBeWGCNl-J5mIx_w4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:8b:ff:85:25:2c:7d:b3:0e:4d:77:be:4e:e0:6a:1e:ea:
         65:f9:46:d5:44:ef:2d:4a:a1:29:11:fb:d2:10:c2:fb:fd:63:
         a0:ea:f4:6e:41:6c:5a:8b:47:e0:b0:10:89:60:a9:0d:b9:a3:
         aa:c6:c0:18:40:3f:2e:7b:fc:4a:2c:35:c3:ed:54:4e:53:02:
         20:15:f9:49:87:26:ff:50:ac:6e:dc:95:7b:fb:db:1a:fa:20:
         61:6e:49:6a:5e:d0:68:7b:ad:74:8b:ef:1f:d1:b8:a3:03:fb:
         eb:db:18:7b:55:35:d1:95:77:05:a8:dd:ec:4e:ec:c0:5b:99:
         65:91:7c:3a:1f:95:78:12:14:1b:c0:43:2d:90:52:20:ce:ed:
         cc:38:9b:47:e7:8e:84:08:6b:39:6e:27:5a:1b:7a:40:c1:a3:
         d6:90:fb:a7:10:23:e3:e9:00:97:0f:f3:d8:b1:58:b3:a0:28:
         d6:87:cd:8d:fe:dd:8b:b2:39:1f:13:ac:37:8f:9f:69:7d:0d:
         26:b3:88:f6:83:d4:ce:03:1c:ca:bb:12:74:50:83:ff:37:83:
         5f:7b:d2:a9:55:94:58:aa:41:de:bc:f1:6b:59:67:74:98:7a:
         37:46:34:37:46:48:67:09:6a:0b:7b:8e:80:3d:1b:9a:12:3f:
         29:ce:79:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:41 2026 by rpki-client