Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
File:                     Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json)
Hash identifier:          wHtbjqQT+zK5fuBQz33o8j6XjxNwrmaRcMUKGTKJybA=
Subject key identifier:   E8:C8:E8:6E:D6:B2:BF:8E:43:BC:C5:A5:39:BE:CD:F2:C7:98:AB:02
Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
Certificate issuer:       /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
Manifest number:          67
Signing time:             Fri 17 Jul 2026 09:16:33 +0000
Manifest this update:     Fri 17 Jul 2026 09:16:33 +0000
Manifest next update:     Fri 24 Jul 2026 09:16:33 +0000
Files and hashes:         1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: /LwmXjKFvF3q8WCFjCV0ESWBiAtYuB0Qw9RehojeYE0=)
                          2: BBB1B36C387911F18844C9F1B7833773.roa (hash: sySn8z7CtimAbBeWbFVeZLj6Bb/UV3HDRIyOYd+GVX0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
                          rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
        Validity
            Not Before: Jul 17 09:16:33 2026 GMT
            Not After : Jul 24 09:16:33 2026 GMT
        Subject: CN=6a59f2f1-5b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:cb:36:30:11:e3:df:9f:ab:63:23:85:e9:
                    95:ca:a7:fb:e7:0c:25:c5:b2:fc:ab:1c:9f:86:76:
                    d8:70:fd:78:2a:79:12:90:19:a9:a4:5b:99:97:0a:
                    d6:4e:f4:7b:0f:d6:52:c8:48:d1:98:4b:b8:05:39:
                    0f:2d:5f:12:19:70:1d:b8:8e:9b:be:0d:3e:0a:18:
                    89:66:41:46:08:d1:b4:f4:8b:ec:d1:2d:e8:bb:aa:
                    18:0a:95:2e:af:9d:6b:3b:8e:77:ef:c7:9a:f5:8f:
                    a6:66:e0:25:1c:7a:db:60:e6:a1:11:2a:aa:fb:83:
                    ab:5e:53:bf:be:d7:99:fe:db:dc:5c:02:01:b7:07:
                    92:9e:3f:63:9e:49:0e:07:9d:31:0a:48:99:59:45:
                    30:94:a2:48:ac:5e:55:ac:18:bd:2c:a2:08:0e:01:
                    f7:68:99:b9:56:fc:1a:25:b3:3e:42:0f:94:09:2e:
                    27:14:21:ed:a1:79:16:83:df:a2:d9:8a:80:69:59:
                    4b:d9:b2:5d:c6:32:5a:93:15:07:e8:f6:51:94:90:
                    be:9d:f8:c0:73:44:90:a3:48:a2:0b:48:5c:5e:2b:
                    bf:a0:28:e9:9d:bf:7a:af:c2:2b:d2:8c:54:9f:72:
                    a7:51:77:ad:4b:2c:e1:17:0b:03:a9:ed:03:43:99:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C8:E8:6E:D6:B2:BF:8E:43:BC:C5:A5:39:BE:CD:F2:C7:98:AB:02
            X509v3 Authority Key Identifier:
                keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f2:ff:64:9f:71:d5:bd:84:5f:a2:85:e8:08:32:1d:39:5a:
         12:b7:06:e0:4c:1d:f7:08:21:80:17:8a:74:0f:e8:7c:7a:f5:
         15:a9:b8:13:42:33:16:a8:0f:c5:a2:a1:ff:23:e0:cc:26:b8:
         6b:73:1c:f7:46:de:e7:66:5e:cc:5a:c7:5a:a3:e5:27:2f:f9:
         19:70:09:3d:fe:b1:2f:7f:f5:13:39:14:cb:22:73:de:3f:b7:
         c7:80:25:25:78:79:6d:49:ba:b9:d8:70:a4:d9:d2:2e:55:df:
         a2:c0:7e:f2:2a:14:0d:c8:91:9f:4c:c7:01:2a:88:a8:be:cb:
         f0:b6:9b:56:42:21:73:8a:09:87:0f:68:4e:1b:aa:86:3c:a8:
         f8:2e:fc:ae:4b:d2:83:0d:af:83:95:fd:89:9b:27:8d:3c:40:
         eb:59:6b:4a:02:ef:97:f1:36:6d:bc:3d:65:a0:25:b4:3f:e2:
         98:ac:2d:15:a1:87:e7:7c:36:17:fc:1f:c6:25:5e:18:0a:c6:
         16:5b:e6:75:3f:38:5f:4e:37:54:6c:1b:38:e3:30:c2:46:70:
         3f:bb:76:31:89:ca:23:fd:8e:01:f9:6a:ca:10:f3:9d:c6:a1:
         81:c4:a2:80:1d:2f:3a:15:36:19:33:a5:83:17:45:72:55:bc:
         d4:c9:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:42 2026 by rpki-client