Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft
File:                     qLttedj8Wklcs7U8aZYmG3aVywU.mft (raw, json)
Hash identifier:          EwBng5a69I+1vJjt64E1JvIf8uf6zLtZ8xJTfM6kkvA=
Subject key identifier:   C2:44:39:1A:FE:66:64:DC:2C:7E:6B:51:46:0B:CC:23:3A:D4:BB:0E
Authority key identifier: A8:BB:6D:79:D8:FC:5A:49:5C:B3:B5:3C:69:96:26:1B:76:95:CB:05
Certificate issuer:       /CN=A918C553/serialNumber=A8BB6D79D8FC5A495CB3B53C6996261B7695CB05
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qLttedj8Wklcs7U8aZYmG3aVywU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft
Manifest number:          1D
Signing time:             Sun 05 Jul 2026 09:40:31 +0000
Manifest this update:     Sun 05 Jul 2026 09:40:30 +0000
Manifest next update:     Sun 12 Jul 2026 09:40:30 +0000
Files and hashes:         1: qLttedj8Wklcs7U8aZYmG3aVywU.crl (hash: W/1HWvowhzY1AdABpGAHh5nobNqTnAe1rESMLse5P/U=)
                          2: C0D3BF824D5C11F18D7C59B78F833773.roa (hash: hI4EfUAJ4cvG9UsDM9/RzADC4zdxChx3k/UyKORIo9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.crl
                          rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qLttedj8Wklcs7U8aZYmG3aVywU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 09:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C553, serialNumber=A8BB6D79D8FC5A495CB3B53C6996261B7695CB05
        Validity
            Not Before: Jul  5 09:40:30 2026 GMT
            Not After : Jul 12 09:40:30 2026 GMT
        Subject: CN=6a4a268f-53f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:fe:94:18:0f:89:0f:fc:ff:83:6f:8b:51:
                    f0:06:0d:80:ef:a8:0d:d4:72:6f:f7:4c:93:6c:e9:
                    05:62:5e:af:fb:3a:9d:0e:7a:3e:bf:69:c0:b4:e9:
                    32:30:f8:a9:bf:7e:28:26:34:51:8b:7e:05:77:9c:
                    a4:85:cb:1a:a8:30:4f:5d:cf:4a:02:29:f4:83:99:
                    69:1a:a3:7e:66:e7:34:95:77:aa:fe:e9:ea:b2:23:
                    02:1d:1b:e3:44:03:fc:2c:6f:fb:25:3e:7c:48:c0:
                    85:0a:91:62:f7:18:01:6f:14:03:99:64:d3:d0:d4:
                    40:7d:e1:bf:53:a2:3a:49:e8:99:a9:87:be:83:7e:
                    06:37:57:21:7d:35:68:85:f1:f8:87:60:2b:90:25:
                    ea:a2:0a:63:6c:b7:e6:e4:68:98:d6:1f:d5:5a:88:
                    30:a7:0c:e1:83:c1:70:0f:83:c4:cb:62:37:8e:c7:
                    43:87:35:e2:29:c8:ff:98:d8:07:c3:6e:82:4f:72:
                    a7:ca:96:c2:96:78:4b:75:06:26:74:c9:96:d8:a9:
                    31:a3:49:1b:13:c0:e2:48:31:91:fa:26:b1:b6:c2:
                    6c:81:60:f0:40:43:d7:7b:14:63:3f:98:14:72:19:
                    8b:cd:09:ec:ea:0b:e2:98:d9:4f:77:37:af:2f:68:
                    94:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:44:39:1A:FE:66:64:DC:2C:7E:6B:51:46:0B:CC:23:3A:D4:BB:0E
            X509v3 Authority Key Identifier:
                keyid:A8:BB:6D:79:D8:FC:5A:49:5C:B3:B5:3C:69:96:26:1B:76:95:CB:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qLttedj8Wklcs7U8aZYmG3aVywU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c9:15:2d:c2:57:ca:aa:79:1e:0d:57:a5:d3:0f:15:94:38:
         5f:50:b1:a8:e2:84:8d:eb:18:8c:f5:3a:e5:1e:79:d0:c7:2c:
         65:89:95:72:6e:3e:72:a0:c8:57:bf:61:33:63:41:3a:aa:f3:
         ca:c9:84:5f:80:59:3d:8b:71:1e:91:b7:c5:4d:f5:30:fd:0d:
         f4:15:dc:b6:ad:56:ab:56:e8:77:cf:62:ff:66:e4:57:94:41:
         73:0d:9d:00:f5:76:4e:bc:f8:a8:78:8b:3d:b7:72:6c:41:5b:
         95:1a:cd:80:52:45:a7:5d:95:de:78:3c:7b:17:d1:d4:71:d5:
         f6:eb:10:47:cd:3d:35:e4:06:cb:dc:91:8d:6d:89:35:5e:fc:
         f9:81:59:e5:cb:ee:00:4a:d5:10:0a:28:f2:f9:d0:17:4c:20:
         ad:8d:d9:00:77:85:bc:71:f5:a3:ef:e4:4d:d5:91:89:24:54:
         79:04:25:57:32:8e:dc:4e:d1:44:f5:d2:ad:54:a6:ab:87:d4:
         a0:7a:5e:74:d0:23:dd:95:8a:dc:29:f7:46:71:fc:6d:a7:c7:
         e3:b3:1c:03:ff:c4:ee:6a:a9:8c:4a:47:fc:d4:2d:f7:50:9e:
         72:cc:d7:7f:c9:41:b2:9f:6c:ff:10:26:d2:24:f6:25:50:5c:
         69:56:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:20:11 2026 by rpki-client