Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
File:                     QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json)
Hash identifier:          fK0mnqvmDNvOay0P3GvoDlAV8REWWSkBCVYUsQpBDNk=
Subject key identifier:   B8:3D:2C:42:0D:66:1F:BC:C5:94:BA:59:2E:5E:F6:C4:48:DC:43:39
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Certificate issuer:       /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
Manifest number:          0233
Signing time:             Fri 17 Jul 2026 03:29:18 +0000
Manifest this update:     Fri 17 Jul 2026 03:29:18 +0000
Manifest next update:     Fri 24 Jul 2026 03:29:18 +0000
Files and hashes:         1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: Z2irfqvoUSmO2Hm7xqBhcKgMpUMRe2yFPJiCFZYq8Lw=)
                          2: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: FQVJmad1aRV/QbV4h3s9dvvJ6zDDRW7zBNhPPgrf9kM=)
                          3: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: jsK4zEJyPdlVY78CXSdqb2JNhQ5rN5uWqnaH2jf5FtQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
                          rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 03:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
        Validity
            Not Before: Jul 17 03:29:18 2026 GMT
            Not After : Jul 24 03:29:18 2026 GMT
        Subject: CN=6a59a18e-5f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:51:1e:b8:ea:b3:e8:b2:90:41:0f:23:c4:
                    c9:9b:2b:97:74:58:31:7c:34:58:f6:aa:cb:4c:f9:
                    ce:42:55:bf:1e:cd:15:25:14:c8:d6:e3:15:5a:a6:
                    6c:9c:16:5a:07:fe:97:57:fe:e9:05:51:9d:10:07:
                    3e:60:cb:b4:4c:36:1d:9b:00:5d:4d:c3:1f:2d:1a:
                    86:84:0a:70:cf:e9:27:ca:51:c6:c9:d3:5b:4f:ff:
                    13:42:c5:8b:1a:33:eb:24:cd:c3:45:1c:c1:68:4f:
                    4e:0f:01:90:e4:03:a4:da:35:71:d6:d8:8e:06:f7:
                    09:7d:ee:41:2c:29:24:ad:65:0a:ab:90:9b:7a:a5:
                    72:b6:1c:23:36:82:62:93:86:9a:18:6b:0f:d6:34:
                    d0:6c:8a:90:4a:1b:ac:d3:30:e9:6f:2a:05:ec:77:
                    f9:69:7e:a7:71:dc:1b:34:d4:09:de:a2:5c:f1:d6:
                    97:4a:bc:78:a7:42:be:71:12:f3:be:a4:79:bf:e0:
                    63:fe:a8:ed:1d:7f:3c:87:50:37:38:64:8c:f8:5f:
                    fc:85:10:5b:d9:0a:4d:84:cd:e3:d1:2b:31:de:db:
                    98:63:0f:b1:3a:49:fe:99:12:46:d5:8b:d8:0a:9d:
                    5d:96:5f:03:55:fc:4d:43:06:1e:5c:3d:a6:01:bb:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:2C:42:0D:66:1F:BC:C5:94:BA:59:2E:5E:F6:C4:48:DC:43:39
            X509v3 Authority Key Identifier:
                keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:67:99:dd:d4:cb:a6:5b:c7:06:de:96:b4:ee:02:2f:d0:7a:
         4b:f4:9f:28:d6:db:df:de:41:1d:ae:41:d1:20:1e:60:e9:fa:
         de:cc:a1:cc:6e:91:bb:4a:e3:d3:07:20:e6:93:de:91:39:2e:
         ec:bb:d7:8d:2f:d3:f4:7b:2c:f8:b0:76:94:09:56:2a:0f:08:
         63:34:20:3b:8a:ff:71:a2:42:29:07:c2:47:e4:39:25:3d:52:
         82:f5:36:23:04:c3:db:42:87:92:97:ef:e6:6c:d3:6e:20:fc:
         db:a1:06:54:ec:fa:11:44:57:8b:39:5c:58:fb:b0:98:91:b5:
         0f:60:e6:cc:93:97:e6:19:bb:95:64:de:98:d8:a1:c9:29:f8:
         6d:18:34:63:83:4c:a9:5c:4c:54:25:9b:31:9c:a6:92:8c:6b:
         db:a0:41:78:fd:67:1c:bd:16:7b:b8:f0:fe:9f:65:b2:ad:b6:
         38:e9:d4:73:63:fe:ed:3d:c8:45:e9:25:12:81:fc:7b:93:e5:
         11:c3:ca:89:55:9f:2c:51:c6:1c:8f:45:62:33:56:e8:11:48:
         8d:bb:a9:20:0c:8c:60:ac:9a:6f:c2:c9:06:4b:1e:b3:af:8d:
         4a:31:6a:36:f1:70:87:91:81:9e:9b:5d:f6:78:b0:5b:48:02:
         ef:3e:76:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:13:11 2026 by rpki-client