Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File:                     QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier:          CiQ3WAf8WZOqNEEiVmjxqSYJfE5lZcBZTMqYA8fcVgI=
Subject key identifier:   F4:B3:AC:A6:D4:F1:9B:58:8E:D4:FA:7E:D3:05:20:AF:5E:66:2A:7F
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer:       /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number:          01A5
Signing time:             Sun 05 Jul 2026 04:57:48 +0000
Manifest this update:     Sun 05 Jul 2026 04:57:48 +0000
Manifest next update:     Sun 12 Jul 2026 04:57:48 +0000
Files and hashes:         1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: oOvwJ5ElfRC82CSkkuMJBu2tolEkOT1zZYkTistOd20=)
                          2: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: Ps4zTjFyLHJz+OVkfNbIpcjmNwEHH47lDT8mzreZ++U=)
                          3: B1F23610923B11F084052A57C4F9AE02.roa (hash: 6wBIunqzVP5IVwrNYuKOIIoGdjbUyMvHMZGflDhF2Wc=)
                          4: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: 6g4xFT+5TBoOWRdnTjTJYIhatI0v8zNL/4mR8KhkdP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
                          rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 04:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
        Validity
            Not Before: Jul  5 04:57:48 2026 GMT
            Not After : Jul 12 04:57:48 2026 GMT
        Subject: CN=6a49e44c-e39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a7:24:4e:30:9a:42:0a:6b:11:0c:9d:fe:26:
                    d4:5a:72:ba:42:6e:8d:a6:08:78:ab:4c:e0:9e:b3:
                    1a:2d:2e:8b:b3:3d:9c:f9:4a:c7:90:13:8f:26:15:
                    58:d7:97:a9:52:f7:ae:2f:b6:6a:9e:37:89:d0:87:
                    0f:b9:dc:69:e9:bb:22:5a:6d:81:43:56:bc:fb:39:
                    bb:42:14:3f:18:3a:2c:5e:42:56:40:78:45:cf:59:
                    e9:03:cb:91:e7:3d:03:db:f7:51:55:5f:83:76:74:
                    72:16:32:1b:91:77:e3:7d:2a:96:7f:0d:a1:a0:7f:
                    22:35:c2:ee:7e:19:ba:d0:76:81:16:b4:36:1b:fc:
                    37:f0:00:b7:ba:93:71:4b:9a:42:51:86:3c:2d:55:
                    a6:42:1e:99:62:57:d0:e5:4a:06:58:e6:65:ab:b8:
                    e1:b1:65:54:26:0b:9e:29:47:a9:40:80:96:e9:22:
                    f4:b5:4e:58:49:37:ca:85:21:11:9f:b9:ee:75:d6:
                    c9:65:fc:b8:0c:d5:95:97:d8:7a:f6:db:a2:0c:1f:
                    93:18:08:13:06:8a:a3:67:77:16:72:7f:3e:24:1d:
                    45:4d:ca:d8:03:76:ec:a6:37:b0:f9:0f:24:b5:b2:
                    a9:0c:bc:40:8e:b1:8f:e0:22:a5:8d:82:a3:2b:62:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B3:AC:A6:D4:F1:9B:58:8E:D4:FA:7E:D3:05:20:AF:5E:66:2A:7F
            X509v3 Authority Key Identifier:
                keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5c:88:47:82:45:0a:b5:f7:df:51:85:a9:f7:a1:04:8a:08:
         11:38:bc:c7:93:99:b8:c7:ef:78:93:b8:60:e0:89:a7:20:1e:
         7a:43:e1:08:1a:65:6b:85:f5:e7:4c:bc:20:02:e0:bc:05:98:
         39:91:60:e5:8a:56:14:29:d5:b6:ce:d7:0d:3d:5d:49:2d:c0:
         23:f4:1a:e2:40:e3:ec:5d:2e:08:04:d7:68:ab:94:0b:ed:18:
         c6:7e:69:e6:c0:dd:59:0e:8c:52:d6:0b:69:96:36:7e:54:87:
         17:bf:13:38:a4:9d:22:3e:b5:fc:03:e5:1d:67:62:ec:dd:37:
         ac:a7:5e:fe:a3:6f:c3:60:c9:3e:7d:a4:5b:9d:9b:19:60:fb:
         42:3a:b0:b9:c7:17:2d:d0:a7:93:84:86:1e:3a:78:c6:e2:50:
         c8:f7:47:1c:38:54:fc:63:69:a3:80:e0:25:81:cc:f7:9d:57:
         a4:f2:c1:f9:52:11:ae:60:55:c1:94:5b:12:56:69:17:50:87:
         2f:66:9a:10:89:66:58:14:aa:04:5b:b4:d7:f4:67:9a:aa:b3:
         73:f1:e5:b0:f8:4c:dd:e8:3e:5e:42:39:b5:88:58:fe:66:7e:
         4c:52:aa:9d:ca:17:d3:26:14:40:95:01:c5:46:33:63:28:92:
         95:68:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:18:39 2026 by rpki-client