Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
File:                     qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json)
Hash identifier:          QPa+Qpxh4p9jZ9MV3ynFuy9CgRdqUXk26WJA67etBbk=
Subject key identifier:   C3:80:FA:8E:2C:48:F9:40:35:0B:90:90:C7:EE:0E:73:77:16:3B:30
Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B
Certificate issuer:       /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
Manifest number:          0135
Signing time:             Fri 17 Jul 2026 06:39:56 +0000
Manifest this update:     Fri 17 Jul 2026 06:39:55 +0000
Manifest next update:     Fri 24 Jul 2026 06:39:55 +0000
Files and hashes:         1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: qfBYIlK9Ct0tOa8672GTfCzqHl74LP4dt5auuY9z0Gw=)
                          2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: hAmO+Dq9vGZAILDadtbesaeJmrxEB8UrXmpWc1/KCyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl
                          rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 06:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B
        Validity
            Not Before: Jul 17 06:39:55 2026 GMT
            Not After : Jul 24 06:39:55 2026 GMT
        Subject: CN=6a59ce3c-961a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:7d:bd:6b:26:fe:23:80:ba:15:8c:4f:28:
                    89:ca:6e:d4:7e:a4:8b:63:04:1a:8a:2d:cc:b8:ec:
                    66:12:80:a9:63:39:1f:71:6b:b1:75:60:92:30:68:
                    42:7b:bd:5a:38:79:81:cf:c8:2e:b4:cd:75:e0:c8:
                    3d:31:1f:7d:0d:e2:b7:46:2b:ae:81:83:d7:a0:f2:
                    34:e9:ad:0c:01:66:b7:09:30:aa:cd:01:6c:18:ed:
                    b8:ff:4b:c7:45:b1:8a:1d:44:3b:3e:0d:cd:a1:75:
                    f0:91:89:39:89:f1:22:b0:34:2f:13:fc:61:f1:57:
                    9c:81:37:31:2a:13:da:8b:94:8e:68:cc:12:7d:f6:
                    c8:02:5a:53:ad:a4:6d:30:5d:ca:1c:79:27:38:e6:
                    7f:a6:45:53:7c:f6:79:37:99:7b:15:7e:9f:2b:bd:
                    ab:9d:78:96:95:da:4a:4a:52:50:9a:c6:2b:da:3b:
                    e0:e0:03:4b:11:4f:c6:2c:7b:f1:29:7c:c8:36:87:
                    9a:fb:53:6d:28:d6:f5:04:5d:19:93:94:33:bf:dd:
                    2b:9d:1a:40:ef:d9:84:15:40:f4:c1:0f:6b:90:8b:
                    22:8c:06:06:83:d8:61:cf:7a:dc:10:aa:8f:0e:dc:
                    6b:e4:6d:46:07:0f:91:30:62:bf:52:3b:1b:3c:4e:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:80:FA:8E:2C:48:F9:40:35:0B:90:90:C7:EE:0E:73:77:16:3B:30
            X509v3 Authority Key Identifier:
                keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:dd:25:75:de:be:12:27:01:76:0c:de:de:79:06:ef:ab:3c:
         94:53:95:7e:f1:09:aa:f8:c3:e1:19:ff:01:70:7a:e2:a8:4d:
         4c:89:1f:a5:d6:66:a6:26:24:7c:46:ce:1f:a1:41:96:23:cf:
         3e:75:11:a1:00:59:cb:28:a4:80:02:2b:08:a8:3f:f2:98:e2:
         87:54:67:70:34:0a:61:b4:b6:b4:ef:f5:91:cf:37:65:50:90:
         16:06:ad:56:10:df:f7:43:a0:fd:9b:8f:1f:66:a6:66:b5:c5:
         3e:d8:0e:aa:11:fb:17:0a:39:bd:c0:c3:33:eb:5a:06:ce:96:
         2d:de:78:e7:e2:2e:fd:08:29:d5:f2:15:21:63:a6:86:68:4b:
         2f:55:3e:75:bb:ba:7e:5d:7d:d7:31:d8:fa:20:df:4a:04:82:
         6d:62:0f:71:9f:7d:53:4f:98:8c:83:77:1c:80:3b:93:f8:52:
         17:0d:fb:a2:2d:08:07:9f:2d:b1:cd:8c:0a:68:27:45:bb:62:
         d6:1c:08:96:99:8c:d4:15:a1:0c:67:8c:b5:6b:57:1b:92:98:
         28:65:4c:06:b1:29:a8:81:72:82:6e:3f:02:4a:be:e3:e8:e1:
         18:c5:d4:2e:94:d3:36:9a:e9:70:01:b1:b9:ef:bc:b6:7f:61:
         42:14:95:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:31:38 2026 by rpki-client