Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          1GlfsWDIgZohfO0M3HNgeR/38r44YHM2em3xUBtE8OY=
Subject key identifier:   79:B4:39:01:19:8C:EC:5F:F6:93:81:EB:DA:E3:C3:C3:B0:49:C7:CB
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       05D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0DE5
Signing time:             Thu 18 Jun 2026 21:04:19 +0000
Manifest this update:     Thu 18 Jun 2026 21:04:18 +0000
Manifest next update:     Thu 25 Jun 2026 21:04:18 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: 0kj4PnM28uXtcJ3n/s0uLrKUNKDAfjahD7bhaqyhrjc=)
                          2: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: UBk250a9gXHO9ez4qLSlEuiZsLpkP12rAnXlTLR0TEs=)
                          3: A291634816B711ECBD752D47C4F9AE02.roa (hash: URyiGMrY2LwMKVOEbU+eXu56UFnP9xNvR4vUhX3bIHI=)
                          4: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: xmxOOOmRoSh+TiszmT8uvDU9UG3tb8C8zUPGk1dc3Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Jun 2026 21:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1495 (0x5d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jun 18 21:04:18 2026 GMT
            Not After : Jun 25 21:04:18 2026 GMT
        Subject: CN=6a345d52-cc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:05:15:11:38:8e:21:75:5f:67:ea:ec:4f:
                    df:4a:db:f6:f6:9e:0a:da:82:f9:a4:e7:16:62:cb:
                    99:5b:13:12:f9:dd:f5:66:e3:0b:c8:31:45:64:2d:
                    b4:40:ac:4f:f6:3c:58:87:29:20:11:e4:7a:02:d6:
                    15:36:1d:1d:57:f4:a1:c6:0d:ae:9d:b3:52:f0:b3:
                    37:8d:ea:74:ea:2e:22:20:db:aa:9e:36:ee:2a:64:
                    fa:48:ca:c4:d1:c5:5f:31:87:3c:13:1d:96:45:08:
                    af:59:9b:18:4f:16:7f:c9:e6:99:5e:40:e6:4c:c7:
                    35:5e:ce:e6:9c:96:46:0b:4e:db:8e:71:96:7f:92:
                    cd:57:12:e5:4d:36:09:d2:f5:a3:f9:b0:82:cb:0c:
                    7e:59:69:de:38:2f:c2:b9:61:43:fa:38:85:41:50:
                    01:cb:eb:42:27:b1:89:68:f1:23:ef:58:df:9c:b7:
                    e2:67:87:63:a4:e5:a6:af:a3:0b:fb:72:95:fb:2f:
                    0c:71:86:9b:56:b2:85:c8:ab:e6:78:c7:7f:7f:7c:
                    4c:22:fa:78:9a:77:a0:30:73:94:f9:da:07:7b:15:
                    01:99:b6:2c:61:68:4b:21:60:cf:96:cb:eb:fd:b1:
                    89:d7:63:6f:1a:1a:27:70:14:8e:e3:1e:c7:c4:60:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B4:39:01:19:8C:EC:5F:F6:93:81:EB:DA:E3:C3:C3:B0:49:C7:CB
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e9:a2:34:5c:db:a8:0b:3c:43:b9:da:88:0b:2c:05:c8:54:
         f8:6f:fc:88:e0:69:71:fb:b2:2c:9c:c5:f0:4f:ca:1f:89:84:
         d5:3e:e3:f1:a8:d3:33:8f:2b:e7:ac:a0:92:39:ab:11:9a:31:
         9b:b4:8f:17:ac:6b:9e:a4:24:7b:76:bc:b1:42:da:af:68:bb:
         67:38:5b:6f:8d:7a:fe:5d:b4:87:91:ac:28:18:4d:d5:57:21:
         11:0c:2d:ad:bc:60:0a:4f:70:56:1c:27:50:d9:f6:c0:5b:94:
         97:2a:fc:7b:65:63:d7:8c:52:34:be:b4:59:c5:6b:4a:46:cc:
         28:23:45:1a:bd:7b:83:b0:31:22:04:ce:b2:61:3a:7c:10:9b:
         94:57:44:76:fc:33:86:58:6f:20:cf:cf:26:06:a3:da:16:92:
         59:31:e3:17:ab:0c:2f:49:35:be:17:6d:ca:2e:69:5c:92:37:
         dd:45:46:fc:10:5d:8f:43:68:06:38:dc:d5:29:db:f7:ad:7d:
         36:98:73:de:62:e0:5c:30:8e:0c:77:e2:c6:d5:9c:59:5c:c2:
         70:f1:c3:17:6d:f6:ea:f8:8a:3a:f8:f9:d4:b5:49:b3:9c:cf:
         aa:4e:11:05:0a:17:fa:b0:cf:28:4a:6b:c0:89:7b:fc:9d:d1:
         93:41:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:22:33 2026 by rpki-client