Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft
File:                     QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft (raw, json)
Hash identifier:          n0qqopd3KsMaVcMhYsaspdEMhHzgCvsoQUnIp93+5Q8=
Subject key identifier:   81:D9:85:BF:F7:05:0D:C3:97:EA:9D:C2:83:4E:49:01:0A:41:DF:69
Authority key identifier: 41:01:45:FC:DD:7E:8F:1D:6B:39:40:EF:0C:EF:B7:65:91:74:2B:EC
Certificate issuer:       /CN=A91EC167/serialNumber=410145FCDD7E8F1D6B3940EF0CEFB76591742BEC
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft
Manifest number:          0F
Signing time:             Fri 17 Jul 2026 10:27:23 +0000
Manifest this update:     Fri 17 Jul 2026 10:27:23 +0000
Manifest next update:     Fri 24 Jul 2026 10:27:23 +0000
Files and hashes:         1: QQFF_N1-jx1rOUDvDO-3ZZF0K-w.crl (hash: MQYWQUBeh6S+Zusgnl4NdVXbZPxhWkUu5/bAT78Pejs=)
                          2: 504168B26F0F11F1A17F76C284A30FBC.roa (hash: l5YgF6ZQdhgOiQeWG6KLPed1ijBj6GSOGCDGFs/IBf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.crl
                          rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC167, serialNumber=410145FCDD7E8F1D6B3940EF0CEFB76591742BEC
        Validity
            Not Before: Jul 17 10:27:23 2026 GMT
            Not After : Jul 24 10:27:23 2026 GMT
        Subject: CN=6a5a038b-d9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:a1:72:d4:06:ff:62:8f:ac:20:de:61:2a:
                    11:5f:c3:e2:86:30:13:b6:0b:fc:b0:20:fe:7f:43:
                    da:74:99:6e:8c:9b:33:ab:17:66:70:24:eb:89:2d:
                    f1:1d:8b:29:73:07:ca:a2:ad:d6:ef:a0:b4:94:f8:
                    24:1a:d9:a8:67:6f:bd:4b:0c:02:6e:50:85:1f:f8:
                    eb:0c:7d:6e:ab:b8:82:3d:59:c4:3a:c8:f3:64:83:
                    c8:51:0e:a6:90:07:7d:5c:7d:1a:20:45:af:77:9f:
                    71:f8:5e:9b:df:b4:4f:6b:3c:78:47:0b:a0:4c:b2:
                    13:a0:f5:df:30:20:7b:5c:81:37:13:c6:f6:08:6a:
                    24:53:5f:89:93:97:d0:e7:09:18:b4:e7:ed:79:fa:
                    bf:04:ab:20:01:6d:82:d1:36:94:46:6a:19:af:1f:
                    97:c4:63:14:c8:66:1e:71:5d:46:13:a8:de:6e:8f:
                    ff:d0:96:b7:53:cc:54:53:de:63:76:31:05:14:e5:
                    e6:3b:4f:26:87:71:4f:36:84:40:fe:3e:47:ef:c2:
                    76:ba:26:4f:f8:74:ab:4c:6f:a0:7c:49:de:9f:d6:
                    d8:9e:06:bc:d2:bc:7a:ac:bd:90:04:c8:3f:b5:5c:
                    e8:6e:5d:bc:24:da:90:e4:9a:90:f6:85:cf:ec:5c:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D9:85:BF:F7:05:0D:C3:97:EA:9D:C2:83:4E:49:01:0A:41:DF:69
            X509v3 Authority Key Identifier:
                keyid:41:01:45:FC:DD:7E:8F:1D:6B:39:40:EF:0C:EF:B7:65:91:74:2B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/A9AC0D726F0E11F1968E7C4883A30FBC/QQFF_N1-jx1rOUDvDO-3ZZF0K-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e3:db:d3:07:61:1b:14:b8:bc:d8:b5:1f:e6:23:2c:84:29:
         32:63:32:96:38:60:a1:fe:d5:35:02:d9:72:09:c1:8d:2d:b8:
         ee:51:2f:1a:24:ce:d5:bc:a5:55:76:4c:0a:f8:84:64:0b:14:
         87:16:18:07:45:b6:fc:63:dd:8c:bb:0a:6e:ef:77:61:dd:cd:
         4a:5b:68:6c:f3:7b:5a:50:c2:ec:3d:ec:3b:ba:b7:ac:42:90:
         fb:8b:b1:8a:27:19:8e:d4:75:45:7d:4e:da:99:e3:6b:41:f9:
         6d:d0:4b:6b:e9:9b:7a:3b:ee:c1:ad:aa:cc:01:f8:0a:dd:ae:
         ef:37:8d:e5:25:5a:b4:30:9b:89:c4:31:58:ad:b0:a4:d6:b2:
         bd:fa:50:2e:ca:93:aa:9e:03:0e:2e:d7:03:dc:0e:7a:2e:08:
         4c:61:20:6e:37:cd:18:62:67:66:f3:c8:ba:ff:9e:76:c1:a3:
         b2:e5:c1:1c:29:5c:1e:c6:eb:d0:97:d2:62:ee:a7:75:ad:96:
         e3:8d:0f:7e:d3:fa:90:69:28:5b:e0:37:58:7e:6d:2b:1b:00:
         33:9a:7c:47:55:b3:7e:e8:20:15:8b:d8:4b:11:9f:f4:0a:b4:
         e1:95:f8:38:61:97:4e:af:6c:ff:01:1e:77:6f:41:e3:a0:65:
         9f:52:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:43 2026 by rpki-client