Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File:                     QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier:          UwVzybjh1N5R245EdF43C5fbD2Bd17D/EPMSQ7CxKik=
Subject key identifier:   19:23:7A:C4:BF:E5:EE:EA:50:B4:63:82:BA:6A:32:EB:AF:04:E4:B9
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       04A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number:          049A
Signing time:             Mon 27 Jul 2026 00:59:21 +0000
Manifest this update:     Mon 27 Jul 2026 00:59:20 +0000
Manifest next update:     Mon 03 Aug 2026 00:59:20 +0000
Files and hashes:         1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: 3sabNux2s4Y6t4pHz5pzvg9hpXLd8UOSrHaSs37WqM0=)
                          2: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=)
                          3: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Jul 27 00:59:20 2026 GMT
            Not After : Aug  3 00:59:20 2026 GMT
        Subject: CN=6a66ad68-245f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:5f:0c:3a:98:62:36:90:cd:c0:eb:4a:dd:
                    5e:9c:22:04:95:b1:ee:5a:20:2a:eb:b8:1d:33:82:
                    f1:52:28:e9:4b:d5:fa:71:7a:4a:a2:bb:8e:11:71:
                    90:f3:3e:25:93:cf:f1:c7:65:7d:b1:10:34:e2:f2:
                    2d:57:ef:bb:32:6a:a8:e0:e4:8e:99:6b:79:ba:4e:
                    05:1f:56:0a:0e:7a:69:e8:b0:46:e8:95:1b:a8:aa:
                    67:b3:a0:10:e1:b8:e6:5a:22:ac:54:97:b9:e2:33:
                    d1:4a:ce:5d:f4:cb:92:52:94:aa:e7:8a:28:1b:6c:
                    4c:13:8b:39:7e:54:d6:f4:3e:0c:f3:1d:03:ac:59:
                    cb:d3:75:6d:af:0f:a4:a8:18:dd:0c:7f:4e:6a:e9:
                    24:44:6b:e3:e1:da:c1:bb:00:27:7e:0d:ea:6a:aa:
                    b4:e6:80:90:a5:1d:e6:c0:10:92:6c:d5:2f:c8:59:
                    f8:3b:da:79:d8:81:0c:d9:0f:4f:9e:35:f7:39:be:
                    ad:3f:43:e2:98:8e:5b:52:b1:c3:f8:87:bd:8f:ce:
                    6b:c4:db:eb:6d:5c:1e:1d:33:64:5e:1f:e3:8e:f1:
                    cc:56:52:4f:3e:2e:c4:b2:4b:15:b7:5c:76:7d:62:
                    ab:1d:10:b3:44:87:bb:38:4a:32:a2:be:95:35:0d:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:23:7A:C4:BF:E5:EE:EA:50:B4:63:82:BA:6A:32:EB:AF:04:E4:B9
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:11:d0:55:33:e5:37:07:98:89:92:c7:ea:a1:26:b3:36:eb:
         69:0f:4b:4c:00:51:4e:29:c4:0b:a0:2b:6e:c8:1c:cd:fb:37:
         de:73:07:aa:9b:4d:b8:07:b5:17:3a:e0:87:b0:70:91:54:0e:
         5f:19:a8:cd:e7:85:e8:cc:7f:e0:80:2f:95:29:91:ec:64:8e:
         b0:37:f0:95:2c:94:60:af:cc:27:24:9f:ef:e9:bb:fb:1a:4c:
         1a:60:1d:7d:cd:99:03:28:28:5c:e3:e4:75:b4:40:ae:06:40:
         69:73:60:66:75:f8:4f:eb:7f:07:cd:0c:4f:29:45:2a:38:4e:
         c4:74:1f:31:09:69:c6:a4:9d:cc:a7:6b:42:f0:c9:aa:a5:29:
         cd:1c:18:bc:f3:93:cf:f1:7b:e2:f7:c9:4c:09:2d:f7:28:ae:
         2c:d9:9b:48:32:09:d7:3b:59:ef:bd:aa:69:89:b2:85:1f:cf:
         85:0a:d2:63:04:c3:8d:2d:40:63:eb:e9:62:32:dd:be:67:39:
         1d:25:c3:4f:96:a1:c4:ff:42:55:7b:09:4a:3e:f1:4e:60:27:
         42:e8:11:96:f7:23:72:49:db:76:8c:ed:6d:23:b8:8a:a0:f0:
         79:37:68:8c:20:35:e1:af:8e:91:66:18:4d:2b:4b:8e:12:82:
         78:21:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:43:08 2026 by rpki-client