Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
File:                     QvY5Q1NTT7CXXsweC49bZSOvr8U.mft (raw, json)
Hash identifier:          bAzhLmuCTupFe0nlWSmegz+tEG9vpQ9KfLKGZMXGG+s=
Subject key identifier:   A9:96:14:2D:D7:5E:FD:05:5A:03:F9:39:83:D2:0F:E7:B7:93:8A:44
Authority key identifier: 42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5
Certificate issuer:       /CN=A91178F4/serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
Certificate serial:       0C97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
Manifest number:          0C97
Signing time:             Tue 28 Jul 2026 18:48:36 +0000
Manifest this update:     Tue 28 Jul 2026 18:48:35 +0000
Manifest next update:     Tue 04 Aug 2026 18:48:35 +0000
Files and hashes:         1: QvY5Q1NTT7CXXsweC49bZSOvr8U.crl (hash: aCBSqI7mF0RZA0jOd8G2P4DBCV1Zk3Iytygie8azJRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3223 (0xc97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=42F6394353534FB0975ECC1E0B8F5B6523AFAFC5
        Validity
            Not Before: Jul 28 18:48:35 2026 GMT
            Not After : Aug  4 18:48:35 2026 GMT
        Subject: CN=6a68f984-6777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:ba:22:89:f9:c7:02:9c:03:43:bc:28:69:
                    f6:e4:e9:99:ef:94:82:9a:ab:7b:aa:77:8e:a7:8a:
                    df:e1:b5:c9:09:06:2f:c6:b2:42:dc:db:23:89:9f:
                    55:19:53:29:82:84:82:37:e3:a3:00:d9:e1:a6:58:
                    8d:20:46:1f:02:15:e2:a1:83:58:b6:4b:01:f6:0a:
                    40:6a:f0:92:9f:94:bb:aa:4b:f0:a7:b0:e8:17:bf:
                    85:b5:70:bf:ae:fe:64:ad:28:69:5b:09:b6:51:bc:
                    e9:3c:44:ed:14:ab:45:ba:b0:6a:5d:2a:fa:bb:7a:
                    ac:f4:d2:05:10:17:1b:30:8f:53:ac:d5:ce:f0:25:
                    4d:10:10:44:9e:8c:5c:ed:42:dd:2c:92:7e:c2:ea:
                    8e:00:1a:7d:ac:8a:21:01:c5:97:f8:4f:5c:fe:ad:
                    98:44:b3:56:e7:9d:5d:a9:ae:f5:fe:94:e0:9b:97:
                    5f:9e:b3:94:38:b1:59:a9:dc:01:d7:14:c3:e8:32:
                    65:8f:90:f8:70:30:5c:96:c7:29:32:98:5b:3d:ff:
                    b2:84:ab:f2:79:c4:31:f5:8d:f1:c6:89:5c:55:ec:
                    6f:a9:37:92:43:cd:ff:11:d7:8d:d8:88:03:3a:ca:
                    aa:31:89:ce:45:e9:08:3e:9f:2c:d5:6c:d0:86:85:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:96:14:2D:D7:5E:FD:05:5A:03:F9:39:83:D2:0F:E7:B7:93:8A:44
            X509v3 Authority Key Identifier:
                keyid:42:F6:39:43:53:53:4F:B0:97:5E:CC:1E:0B:8F:5B:65:23:AF:AF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QvY5Q1NTT7CXXsweC49bZSOvr8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/D7065E34213211EA9A05FF40C4F9AE02/QvY5Q1NTT7CXXsweC49bZSOvr8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e2:11:f8:5a:27:5b:ad:32:13:96:2d:b3:5e:45:5b:70:2b:
         a1:91:5b:fe:2b:a4:f1:3c:17:f2:10:ba:68:7e:5e:8f:0f:f0:
         b8:65:60:28:70:f6:37:f3:e3:da:d2:18:89:e7:7b:72:9e:7a:
         f9:64:9a:72:d3:c3:d8:b8:ac:82:4c:37:e0:00:ef:a8:ee:18:
         46:79:04:8e:63:9c:73:43:7e:c3:0e:e0:2e:85:9e:73:c3:ab:
         0f:22:d5:90:60:7f:9a:b0:2a:19:41:9e:cb:28:cf:fe:52:eb:
         65:2a:0e:dc:fb:d6:55:56:63:20:b3:8c:62:3e:ad:b3:11:5a:
         58:e5:e8:3a:ad:5b:78:a3:62:a6:ff:54:c4:d8:56:13:70:f1:
         8b:98:36:99:1b:bf:85:f3:80:84:73:fe:ff:47:33:9a:dd:23:
         e3:f6:da:af:12:16:f1:1c:65:cd:18:95:f1:e4:e8:18:64:9d:
         ff:1e:34:4e:93:0e:44:8d:39:98:ee:6f:9b:b6:7d:e1:bc:48:
         38:2a:a6:c3:d4:bf:26:ee:43:3c:49:5a:25:1d:2d:03:7f:9b:
         03:02:c7:56:27:e3:fa:33:13:96:1a:ea:6f:69:d1:9e:1b:e9:
         36:7b:41:6b:44:df:d8:ed:fa:63:a8:3d:28:98:27:0c:71:b5:
         57:c7:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:43 2026 by rpki-client