Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
File:                     QN1mK29ul7NNO3WoAH3lOI2SclM.mft (raw, json)
Hash identifier:          DTXzwmFB+I9JF8zHmYkHyQooqydGsHbPwZhHNAHJL8c=
Subject key identifier:   FB:2D:C8:19:DF:59:D5:4E:03:7A:17:C9:DE:42:DC:CD:96:89:97:3B
Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
Certificate issuer:       /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Certificate serial:       072E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
Manifest number:          0724
Signing time:             Sun 26 Jul 2026 22:43:55 +0000
Manifest this update:     Sun 26 Jul 2026 22:43:55 +0000
Manifest next update:     Sun 02 Aug 2026 22:43:55 +0000
Files and hashes:         1: QN1mK29ul7NNO3WoAH3lOI2SclM.crl (hash: tPS4OMrEqXUS/omIqvJdTOzsk9k2hdMVjBjJlGdCL5A=)
                          2: 85613B4E8C8411EBB68DD829C4F9AE02.roa (hash: 20IQ5k6iGcflni7byHLtSc+KRh5svbsk0T1vVsQKJRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
                          rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 22:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1838 (0x72e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CF44, serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
        Validity
            Not Before: Jul 26 22:43:55 2026 GMT
            Not After : Aug  2 22:43:55 2026 GMT
        Subject: CN=6a668dab-918e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:b2:a6:c5:c5:78:35:e0:2f:47:9a:bb:70:
                    a0:0b:37:d1:05:34:5e:c4:fc:8a:e1:8a:5a:37:f0:
                    af:ba:7f:31:6a:fe:c7:f4:ca:a3:f2:3e:a7:7d:30:
                    66:4f:08:0d:08:12:e8:26:dd:f1:a2:f0:27:5c:bc:
                    35:22:71:2e:28:e1:91:b1:64:87:76:b0:0f:0c:15:
                    40:fd:2d:05:05:7c:13:b3:8e:7a:78:d0:13:8a:c5:
                    51:de:9f:af:48:08:18:b7:ea:bf:23:ed:2b:39:16:
                    63:b3:8c:5d:67:17:84:10:a1:4c:a1:7b:f3:85:30:
                    fa:2a:77:a2:97:f4:d4:64:39:29:02:f9:c7:21:61:
                    e5:5b:6b:82:be:73:b0:fc:68:91:ae:df:61:61:de:
                    0d:c5:3f:2c:77:62:ca:3f:4c:2f:ec:60:01:22:e9:
                    31:a7:28:2f:c5:39:b7:c7:06:51:b5:c2:6e:60:59:
                    bc:89:e6:70:0f:fe:4a:2d:10:5f:54:8d:40:4e:10:
                    30:9f:d0:60:38:e9:28:ff:af:fc:9a:ba:e8:6f:f6:
                    08:61:fa:05:b7:5d:c1:06:2f:c0:46:04:7a:42:74:
                    db:11:25:90:20:01:e5:32:6d:36:46:cf:0e:a3:56:
                    08:4c:27:79:bb:6c:8f:f8:f0:1d:9d:39:8a:c6:d5:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:C8:19:DF:59:D5:4E:03:7A:17:C9:DE:42:DC:CD:96:89:97:3B
            X509v3 Authority Key Identifier:
                keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:0d:80:52:dd:05:23:c9:6b:00:84:bb:0b:b7:55:cb:f4:
         f5:5b:f3:56:c7:95:c7:d4:30:0b:bf:8d:1e:a1:cc:aa:b8:18:
         f1:26:a8:04:16:e9:32:4b:b6:5c:d6:40:43:1f:cf:ad:26:35:
         5d:48:21:4d:d7:a3:ef:c8:79:2b:3c:e4:a1:82:dd:23:a7:e5:
         ce:16:34:55:ea:6a:3e:6a:21:c4:ef:44:64:62:26:b9:4b:9e:
         55:6e:b8:81:18:78:ea:b4:b9:da:07:e3:f4:39:89:7f:64:2b:
         28:b0:65:84:e4:3b:d8:f4:90:59:3d:a0:fe:5c:60:43:17:dd:
         cd:65:08:08:a8:81:b5:6e:46:20:06:19:c2:47:db:24:9d:8a:
         c6:39:9b:6b:40:9d:71:af:24:db:69:b8:cc:20:24:07:40:65:
         18:06:ea:d0:eb:48:13:a4:80:e8:69:9c:da:0d:32:dc:53:bf:
         80:17:a0:ec:4c:98:01:29:cb:66:85:cf:41:e5:57:7c:e0:8e:
         37:5a:37:44:e0:c1:1e:26:ed:38:6d:88:2a:c0:5b:ed:7e:1b:
         68:ef:7a:c3:e6:f9:41:af:33:cd:80:bf:29:d8:49:45:f4:42:
         44:3a:cb:02:ce:38:1b:17:19:2f:0f:13:35:e0:1a:85:83:ce:
         bf:77:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:04 2026 by rpki-client