Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
File:                     Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft (raw, json)
Hash identifier:          XV5sbN1f4vwI2+o7liPI4h/yl31yVWs2vbP1GG5or1M=
Subject key identifier:   F6:4D:59:9E:57:2F:B9:32:69:8B:51:29:51:2C:EF:A0:74:90:04:1B
Authority key identifier: 43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD
Certificate issuer:       /CN=A91237A2/serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
Manifest number:          01F0
Signing time:             Mon 27 Jul 2026 04:57:19 +0000
Manifest this update:     Mon 27 Jul 2026 04:57:18 +0000
Manifest next update:     Mon 03 Aug 2026 04:57:18 +0000
Files and hashes:         1: Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl (hash: I3CckYay5drXflRikknzjfcun6QYukqvnCun5eG17vc=)
                          2: 9BD4B85894D611EE85EDE844C4F9AE02.roa (hash: VJzdJO1/Wt2J0Hm+mjH2h7xfG3svuVrItd0zXJyOv4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl
                          rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91237A2, serialNumber=4382F9AA3016FCBF31F924CF132E95BF92709ADD
        Validity
            Not Before: Jul 27 04:57:18 2026 GMT
            Not After : Aug  3 04:57:18 2026 GMT
        Subject: CN=6a66e52f-29d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:b9:74:ea:59:00:a1:cd:5a:f7:d0:db:ce:
                    21:fb:91:0a:84:09:3c:39:4b:22:cf:6b:88:5a:d5:
                    2a:d2:f8:58:d3:ad:93:d0:a3:cb:cc:2c:3d:c4:8f:
                    59:02:75:a6:8f:b6:d5:3c:88:40:f9:bf:a4:df:ab:
                    63:08:9c:5c:d8:da:91:81:c3:57:18:24:77:7e:82:
                    5c:f4:6e:50:0c:1d:45:aa:33:a7:75:d2:05:e1:06:
                    37:b2:14:3b:7c:49:bd:26:37:8f:51:2f:f9:f2:ab:
                    0a:af:52:7a:6e:7c:e8:26:39:87:d3:38:11:b7:c8:
                    17:32:7c:b4:49:20:dc:02:f7:07:1b:07:fd:3a:3e:
                    de:59:52:6f:73:e8:96:05:14:ae:4b:ad:b6:98:a0:
                    ed:bd:35:35:ef:c3:df:1e:25:18:4a:91:a2:b7:54:
                    23:25:68:1f:8b:3f:a3:93:ef:5b:c7:b9:bb:8d:64:
                    b2:8c:47:ca:b6:c2:a6:45:0b:b1:b1:8d:8f:99:11:
                    2c:89:ab:26:e7:d8:1b:17:18:ee:d0:c2:87:b4:46:
                    05:58:6a:cd:cd:07:b2:2c:06:35:a8:16:6f:57:c9:
                    92:6f:cd:77:f1:7c:38:ba:00:6a:7a:82:49:22:0b:
                    64:0d:7e:b5:3d:35:46:e7:21:3a:8f:eb:8a:f4:1b:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4D:59:9E:57:2F:B9:32:69:8B:51:29:51:2C:EF:A0:74:90:04:1B
            X509v3 Authority Key Identifier:
                keyid:43:82:F9:AA:30:16:FC:BF:31:F9:24:CF:13:2E:95:BF:92:70:9A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91237A2/49E6E3D6933C11EEB4210F29C4F9AE02/Q4L5qjAW_L8x-STPEy6Vv5Jwmt0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:77:dd:f4:9a:8c:e7:f3:9a:bd:24:a6:ca:2f:bc:ce:27:45:
         63:54:36:75:2a:27:9f:8e:03:46:c4:9c:3e:9c:c6:0c:2e:c6:
         10:23:54:ac:c1:f8:77:f2:9b:88:e4:ef:a7:6b:82:af:04:2b:
         80:6c:c1:80:a1:1b:19:e1:95:7e:1f:5d:ca:5a:b8:38:98:6d:
         5e:67:ec:45:cd:19:17:4a:53:36:6d:a1:2e:d6:da:6a:27:56:
         7e:6c:24:8a:39:13:41:73:84:e2:74:92:c0:a2:80:4e:d4:d4:
         ed:9e:92:31:6a:f7:ec:24:cb:15:bf:c5:31:34:db:e5:87:7d:
         54:a0:24:52:0c:0c:aa:7a:db:53:9c:19:aa:03:82:19:4d:c9:
         a3:96:be:f2:88:34:00:57:bd:3d:20:aa:a7:4f:7a:2a:37:af:
         23:5f:7c:9a:96:e3:d3:75:9b:07:36:9d:58:92:c2:0f:81:07:
         de:03:ef:7c:43:94:04:30:54:0c:4e:63:30:99:f4:fd:07:7c:
         fa:0b:d0:52:6e:6c:50:64:49:45:2b:38:6a:34:e3:35:68:77:
         55:a2:50:4c:2e:60:6d:02:6b:6e:55:a0:6f:dd:c0:39:33:ce:
         31:02:dc:91:1b:d6:af:b7:da:24:5e:6e:39:fa:29:71:b8:03:
         4e:30:84:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:26:20 2026 by rpki-client