Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File:                     QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier:          jigf6vuqWEiANBJMkG4SVU2lH86s4qFDrvGLtPiSatg=
Subject key identifier:   E9:FB:30:29:5D:4C:AB:3E:3C:36:9B:80:11:E6:17:42:FE:07:B1:34
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer:       /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial:       357F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number:          3570
Signing time:             Tue 28 Jul 2026 15:17:11 +0000
Manifest this update:     Tue 28 Jul 2026 15:17:10 +0000
Manifest next update:     Tue 04 Aug 2026 15:17:10 +0000
Files and hashes:         1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: 0PYYEPNURmDgLwvyFBZ64Eugu4bwMa0mT1jYPO0HGbE=)
                          2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 0OdTWHoxd21Qjwnz0s44P4D4gReHVyaUQbCaa6G9U74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
                          rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13695 (0x357f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
        Validity
            Not Before: Jul 28 15:17:10 2026 GMT
            Not After : Aug  4 15:17:10 2026 GMT
        Subject: CN=6a68c7f7-95e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:3c:6c:6e:e6:ab:db:10:3e:12:e1:59:2e:
                    6c:6a:3b:2c:71:1c:5c:13:f9:07:83:3e:da:76:35:
                    d6:be:dd:58:32:9a:cc:c8:8a:bd:f8:bc:d4:2e:4c:
                    4f:ed:7b:bf:ae:1f:70:68:f0:2d:56:fc:eb:c7:47:
                    d5:c3:2d:4e:d9:cd:25:bb:46:73:df:29:9e:4f:06:
                    d1:26:96:2a:49:ec:f0:d3:51:09:e4:f1:aa:8f:ae:
                    ff:71:af:c3:a5:1b:f8:8d:b4:2f:df:88:fc:92:29:
                    d1:8a:c1:61:7c:f9:cc:43:65:1e:96:76:2f:28:1b:
                    16:8c:3d:27:2f:a5:b6:f8:7d:8e:fd:f4:13:7b:76:
                    c3:45:d5:8c:ff:d7:c3:8d:d5:ae:66:6e:c9:ab:29:
                    35:1a:86:69:14:f5:2c:b6:19:bc:37:72:37:66:f4:
                    d3:10:aa:49:83:7d:53:55:6e:34:ec:b9:91:5a:88:
                    2d:2c:1f:50:b9:e4:97:de:34:41:2b:f1:ce:d5:f1:
                    a5:5c:42:8e:06:96:20:55:ab:f1:7e:c6:ba:04:72:
                    ae:05:04:ca:bd:89:6d:83:76:e5:db:05:d5:52:e5:
                    e1:62:f1:ed:c9:e2:63:55:5c:4f:26:04:1f:89:38:
                    0a:2f:16:59:6d:ba:3e:23:37:c7:30:a7:7e:34:64:
                    bb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FB:30:29:5D:4C:AB:3E:3C:36:9B:80:11:E6:17:42:FE:07:B1:34
            X509v3 Authority Key Identifier:
                keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:63:96:1b:d7:cc:cc:60:0b:9c:5b:06:81:7d:66:14:c2:88:
         56:9a:bf:b1:cc:fd:59:70:5b:20:bc:a6:c5:3f:dc:76:96:f4:
         27:8e:07:cb:13:15:4c:f6:ee:0a:99:92:01:76:33:d2:e4:44:
         db:bd:ac:e9:05:24:a7:d7:1c:2b:fd:a0:63:12:5a:26:58:dd:
         45:b6:c2:f4:ea:01:44:7a:72:ed:63:7b:41:0c:ea:b5:64:3c:
         d6:e2:78:a5:4d:c0:b2:79:76:f2:8b:fc:45:0e:2e:8c:85:9d:
         f2:bf:ee:da:bf:e0:86:2d:5d:55:9a:d7:09:39:ed:d5:89:ad:
         48:2a:49:f0:31:ac:b2:4d:aa:b9:bb:9d:15:70:39:65:30:1e:
         5c:7c:c4:1c:3d:ad:0c:4d:8a:6b:e2:ab:5b:f1:54:48:74:2d:
         bf:3a:37:a4:01:bf:32:30:f6:67:c4:a3:ed:4e:8c:bd:39:76:
         40:86:9e:d9:57:23:ea:c5:02:be:63:c9:f7:8b:6e:45:d7:e5:
         0f:58:27:7f:09:f9:6e:f1:bd:92:2a:92:2b:e5:31:22:ef:d0:
         63:71:7d:ac:e7:69:f6:14:7a:64:f0:56:e7:47:79:2a:db:67:
         c2:c4:10:8a:cb:7c:07:8a:9c:70:55:0f:b1:68:86:a9:26:01:
         5b:9b:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:52 2026 by rpki-client