Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File:                     cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier:          hj76Y1zpBiS+cqFN28M6AS8BcXju3Zj0RM1X/uOvZNk=
Subject key identifier:   DC:C4:67:F5:A7:E7:8C:1A:00:AB:61:50:4E:92:B6:A4:FD:EC:36:0C
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer:       /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial:       355F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number:          355F
Signing time:             Tue 28 Jul 2026 15:16:41 +0000
Manifest this update:     Tue 28 Jul 2026 15:16:41 +0000
Manifest next update:     Tue 04 Aug 2026 15:16:41 +0000
Files and hashes:         1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: tPo5lk1PRrnKL747LxOScKXjiC2hxF8VtRdDfB0RlPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
                          rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13663 (0x355f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
        Validity
            Not Before: Jul 28 15:16:41 2026 GMT
            Not After : Aug  4 15:16:41 2026 GMT
        Subject: CN=6a68c7d9-e13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:9a:80:bc:9c:f6:60:82:b2:c9:f0:02:34:
                    83:4d:fc:bd:45:1e:c5:78:4d:4e:70:6c:ea:bc:f6:
                    34:11:79:ac:d4:32:62:68:7a:28:9e:e9:1c:75:08:
                    67:eb:ff:27:01:a9:5c:ab:3b:b6:50:4c:4c:a9:02:
                    b4:81:0d:ae:d1:dd:52:52:30:7d:a4:e3:a2:9d:3b:
                    43:46:d9:60:54:de:07:57:f0:3e:ad:f9:c0:d9:87:
                    4e:9c:98:67:79:ca:7a:cd:47:a0:5e:39:36:dc:c8:
                    d4:a6:34:a4:b0:c0:1e:8e:f2:55:4a:b4:2e:d5:d2:
                    fd:6d:21:e1:f1:4c:2c:e2:8c:2e:ad:d4:d9:32:74:
                    7c:60:63:4f:d8:82:32:10:a5:39:ee:9c:8c:49:50:
                    4a:89:9b:8a:36:9f:d6:69:59:6f:3e:89:c8:36:4d:
                    88:10:af:22:27:a2:d3:e2:8f:9f:0f:55:cd:c5:c4:
                    3a:a1:34:59:f7:0e:41:af:c7:c9:62:5c:bc:f8:d1:
                    89:9c:2b:b8:a3:e0:6b:38:65:a4:de:57:17:7c:e7:
                    4e:10:cb:ec:f2:4d:e1:e4:33:ad:3a:c0:dd:57:8d:
                    6b:7c:b4:8c:0d:1a:de:f3:d6:72:a1:18:1c:68:b9:
                    09:cd:53:db:79:e0:d1:ca:9e:51:89:4b:cc:cb:10:
                    d5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:67:F5:A7:E7:8C:1A:00:AB:61:50:4E:92:B6:A4:FD:EC:36:0C
            X509v3 Authority Key Identifier:
                keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:08:8b:fa:49:8f:98:cb:08:01:f9:64:80:16:64:cd:bf:60:
         47:4f:19:71:1b:5e:da:5c:7b:6c:25:88:2a:a7:d4:4c:fe:62:
         a2:5c:82:ae:12:d4:8f:74:cf:d0:c9:8c:13:e1:ac:a5:5d:c8:
         e4:cf:cc:42:21:59:23:c9:5e:9c:18:50:c1:d4:df:83:49:d1:
         76:a8:16:7b:be:6c:be:44:c7:f1:05:7c:41:b8:93:5b:b2:56:
         a9:89:09:7a:05:66:13:05:e0:5a:19:0f:bc:e0:e6:5c:76:87:
         1d:20:ad:93:90:9e:88:17:f3:7b:33:42:b3:95:cb:a5:67:2c:
         b9:e1:a2:d5:e7:55:f2:c3:8a:af:b4:25:22:41:f6:d2:a6:21:
         b6:aa:f1:6d:0e:4c:d2:1e:f0:ca:14:51:d2:84:67:92:2a:8b:
         2a:71:46:86:58:81:9f:9d:21:0c:bf:ea:db:19:21:b2:7d:6d:
         88:af:78:b6:4f:92:1e:de:86:80:3e:54:1e:08:1d:76:fd:a5:
         62:3c:63:f2:d2:6f:d0:2c:c9:8b:9b:e4:32:4c:eb:62:21:22:
         5c:b6:32:74:a7:20:e0:33:18:b2:b6:63:25:58:5a:95:6d:ce:
         ae:86:05:6e:5c:26:d9:3b:8b:53:82:10:23:e2:d4:57:45:e8:
         ec:a3:4d:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEzMkExMTAvBgNVBAUTKDcxMDlDRkNFRDRENDhDQkY1NjQ4RUEwNzk3QTdDNzM0
N0Q2OEZGMTIwHhcNMjYwNzI4MTUxNjQxWhcNMjYwODA0MTUxNjQxWjAYMRYwFAYD
VQQDEw02YTY4YzdkOS1lMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy1GagLyc9mCCssnwAjSDTfy9RR7FeE1OcGzqvPY0EXms1DJiaHoonukcdQhn
6/8nAalcqzu2UExMqQK0gQ2u0d1SUjB9pOOinTtDRtlgVN4HV/A+rfnA2YdOnJhn
ecp6zUegXjk23MjUpjSksMAejvJVSrQu1dL9bSHh8Uws4owurdTZMnR8YGNP2IIy
EKU57pyMSVBKiZuKNp/WaVlvPonINk2IEK8iJ6LT4o+fD1XNxcQ6oTRZ9w5Br8fJ
Yly8+NGJnCu4o+BrOGWk3lcXfOdOEMvs8k3h5DOtOsDdV41rfLSMDRre89ZyoRgc
aLkJzVPbeeDRyp5RiUvMyxDVLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzEZ/Wn
54waAKthUE6StqT97DYMMB8GA1UdIwQYMBaAFHEJz87U1Iy/VkjqB5enxzR9aP8S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTMyQS9CMTE2NDhEODFE
QTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpMOVdTT29IbDZmSE5IMW9f
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NRblB6dFRVakw5V1NPb0hsNmZITkgxb194SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTMyQS9CMTE2NDhEODFEQTcxMUUyOEI2RTg2QTEwOEIwMkNEMi9jUW5QenRUVWpM
OVdTT29IbDZmSE5IMW9feEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACwiL+kmPmMsIAflkgBZkzb9gR08ZcRte2lx7bCWIKqfUTP5iolyCrhLUj3TP
0MmME+GspV3I5M/MQiFZI8lenBhQwdTfg0nRdqgWe75svkTH8QV8QbiTW7JWqYkJ
egVmEwXgWhkPvODmXHaHHSCtk5CeiBfzezNCs5XLpWcsueGi1edV8sOKr7QlIkH2
0qYhtqrxbQ5M0h7wyhRR0oRnkiqLKnFGhliBn50hDL/q2xkhsn1tiK94tk+SHt6G
gD5UHggddv2lYjxj8tJv0CzJi5vkMkzrYiEiXLYydKcg4DMYsrZjJVhalW3OroYF
blwm2TuLU4IQI+LUV0Xo7KNNSQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:55 2026 by rpki-client