Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
File:                     1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json)
Hash identifier:          kex8wGsYupN5+/veiuyzsEw8nM3C5Me8hC9eksTiKWk=
Subject key identifier:   89:FF:D6:31:3F:C6:47:BC:E9:0C:C2:20:DF:C0:50:06:9D:8D:FA:5D
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Certificate issuer:       /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial:       0943
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
Manifest number:          093A
Signing time:             Sun 26 Jul 2026 20:45:02 +0000
Manifest this update:     Sun 26 Jul 2026 20:45:01 +0000
Manifest next update:     Sun 02 Aug 2026 20:45:01 +0000
Files and hashes:         1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: 4/RzQ9JN55CqmfmaFm+0SudYWW/mFHs8895UDyJmalE=)
                          2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: JN+imecD0OpVzkhYrCsxKrWAqWar+MYs03H5/bmMtZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
                          rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371 (0x943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
        Validity
            Not Before: Jul 26 20:45:01 2026 GMT
            Not After : Aug  2 20:45:01 2026 GMT
        Subject: CN=6a6671cd-bfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:77:71:6a:26:b8:64:43:cf:65:7e:da:87:
                    2c:11:9b:e4:8d:bc:5a:05:5a:bf:02:ba:c2:07:59:
                    9f:05:27:bc:78:81:bf:32:2a:5a:23:31:3d:a3:4c:
                    e0:3d:d3:bd:b6:de:ac:c7:ce:05:6c:e4:6b:8c:e3:
                    92:c7:7b:6d:52:a6:07:bb:01:b1:ea:95:03:26:9f:
                    41:4e:8c:04:19:f9:f6:fe:8a:e7:fb:75:df:e9:a1:
                    6e:33:13:3a:5c:a6:a9:fa:90:4f:8d:3a:d2:6d:52:
                    29:57:36:a2:f7:a5:87:fc:a6:0d:01:af:a5:48:9d:
                    69:00:49:12:10:59:37:0c:8e:d3:e6:5c:ed:a5:bc:
                    8a:20:32:10:ab:da:a3:a7:4a:e6:58:ba:22:f5:7f:
                    94:c8:68:a5:4c:2a:a0:cf:a0:db:8a:b9:be:2a:92:
                    4d:52:e5:e9:94:3c:2c:2b:86:f3:40:d3:92:63:32:
                    fe:43:a1:bc:4f:f3:61:ca:ab:2c:d1:36:97:75:97:
                    5d:d5:be:9a:ef:32:f5:87:b9:a5:7a:b9:71:1f:f4:
                    66:f5:ee:40:5d:c5:36:60:76:8d:b6:f1:89:32:8d:
                    b9:5f:08:2e:ed:0b:74:0a:d9:4f:cc:34:87:e0:30:
                    6b:4c:d6:59:6b:17:3f:c3:94:35:85:88:39:7a:87:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FF:D6:31:3F:C6:47:BC:E9:0C:C2:20:DF:C0:50:06:9D:8D:FA:5D
            X509v3 Authority Key Identifier:
                keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:03:74:f9:2f:e3:43:62:1a:64:2f:e6:32:ad:9e:56:4b:33:
         ea:e7:9b:a7:29:d1:e2:1d:75:cf:9a:73:6e:62:ee:61:b3:41:
         19:29:a6:10:91:e6:c0:09:1e:94:84:b8:7e:2b:46:02:20:70:
         6d:33:42:a2:91:65:b0:20:6d:cc:05:5d:3d:10:7f:9f:79:4a:
         bb:dd:bd:90:90:cf:e0:e8:ab:36:bd:56:f7:74:77:5a:9c:ac:
         31:12:0d:26:f1:9b:43:64:cb:95:6d:c7:66:61:8b:de:03:eb:
         b5:fe:f3:e9:26:15:e1:0a:76:f9:f3:bc:98:be:c0:3d:13:62:
         3f:9c:8a:0b:9b:ee:19:67:b9:cc:a5:76:9c:18:29:9d:8b:8f:
         27:3f:6d:e7:9b:d3:0c:35:83:9e:37:aa:d7:46:2c:8b:31:66:
         f2:60:d1:a5:22:d5:c4:19:5d:e7:da:ab:f4:cc:96:48:55:8c:
         1e:fb:89:61:ee:ce:c2:4a:2f:c1:f8:03:6a:bd:43:85:e9:a9:
         03:5a:3b:d5:87:6a:8e:19:89:28:1a:07:3a:51:b9:f3:74:8e:
         b1:df:14:e1:c1:ef:df:81:bd:e4:85:50:4a:2e:7d:c6:48:e3:
         8a:6d:87:97:33:53:d5:a6:a5:4b:f5:a7:07:00:d3:78:02:da:
         f7:1e:36:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:45 2026 by rpki-client