Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          dZ/dACUijfe63VxaMz73+AmNRsaJfQceYsMWOVe0kFY=
Subject key identifier:   9A:F2:EA:99:A5:87:AA:45:1C:11:59:B3:3B:24:A2:7B:53:7E:51:85
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2759
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1B1E
Signing time:             Tue 28 Jul 2026 17:36:07 +0000
Manifest this update:     Tue 28 Jul 2026 17:36:06 +0000
Manifest next update:     Tue 04 Aug 2026 17:36:06 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: i8WIiupVGIZohliqZY1TVdk7Or+04iK2LwV5kfq/xBA=)
                          2: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: m8Q8VlnRcl/GHb41ywtnMXRFzOLrg9RM9ywdaVX0ju8=)
                          3: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: epbDGYMjkBjgCB8zOENg9JA5Dqcx6zSsCf3WSlYM71Q=)
                          4: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: x63jZuccY3EFvN+dQbF4Rjcil5MsUqwIGk9y/9imM7Q=)
                          5: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: vQEbhJ8auYq9x3EecwXq87HLZ/JnoCZJRBiGLMc4sA4=)
                          6: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: H//vvi5SlLrCtYa54Q+H3er1MSoemnRtrVuPU9bXRyo=)
                          7: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: UWliRVlokhXmNFKtQbU46hk9m/mXCKg/o2n3Q6d6stU=)
                          8: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: cQKYZfkgbkJUbhvtH5bCihqRqaA2EA0EYMRpPCO51mc=)
                          9: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: NT+gqmZoY06EG/FbKKxXt8qiPx2+Rsm1huN7twr6hzs=)
                          10: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: tijk8+7R5ocWBvWHdRRYG7JX5+4WVVnKF/vJ0GQ6668=)
                          11: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: mcn0ZVG55P1HZ+c5tOfv4ldz8ybxCBzv2i3kgRE6eCE=)
                          12: B53FD334575411ECAA094876C4F9AE02.roa (hash: X0WqMduBFpFu177iP2oZPdFqVCKo3t67uPNJcyev/0U=)
                          13: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: TOfN0XhsNW5IKIguVjPm1s1TcacnnEpG18DEzhfII+M=)
                          14: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: +/WJzifpij/OX1Rp9/kIJWL8qj5quDZq9BQi1XlB3MY=)
                          15: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: WC0LdiQwemGFBu/b/DSzTFNyGXY5R3yQGpKxZ/joZ5E=)
                          16: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: oh12tPPyo0aWXq9QoIEWfwxMhcXGEQDCqo5UuHvVvl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10073 (0x2759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Jul 28 17:36:06 2026 GMT
            Not After : Aug  4 17:36:06 2026 GMT
        Subject: CN=6a68e887-5ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:4c:34:5f:e7:bc:51:de:d1:cc:2a:87:f3:
                    85:e0:34:5c:12:cb:56:fe:07:0e:1c:8c:15:d8:8a:
                    58:47:21:d7:c3:ff:d4:8c:6b:54:b6:bd:57:55:cb:
                    30:0a:4e:17:4f:32:20:31:55:7a:8d:3b:05:d5:67:
                    d9:df:aa:1d:9d:4e:61:c8:09:d7:8b:d6:fc:41:f3:
                    94:7c:93:10:fc:08:69:e8:f9:2e:89:e2:55:db:d1:
                    23:01:88:d7:9f:bd:ed:28:88:1a:f6:bd:c3:94:81:
                    d4:dc:a5:5a:2c:f7:85:7f:e3:0d:84:c1:84:95:d5:
                    c0:1c:12:c0:52:68:77:00:94:d2:6b:0f:bf:98:9e:
                    a8:0d:5c:9a:01:36:2a:ae:db:e3:60:76:2a:74:b1:
                    31:d9:3f:d4:5b:88:d1:47:c0:4d:e0:a2:b7:15:b2:
                    f7:fe:1a:bd:ff:78:b2:97:85:75:74:dd:23:18:c4:
                    a5:17:65:21:23:9e:bc:79:e2:f4:b7:19:dd:56:4b:
                    0f:95:e3:ca:a6:7b:51:ff:84:ad:32:67:ab:c6:d0:
                    ba:2b:27:f4:60:b8:2d:6a:ae:7c:04:3a:74:a8:e1:
                    8d:33:e7:26:3b:b2:06:bc:fa:b5:d7:c8:f7:10:e6:
                    e8:5e:21:9d:89:4c:f7:e1:f3:db:24:15:7d:07:7d:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:EA:99:A5:87:AA:45:1C:11:59:B3:3B:24:A2:7B:53:7E:51:85
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:75:41:2d:86:15:28:d3:4c:c4:06:87:69:fd:ac:69:24:dd:
         13:5f:b4:0e:e1:ac:bb:75:4b:ce:73:20:4d:42:c8:1d:f2:ed:
         dc:5f:47:a8:5b:3c:e9:9d:4c:30:48:96:38:7f:78:04:24:4f:
         24:0a:1b:ad:9d:c4:8c:c2:cd:ad:fc:7a:4a:de:ac:72:3a:ff:
         48:e2:01:ec:73:2a:78:bd:2d:c9:3b:1d:d4:1a:9a:03:c9:d5:
         d1:f4:3f:ed:00:22:32:5b:fe:a0:05:3d:92:1d:a1:15:57:73:
         25:a3:24:2d:2b:e4:ee:4f:59:a6:48:a7:e9:99:3a:f8:e3:65:
         ff:a9:fd:7a:b7:c2:9e:12:d3:2f:a7:d7:bb:63:a2:2b:db:48:
         f0:bb:96:d6:3b:0c:31:9e:fa:ff:20:70:aa:58:ca:5a:ea:67:
         9b:cf:c9:de:7c:6f:c7:83:24:eb:a8:e3:93:67:bc:6a:14:a6:
         d1:42:e1:c1:a5:9f:50:ea:ca:46:b5:6f:e5:2a:68:fe:6c:4f:
         c7:6d:8e:39:4e:4d:49:32:94:7f:cc:39:73:87:34:50:a7:7d:
         f8:f4:ee:bb:96:1f:3d:60:83:af:df:5e:b2:a1:1a:68:d8:ca:
         c3:8a:8b:e5:44:87:a8:cd:9c:71:c8:fc:04:d1:b1:d3:e0:cc:
         d8:f4:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:51 2026 by rpki-client