Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
File:                     qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json)
Hash identifier:          G6uJLGCER5PKU1L85IxETaqAIZIRYcAkpzMpsM5cAVQ=
Subject key identifier:   31:50:9D:9C:FC:F2:37:49:70:A9:31:46:E1:A3:9E:F7:30:FC:8F:D4
Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
Certificate issuer:       /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Certificate serial:       0629
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
Manifest number:          0621
Signing time:             Sun 26 Jul 2026 23:37:52 +0000
Manifest this update:     Sun 26 Jul 2026 23:37:51 +0000
Manifest next update:     Sun 02 Aug 2026 23:37:51 +0000
Files and hashes:         1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: vbmrb56ZWthp+s5YogHij6ZDreRgP3a+vsj+zXxSFig=)
                          2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: ma+DNS3MZoAgjxWhTTX9baQIdHEsD5fkm6hMo1qHO0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
                          rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577 (0x629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
        Validity
            Not Before: Jul 26 23:37:51 2026 GMT
            Not After : Aug  2 23:37:51 2026 GMT
        Subject: CN=6a669a50-e650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:41:10:92:bb:39:c3:a6:00:b3:96:b3:02:
                    28:b5:51:c0:c2:43:2f:06:0d:1e:f2:e9:34:2c:f3:
                    f0:df:08:50:37:45:88:d0:48:27:6e:01:27:57:36:
                    5d:dc:08:53:f2:56:e5:1a:6f:14:60:e1:6f:6c:9b:
                    a7:76:f5:91:a6:fd:ab:6c:e6:14:f9:7a:f5:5b:67:
                    c8:38:b9:d6:82:43:12:a7:99:4b:e4:2f:c9:87:f5:
                    21:f7:c8:af:89:ba:e7:c2:7d:d2:6a:5c:93:d7:52:
                    fd:ee:10:43:03:23:1c:65:73:ee:56:48:c0:7f:e2:
                    ab:bc:69:3c:97:b8:77:42:e7:de:ba:84:7c:e4:e3:
                    95:33:55:65:6b:ea:e4:81:85:32:c2:b4:15:44:6b:
                    13:fc:c6:1e:0a:b3:82:ea:ce:ef:99:dd:95:e0:75:
                    04:cc:cf:15:85:eb:df:88:03:9a:65:51:d9:7f:12:
                    eb:4b:8e:45:a6:11:c5:04:5a:32:f8:3a:2f:32:bf:
                    94:77:b2:7e:3e:55:2d:6c:12:14:c6:12:7d:a2:5b:
                    13:2f:fb:bb:09:ff:db:0b:8d:94:72:6f:6b:50:1b:
                    64:62:d8:68:a7:f9:82:22:c8:d7:45:77:a8:22:cf:
                    70:a5:fb:ba:93:86:7b:d9:d7:ac:f3:01:cf:e7:1a:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:9D:9C:FC:F2:37:49:70:A9:31:46:E1:A3:9E:F7:30:FC:8F:D4
            X509v3 Authority Key Identifier:
                keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:a2:01:8a:c6:59:e1:c8:04:33:45:91:a5:15:29:c0:51:
         7f:56:e5:4a:28:a6:62:21:3e:86:19:a8:df:fc:41:5e:ac:82:
         91:9b:a5:9e:af:77:f4:1d:ed:e3:eb:bc:1a:3b:2e:34:93:dc:
         ee:71:f7:3b:0b:5b:7c:96:69:8f:0d:ea:79:76:54:77:da:c0:
         34:c8:88:bd:69:c0:e6:de:1e:8c:9f:19:7b:5b:cb:a5:b1:36:
         97:87:23:ed:0d:db:cc:f5:f6:e4:95:7b:d2:dd:dc:07:9e:d0:
         91:31:0a:6d:e4:bb:df:73:83:80:72:20:3d:be:22:af:1b:02:
         bb:1b:ca:3d:5c:95:68:00:87:08:3c:82:51:30:c1:93:02:44:
         37:80:eb:84:ae:1a:e4:ef:60:5a:02:4d:89:40:fb:b5:c0:60:
         c0:aa:1f:b1:b7:85:7b:33:c7:cd:e0:5f:df:4c:4a:92:f7:ef:
         ed:d3:1f:74:2e:6c:02:98:38:2b:ad:6c:77:14:ea:23:9b:3b:
         e3:71:af:26:9b:53:b5:d1:9c:1e:9e:87:7b:50:04:81:a4:1c:
         1f:dd:a5:f5:cc:7f:85:38:a3:dc:45:cb:3f:bb:16:9a:f3:08:
         eb:f6:5a:74:12:a7:a7:1c:e3:37:9c:33:0a:f1:a9:0b:65:85:
         40:4d:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:00 2026 by rpki-client