Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft
File:                     QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json)
Hash identifier:          rl2CMLBGYD5QYr2+k5J8XfY6UtrHCVM+nPgE8/8bbLU=
Subject key identifier:   04:FE:06:C6:29:7D:2D:A7:32:22:D7:6F:94:D3:76:BA:6F:20:9C:BE
Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75
Certificate issuer:       /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175
Certificate serial:       0BBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft
Manifest number:          0BA4
Signing time:             Sun 26 Jul 2026 19:33:37 +0000
Manifest this update:     Sun 26 Jul 2026 19:33:36 +0000
Manifest next update:     Sun 02 Aug 2026 19:33:36 +0000
Files and hashes:         1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: dQCkTIT9fRqRIM0PYew/RSxSI3ClZBdX7bwHDfj2JLo=)
                          2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: Wh3ZNP10nZd0QHYSRSqlPYMbRgRurkkHYr5iJSRslJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl
                          rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3004 (0xbbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142127, serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175
        Validity
            Not Before: Jul 26 19:33:36 2026 GMT
            Not After : Aug  2 19:33:36 2026 GMT
        Subject: CN=6a666110-3f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:2e:f6:5d:f4:a9:e2:76:eb:c0:f9:d6:70:
                    ee:24:4b:83:6b:6d:32:34:bb:5b:fc:e9:a4:07:ce:
                    c5:b5:ef:a7:e9:50:19:6e:31:3a:0f:0e:d0:c5:4e:
                    d4:61:82:6a:be:f4:ee:34:52:96:93:45:dd:f7:76:
                    75:56:af:88:8f:b2:32:5c:be:f9:d9:20:4f:ab:7d:
                    b4:11:70:fb:c6:30:e9:8a:a0:b1:e3:6d:d6:02:5a:
                    2c:ad:51:36:cc:f0:cb:d0:5a:4f:3d:ee:62:9f:fa:
                    64:3e:6e:eb:9e:fc:1a:cf:08:c7:5f:a2:2b:e0:d5:
                    60:58:cf:45:d2:75:06:d9:29:85:da:fc:23:f6:0b:
                    59:96:b4:0a:14:f0:34:0d:75:30:7a:1b:35:66:ec:
                    76:3b:4c:6f:34:95:66:0c:78:26:cc:19:c0:35:50:
                    99:0a:02:42:59:ea:92:52:43:10:e6:31:2d:0d:7e:
                    a4:aa:b9:24:ee:f3:c3:27:9a:06:c0:74:fd:79:62:
                    0c:ad:f2:52:8b:a5:53:f7:ae:c8:5a:9c:a6:c8:70:
                    58:7c:02:3e:d0:a6:f9:44:3f:4b:01:fe:e1:5e:b7:
                    cd:64:8c:83:6b:cc:3c:39:46:86:04:56:09:95:96:
                    05:cf:21:7c:c2:72:49:fa:6a:0c:8f:20:98:c8:dd:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:06:C6:29:7D:2D:A7:32:22:D7:6F:94:D3:76:BA:6F:20:9C:BE
            X509v3 Authority Key Identifier:
                keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:97:7e:13:2b:3c:8c:1d:fe:65:e4:40:8c:a6:d3:8a:a8:60:
         89:6c:a4:17:d5:36:6d:63:48:ae:51:ae:2e:06:1f:43:09:e6:
         9f:92:bd:20:b9:49:5b:eb:b7:12:d8:01:e1:ee:4c:18:d9:f5:
         98:60:5a:d1:10:cc:75:8a:fa:9c:a0:b3:5f:af:1f:c5:ae:e0:
         d2:5e:ae:07:f3:b3:9c:39:2d:45:be:cd:e7:08:60:ab:7d:d7:
         96:9c:df:42:59:9c:1c:87:1e:2a:03:da:c1:21:51:5a:71:49:
         9b:83:d9:d3:dc:eb:db:78:f9:21:de:f0:0c:39:f8:fe:0e:92:
         8f:3b:7e:57:31:ef:7f:91:83:d8:a6:b4:41:f7:7e:51:3a:ef:
         0f:68:08:f3:69:11:b6:50:1f:39:c2:2a:9c:9d:8c:0e:a8:f9:
         4a:65:bd:73:95:df:d0:2b:45:fb:87:8d:59:63:d2:63:03:4f:
         2b:83:ba:db:17:be:c1:f6:54:1d:54:be:36:9c:84:04:eb:03:
         34:54:36:58:78:29:ab:c8:d3:7e:2c:01:a6:29:27:b4:e3:18:
         da:6d:78:77:81:a2:a0:1e:d9:43:5e:8d:93:bf:f2:82:6d:59:
         0c:0d:54:1a:de:e4:5d:e9:f4:3b:f9:f7:4b:fb:47:1f:4a:f3:
         db:c8:c9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:05:39 2026 by rpki-client