Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File:                     QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier:          pNGU3IuQgV83VK0VhKYHs6BOuHA7tmiBsmrM1jg0bdI=
Subject key identifier:   72:51:69:82:2D:C9:EF:E5:28:2F:2A:25:EA:64:D4:EB:0B:5F:4D:C9
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer:       /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial:       0215
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number:          0207
Signing time:             Mon 27 Jul 2026 04:52:45 +0000
Manifest this update:     Mon 27 Jul 2026 04:52:44 +0000
Manifest next update:     Mon 03 Aug 2026 04:52:44 +0000
Files and hashes:         1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: tMhPKp92fC8Iob8dqWMPKXyHQzeeFlBHrHvaQca2Wz4=)
                          2: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (hash: nCenYgOEeFIKxZgX3x1AfpOtuop3bnG46D2w/NjG8b0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Validity
            Not Before: Jul 27 04:52:44 2026 GMT
            Not After : Aug  3 04:52:44 2026 GMT
        Subject: CN=6a66e41c-cf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:c7:1c:f7:56:bb:90:8c:e7:73:da:2c:de:
                    00:9f:e2:94:3e:8d:1b:9f:4b:c5:d2:61:c6:4c:e6:
                    6f:f2:e7:81:9f:44:2d:85:23:f9:87:ad:3e:fe:7a:
                    45:28:e3:f5:31:dc:88:d9:d0:63:1a:a8:80:92:cf:
                    ef:87:62:80:4b:ac:58:00:6b:91:97:fc:e5:4b:67:
                    c9:67:22:49:48:71:72:35:c5:ff:d8:12:ad:51:3f:
                    74:21:36:50:82:4f:ea:e4:35:b9:16:fc:cc:ae:a2:
                    a0:9a:ba:6c:a3:c5:7c:c8:28:c9:d6:0d:5b:72:b1:
                    65:3c:7e:0f:53:a0:d3:cc:ee:d4:97:c9:1a:e3:f9:
                    ed:c0:5f:5d:77:51:92:f3:61:91:7d:f6:fc:53:7a:
                    ba:63:ab:db:64:47:4f:d8:2b:e1:f2:b9:98:74:40:
                    c3:f8:b9:5b:75:b2:41:7e:6c:6d:de:de:bd:95:2c:
                    f4:50:95:45:b1:41:0d:82:c7:45:99:29:87:8f:5b:
                    12:59:aa:3c:a2:85:da:e5:b7:73:12:a7:6b:bc:d4:
                    a5:c5:5c:b0:de:58:40:6b:3b:65:96:a6:ef:4c:99:
                    f1:62:c8:bd:b6:9a:5c:8e:4f:a5:38:a9:d6:64:d8:
                    95:8b:68:e6:c3:8d:68:90:e9:14:6f:bb:cc:e1:8b:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:69:82:2D:C9:EF:E5:28:2F:2A:25:EA:64:D4:EB:0B:5F:4D:C9
            X509v3 Authority Key Identifier:
                keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2b:9c:2b:b2:2a:e7:40:2c:35:ed:ec:00:9c:51:03:38:7c:
         33:1e:2b:f1:8a:d4:db:fa:4d:81:3f:09:89:f9:62:b7:38:0a:
         66:fb:f9:7f:8a:de:ee:9e:f0:b3:eb:4e:c3:36:46:08:0c:6c:
         0a:b9:c6:69:ef:92:14:1c:56:62:09:0b:a0:ae:1f:28:f3:cd:
         ca:b5:be:c5:21:e4:99:f5:6b:fa:65:e1:57:cf:af:c6:e0:81:
         df:96:95:d2:07:ea:8a:6e:03:18:bb:95:1e:dc:c0:e0:e6:62:
         31:21:89:8f:fe:a8:24:f9:39:07:2f:29:d2:7e:aa:19:f8:f0:
         de:51:62:e1:18:78:38:80:4c:d6:73:72:fd:11:70:8a:05:dd:
         76:e6:ed:47:4c:bb:41:23:a6:29:11:81:07:8d:f7:44:18:7f:
         1a:1c:2e:02:2c:6f:d3:4c:46:ba:28:d4:29:20:e7:33:78:fd:
         2e:76:08:ce:e1:37:47:49:9e:df:f3:85:68:5c:08:48:ea:bb:
         dc:bb:f8:c2:27:d3:dd:66:46:69:26:c9:c0:4b:a5:6b:0c:33:
         5b:75:56:94:77:ea:88:35:06:63:90:3b:86:fb:73:d0:ea:ba:
         33:d4:ea:c2:2e:06:d9:65:b3:70:2e:81:05:f4:4f:c5:16:b4:
         52:0e:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:27 2026 by rpki-client