Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File:                     QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier:          mJI3Vyz3v++BNLNDockyEnrqTb2qMkeYpajtQ8EuIAA=
Subject key identifier:   62:E1:D7:E1:82:37:20:8E:94:24:4E:7E:EC:B8:F3:23:BF:4B:80:8D
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer:       /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number:          02B9
Signing time:             Mon 27 Jul 2026 02:38:45 +0000
Manifest this update:     Mon 27 Jul 2026 02:38:44 +0000
Manifest next update:     Mon 03 Aug 2026 02:38:44 +0000
Files and hashes:         1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: qnwGxFXypfyyXr5Q+9oWH4MHkSKvKfEF/lLeGVvLdns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
                          rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
        Validity
            Not Before: Jul 27 02:38:44 2026 GMT
            Not After : Aug  3 02:38:44 2026 GMT
        Subject: CN=6a66c4b5-99e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:4b:b0:e1:a5:04:d1:77:3b:fb:c1:82:d2:
                    f0:d2:1a:5b:38:cf:62:1d:b7:45:b0:fa:ee:9e:a1:
                    de:fe:e8:9c:94:9b:0d:40:33:40:56:d1:cc:99:93:
                    b1:f0:0e:a5:57:c7:f6:a1:12:08:03:fe:79:8a:e7:
                    a5:9e:5b:e2:b8:9b:02:34:45:c1:ae:bc:7f:a7:70:
                    35:bc:fb:76:50:e2:ab:b7:ff:b8:3d:8c:63:ea:e7:
                    cb:5c:83:86:2e:58:31:5a:12:26:b0:57:0b:3c:01:
                    9a:49:4d:56:a1:ab:f2:a0:fe:52:0d:bd:36:9f:ed:
                    98:21:f2:29:92:29:cf:ad:74:07:d0:50:47:d6:97:
                    7a:4e:a3:fa:2e:22:a0:38:b4:5c:26:b1:58:e0:62:
                    63:87:d1:4f:1a:ad:86:dc:2c:74:7f:2c:24:43:5a:
                    c6:91:29:fc:c5:d6:ae:9a:09:98:cf:ba:fe:d8:45:
                    02:76:8d:a6:fb:f1:83:0f:5e:17:b8:d5:36:8a:47:
                    6e:73:d9:d8:d5:26:dd:c5:26:55:4d:15:f2:f2:b6:
                    0c:e5:f2:72:61:a3:07:c2:0d:11:34:71:e0:a6:bb:
                    7c:5a:f5:e8:b6:5d:e9:a9:39:ec:55:1a:1e:88:de:
                    ce:ba:b7:99:84:5a:a2:c6:ac:cb:d8:ad:b6:2a:57:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:D7:E1:82:37:20:8E:94:24:4E:7E:EC:B8:F3:23:BF:4B:80:8D
            X509v3 Authority Key Identifier:
                keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4f:98:e7:ba:eb:80:4c:f2:b8:a3:a5:73:4b:21:0b:c3:61:
         7c:7f:78:8a:08:88:2c:db:c3:7e:82:62:64:bb:32:24:8e:66:
         0c:0a:96:fc:0a:1b:c2:12:15:98:f9:1e:e9:aa:a2:31:33:19:
         e6:6e:32:48:62:cd:3b:fd:95:e1:3a:bf:b0:78:b9:70:ae:67:
         9e:48:44:61:f8:3f:4b:e6:6a:c3:8f:05:f1:d0:4d:3f:de:08:
         47:a6:29:9a:8f:47:ec:b6:41:8a:7f:ab:35:80:8f:51:aa:02:
         36:1f:18:1d:aa:2e:0c:83:de:45:fe:8a:11:b5:ac:62:f7:3d:
         8f:73:4c:4f:16:de:87:d6:cf:24:88:b3:b9:da:c4:0f:6a:e2:
         97:c2:b9:6c:71:58:ba:a9:3d:9c:40:ad:a3:d1:5c:54:11:10:
         57:e8:20:2b:92:d0:f6:9e:e2:06:41:b3:5c:3f:44:20:64:73:
         dd:14:f4:07:88:14:67:86:9e:dc:e0:2d:cc:3b:73:a4:55:2f:
         07:fc:2f:5d:fb:9d:fc:e4:ac:1d:9f:c8:ca:69:96:6c:a1:f6:
         b1:c4:22:4d:61:0b:7e:7f:1a:65:22:8b:c0:90:72:36:9b:7e:
         82:7e:c4:0d:16:88:3a:d2:c0:44:95:a0:c8:b8:2c:b1:c2:e4:
         39:38:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:42:02 2026 by rpki-client