Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File:                     qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier:          sTVTdi+aVyigeNMuavuyc9riEY383QxA6dayM8q0AII=
Subject key identifier:   2C:E9:D2:9D:E4:BE:5C:04:AA:ED:1E:A9:3D:42:37:1E:90:D6:3E:D9
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer:       /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number:          024C
Signing time:             Wed 29 Jul 2026 03:25:34 +0000
Manifest this update:     Wed 29 Jul 2026 03:25:33 +0000
Manifest next update:     Wed 05 Aug 2026 03:25:33 +0000
Files and hashes:         1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: uKxmoPqc2lOxnUZBNd5Uh4obbCHH2rQdUENz59FoCGQ=)
                          2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: zpm4WI/rpoX+PhSp4A1fa7cTi+uUSsWISqGvT07i/hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
        Validity
            Not Before: Jul 29 03:25:33 2026 GMT
            Not After : Aug  5 03:25:33 2026 GMT
        Subject: CN=6a6972ae-4826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:cb:75:bf:e7:b8:e0:ef:c6:41:7f:7f:1f:
                    98:27:d8:a6:2a:84:91:77:b0:d8:3d:57:83:67:d0:
                    15:ed:71:31:ba:e5:b8:18:ae:01:70:06:a8:8a:6b:
                    38:79:9d:0c:70:58:89:ef:a4:2c:b8:ea:09:3c:93:
                    22:0a:6d:60:d5:11:ea:6c:a0:07:d7:a7:4a:21:c3:
                    7f:25:c2:0e:43:33:a5:55:dd:ae:38:09:64:ec:f7:
                    c7:b2:50:ee:4f:94:cb:97:fb:dc:5f:f0:df:3f:d5:
                    8f:72:20:35:87:5f:2c:94:fc:32:4c:5e:11:de:19:
                    7e:88:6f:47:72:4e:8e:81:31:f6:22:2e:77:ff:4b:
                    bf:2d:13:fb:63:f8:e9:ca:03:de:d8:05:16:e2:a4:
                    06:db:43:4e:fa:07:45:22:8d:ee:9d:41:d5:85:4c:
                    d3:0b:f0:2e:3f:0e:93:56:72:ee:68:11:ad:27:32:
                    6b:d0:d9:01:d8:4e:58:f4:dd:d2:92:1a:3a:74:99:
                    ac:76:b5:78:9c:94:6d:22:74:59:d1:a8:5b:a3:4f:
                    a0:dc:25:48:47:5e:ce:72:10:25:a4:08:d8:a5:97:
                    2a:5b:e7:00:eb:dd:55:6c:3f:69:bf:73:6a:1c:4c:
                    2e:c3:e9:69:9a:e2:39:74:5b:4a:46:e5:16:a2:d7:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:D2:9D:E4:BE:5C:04:AA:ED:1E:A9:3D:42:37:1E:90:D6:3E:D9
            X509v3 Authority Key Identifier:
                keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:39:8f:a1:fe:18:ae:4b:ec:61:32:9e:7c:12:01:e9:8f:05:
         26:4c:50:cf:0b:db:be:68:a2:b7:d6:0b:a8:4f:f0:ad:62:a3:
         27:a1:f7:8d:f1:8b:6d:d0:e4:82:ca:c3:7e:14:c1:84:d5:82:
         22:b9:65:85:aa:58:e0:78:9b:fb:f3:5a:39:a2:36:26:e6:21:
         30:28:df:48:14:48:00:31:7d:df:56:a3:29:c7:4b:37:88:75:
         dd:bd:8f:27:1f:61:96:a4:60:36:35:f8:4c:13:aa:eb:3b:ff:
         e3:3a:98:f4:ed:e8:7d:a9:8d:2f:ab:29:0e:d8:27:66:b2:6a:
         f0:1e:e0:ab:87:e5:b0:ae:15:1b:8f:21:1d:3f:e4:1a:10:90:
         65:73:a7:c8:f4:2d:a0:13:71:9c:7c:80:bf:c8:fd:13:61:5d:
         cc:3d:29:4f:e9:f8:3d:a5:ce:7d:4d:6b:10:14:53:07:26:4d:
         94:d5:1d:a7:35:99:3b:6b:e1:88:14:2b:9c:f2:ed:8c:e6:7e:
         15:cf:f5:fb:68:f6:64:37:cf:95:1d:5f:b3:3b:c4:67:dc:90:
         c5:2f:8f:56:e5:dd:54:0f:5e:a3:04:c5:bd:6f:9f:27:9b:d5:
         db:8a:fd:3d:ab:7e:c3:e3:3e:4b:ec:e0:ff:76:79:15:5a:82:
         31:5f:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:16:39 2026 by rpki-client