Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
File:                     qG2L-RW00uHRHYfsP2pwVPETKeg.mft (raw, json)
Hash identifier:          SIuwi49qBUd3Sk+9SRYIW3AFhI3OFULElGUk0lv+lvo=
Subject key identifier:   03:B9:48:BE:AD:71:4A:73:D8:CF:23:C9:ED:10:43:54:2F:8C:5D:B1
Authority key identifier: A8:6D:8B:F9:15:B4:D2:E1:D1:1D:87:EC:3F:6A:70:54:F1:13:29:E8
Certificate issuer:       /CN=A918C553/serialNumber=A86D8BF915B4D2E1D11D87EC3F6A7054F11329E8
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
Manifest number:          27
Signing time:             Mon 27 Jul 2026 11:10:15 +0000
Manifest this update:     Mon 27 Jul 2026 11:10:15 +0000
Manifest next update:     Mon 03 Aug 2026 11:10:15 +0000
Files and hashes:         1: qG2L-RW00uHRHYfsP2pwVPETKeg.crl (hash: N06AodXW8t7grgJ1P59Wrzjr/vKYLpIjQh0wYsmFHFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.crl
                          rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C553, serialNumber=A86D8BF915B4D2E1D11D87EC3F6A7054F11329E8
        Validity
            Not Before: Jul 27 11:10:15 2026 GMT
            Not After : Aug  3 11:10:15 2026 GMT
        Subject: CN=6a673c97-7d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:79:a5:eb:1d:c1:c5:6e:9f:c7:2a:98:a9:
                    3f:08:e3:ed:11:08:30:cb:47:3d:1e:d4:36:cb:75:
                    a8:2f:ad:b3:a9:9b:c2:63:25:64:e9:00:55:99:df:
                    db:b2:9a:ae:e5:b6:5a:79:bf:a3:23:af:78:bd:ac:
                    8b:dd:03:61:50:39:3e:ee:f1:00:de:2c:38:84:44:
                    32:1b:c7:9c:c1:bf:f0:2b:87:cb:6d:38:34:b1:00:
                    be:68:07:4f:51:1a:6b:fe:ec:68:6d:35:c3:57:b7:
                    47:57:7b:2f:04:68:03:44:f6:ae:12:08:8d:38:d7:
                    43:a9:ef:1c:ba:21:ee:fd:71:3a:99:d2:60:1b:15:
                    d5:04:bc:7a:ef:88:29:66:f5:69:00:36:ba:44:e0:
                    be:96:69:c3:d5:ab:60:54:d1:7c:a6:74:27:f5:17:
                    94:aa:16:79:ad:b2:84:de:5c:78:5a:7a:b0:a4:ee:
                    94:24:fc:9f:bc:14:09:44:df:04:62:1f:1f:72:95:
                    fe:93:79:32:f2:52:0c:88:40:7e:27:f2:21:be:1e:
                    30:fe:3d:3d:d8:de:c2:42:2b:32:28:57:8b:97:bc:
                    2e:9b:dd:5c:f8:b5:fa:09:cb:2a:79:40:33:c2:21:
                    18:63:e1:6c:6b:ae:d1:c2:f4:05:a3:5e:16:e4:48:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:48:BE:AD:71:4A:73:D8:CF:23:C9:ED:10:43:54:2F:8C:5D:B1
            X509v3 Authority Key Identifier:
                keyid:A8:6D:8B:F9:15:B4:D2:E1:D1:1D:87:EC:3F:6A:70:54:F1:13:29:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:39:a9:38:21:45:a0:16:d0:db:28:c4:7b:56:a0:48:f4:8e:
         9b:aa:c7:f5:dc:f2:87:ea:3c:7b:88:2d:bd:83:53:e1:c3:7d:
         44:6d:c1:6c:b9:16:43:e2:61:ce:31:d3:d1:cd:d8:9c:e7:da:
         0d:1a:03:48:31:f8:2b:7a:3f:96:6b:1b:bc:84:05:a7:d4:db:
         c7:0e:15:5f:bc:cc:08:f3:27:93:fd:75:f5:0c:7f:a5:15:36:
         bb:d8:cc:48:14:5a:dd:1d:5f:2c:2a:8c:52:d5:9f:e8:e5:28:
         72:9b:01:53:0f:3b:e8:27:fb:60:d9:00:2c:bf:13:41:13:c1:
         65:db:3d:3d:85:d4:7e:94:02:68:41:da:46:3b:41:a4:3d:1b:
         53:4d:11:64:62:3f:0d:6b:63:d3:25:ad:06:f9:3a:b5:29:d3:
         e4:57:18:01:45:6a:c7:a5:87:7c:da:70:c2:93:7e:54:04:ac:
         4e:9b:17:20:cd:50:28:a2:64:d6:52:8d:be:33:1b:f1:47:6e:
         c0:78:66:56:a4:3f:80:34:a5:76:82:d0:22:8e:2b:e2:06:44:
         ea:ab:b6:c4:39:f8:4b:54:be:d7:e8:71:e8:bd:7a:9b:9c:4b:
         48:76:a6:03:8d:ad:f9:c1:3e:ca:1c:b4:f2:65:f9:0a:bd:87:
         2a:6b:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:00:26 2026 by rpki-client