Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft
File:                     qLttedj8Wklcs7U8aZYmG3aVywU.mft (raw, json)
Hash identifier:          Pg6zTJLfPf9kd0ncSyNKLDd5x/WyO+upek/qTdxY0ys=
Subject key identifier:   14:8C:2C:68:03:37:F3:A1:07:5B:55:D3:4E:03:B9:E6:F3:6F:35:2B
Authority key identifier: A8:BB:6D:79:D8:FC:5A:49:5C:B3:B5:3C:69:96:26:1B:76:95:CB:05
Certificate issuer:       /CN=A918C553/serialNumber=A8BB6D79D8FC5A495CB3B53C6996261B7695CB05
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qLttedj8Wklcs7U8aZYmG3aVywU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft
Manifest number:          28
Signing time:             Wed 29 Jul 2026 10:24:53 +0000
Manifest this update:     Wed 29 Jul 2026 10:24:52 +0000
Manifest next update:     Wed 05 Aug 2026 10:24:52 +0000
Files and hashes:         1: qLttedj8Wklcs7U8aZYmG3aVywU.crl (hash: pOFVa4gSYlOZdhlJlDGgAyiGtCmMgiINpuZ297S1nro=)
                          2: C0D3BF824D5C11F18D7C59B78F833773.roa (hash: hI4EfUAJ4cvG9UsDM9/RzADC4zdxChx3k/UyKORIo9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.crl
                          rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qLttedj8Wklcs7U8aZYmG3aVywU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 10:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C553, serialNumber=A8BB6D79D8FC5A495CB3B53C6996261B7695CB05
        Validity
            Not Before: Jul 29 10:24:52 2026 GMT
            Not After : Aug  5 10:24:52 2026 GMT
        Subject: CN=6a69d4f4-d16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f1:95:e9:62:b8:8f:ec:d5:3d:c4:68:80:a2:
                    1d:9e:5f:5a:f6:89:7d:58:c2:8a:11:32:66:67:7a:
                    45:74:71:ad:4b:75:2c:82:fe:75:b0:98:3e:a2:89:
                    d9:b9:13:fa:31:c9:9d:9d:a6:7d:e2:5c:a0:43:0c:
                    30:6e:72:87:5c:9c:ef:2d:77:41:41:fc:33:ca:1f:
                    8d:3c:a9:aa:48:e7:09:3e:51:98:c7:18:26:81:73:
                    37:e1:a8:2c:4a:2a:13:a8:02:6d:91:95:10:81:a4:
                    e9:18:2d:b0:46:a8:16:84:99:2d:c0:74:0e:68:eb:
                    3c:5d:39:e7:36:6a:6c:ee:82:5b:98:19:e8:61:86:
                    ba:e8:10:95:f6:f7:4c:01:43:b5:8a:dc:6c:28:dd:
                    fd:fa:6e:e2:36:13:be:c7:f0:98:38:55:dd:04:79:
                    70:ef:62:4a:47:d3:92:6a:1e:bd:71:1d:59:f1:f3:
                    da:5f:62:aa:0a:2c:62:7f:99:ce:5f:6b:39:19:06:
                    16:0c:16:b7:17:09:46:8e:09:c2:3e:10:58:3f:e5:
                    26:d1:4d:ae:6b:d8:bc:d5:7c:a2:54:a4:30:83:4a:
                    14:bc:9f:3f:8e:38:04:7d:54:70:db:6d:85:3e:81:
                    07:02:82:c8:c6:6b:68:1d:09:b8:f5:55:84:f9:11:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8C:2C:68:03:37:F3:A1:07:5B:55:D3:4E:03:B9:E6:F3:6F:35:2B
            X509v3 Authority Key Identifier:
                keyid:A8:BB:6D:79:D8:FC:5A:49:5C:B3:B5:3C:69:96:26:1B:76:95:CB:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qLttedj8Wklcs7U8aZYmG3aVywU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C553/FFF5CCF64D5B11F1A1CE7A888F833773/qLttedj8Wklcs7U8aZYmG3aVywU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:cb:bc:d3:38:67:21:be:6e:56:b5:0e:87:ba:a7:67:10:
         f7:1d:d2:62:46:61:56:34:97:62:53:62:38:5c:da:6d:dd:19:
         92:d7:34:df:bc:75:8b:39:a4:97:8c:b8:39:0b:ef:3e:4a:5b:
         04:83:13:1a:2b:64:d0:d8:4c:9f:f6:6a:19:e9:b8:0c:5c:bc:
         23:38:f4:84:93:6a:00:c3:37:d9:78:f5:51:32:1c:8a:7f:99:
         d7:63:ce:64:6b:7e:07:b6:f7:fc:0b:08:68:8e:7d:d7:9d:4c:
         a2:da:81:c8:4c:3c:78:81:d8:e7:ac:74:4f:cd:f4:1b:1c:56:
         f7:2d:29:1b:fb:ac:5c:c3:4c:bd:3d:9a:e2:d2:50:fb:d3:8a:
         aa:b1:62:dc:4d:05:95:a5:b7:c4:df:fd:3c:dd:26:67:99:96:
         94:7f:67:00:d8:72:44:3a:02:24:6d:8c:ab:b4:f1:9d:75:78:
         9d:15:c9:1f:7c:09:b4:ae:11:51:bd:fe:00:ec:39:5e:b2:27:
         6d:f7:1d:d8:1c:cc:75:fa:44:68:da:a9:23:01:8b:d3:3a:12:
         38:0c:53:d3:09:bc:7d:16:cb:9e:48:e8:c7:3a:0d:bf:6c:57:
         55:7f:b9:98:6d:65:e7:0a:e5:fe:88:de:84:fb:9a:4b:54:d7:
         90:ca:ec:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:54:35 2026 by rpki-client