Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
File:                     Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json)
Hash identifier:          M2HDPe2NU7dydx88vzV0TZiumCi8+CULdN//mEKhCvs=
Subject key identifier:   34:4C:53:17:AB:E1:C6:FB:C3:1F:59:BE:74:5D:C4:6C:18:1F:03:3C
Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
Certificate issuer:       /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Certificate serial:       219B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
Manifest number:          56E4
Signing time:             Tue 28 Jul 2026 14:55:48 +0000
Manifest this update:     Tue 28 Jul 2026 14:55:47 +0000
Manifest next update:     Tue 04 Aug 2026 14:55:47 +0000
Files and hashes:         1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: d488zuOxIrRLuTpXDaG11+yRFenbdgZKYcT6sab4n+8=)
                          2: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: eXbj2/2PGJubPsuJy/6g3AgLU0HNFQl847an+DeMHhU=)
                          3: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: N4+8fycTDr0KyyL1T8BnM1QnlOy4E1P+9kvY0kSTWus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8603 (0x219b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
        Validity
            Not Before: Jul 28 14:55:47 2026 GMT
            Not After : Aug  4 14:55:47 2026 GMT
        Subject: CN=6a68c2f4-c900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:c1:f3:1b:4f:d6:e7:32:f3:8b:6c:88:d2:
                    0f:cf:47:df:2e:28:e0:c0:91:3a:45:a6:09:ab:a8:
                    bc:42:44:5b:59:50:87:a6:f6:74:60:5f:fa:3b:38:
                    cd:d6:49:8f:47:e3:50:5d:fa:47:ad:15:ff:a0:17:
                    22:1a:a9:8a:b6:16:0d:1c:1e:bf:25:dd:b1:6b:c0:
                    4e:f6:85:dc:2f:43:d2:fb:e6:04:bb:0c:38:5a:fd:
                    61:00:5c:19:43:8c:de:c0:29:68:8f:1c:d1:49:82:
                    0d:68:71:cd:c4:1e:1d:cb:53:91:be:c3:03:94:c7:
                    e3:69:43:76:80:d1:b9:1f:bb:9f:f1:70:6b:26:03:
                    f5:98:11:07:a8:79:b1:a6:3f:64:76:aa:60:29:a5:
                    6f:2c:ef:8e:63:b6:92:4e:54:cd:f1:87:93:fd:bf:
                    3f:76:e9:d0:44:b6:f1:a6:81:f9:06:40:b1:52:0b:
                    f3:2e:e8:aa:0b:a9:db:a6:83:55:76:c1:e5:e5:36:
                    e4:8a:72:7b:83:89:39:52:0b:b4:ad:1f:15:d9:37:
                    8b:ff:24:e8:86:3d:ea:35:c6:04:17:67:a2:13:26:
                    42:cc:d3:f3:b8:ff:e1:79:9e:19:bf:41:20:30:0e:
                    2c:5f:b7:1c:1f:bc:65:80:00:e5:eb:e9:14:81:c4:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:53:17:AB:E1:C6:FB:C3:1F:59:BE:74:5D:C4:6C:18:1F:03:3C
            X509v3 Authority Key Identifier:
                keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:57:f9:bc:e8:21:05:35:35:95:68:af:ee:6d:91:ae:d4:74:
         73:c5:74:65:c2:60:8c:fc:21:e1:30:42:c5:e3:e9:3e:21:9e:
         1d:0e:da:6c:99:49:e9:ec:97:9f:03:ea:c0:0b:7e:ba:93:cd:
         38:22:c1:54:02:18:5b:9c:2c:8c:ff:56:a6:b9:d4:d9:ed:10:
         55:1c:43:c2:0f:f6:71:38:e6:59:b1:49:ea:66:8a:dd:2c:f3:
         55:92:0a:af:21:10:fd:71:25:e8:a8:37:4e:af:4b:e9:58:b4:
         84:87:47:90:ce:c2:d3:1c:04:f2:1e:bd:74:68:1d:c0:34:f2:
         0b:13:cd:ee:68:c6:76:d2:18:5a:57:ef:39:4b:e2:86:28:c1:
         cf:9c:5d:66:b6:9e:37:7f:54:9d:01:9d:3a:75:aa:49:44:b7:
         16:80:e3:ea:64:52:4e:8c:3f:7e:4d:13:37:e5:45:32:7d:81:
         b1:d7:a4:1a:8a:b2:cb:95:38:a8:e7:0d:09:40:d3:da:2b:a1:
         41:c7:ff:22:d2:8d:60:4a:55:88:f4:14:62:2f:b0:83:71:db:
         8f:90:4e:7e:0b:30:bb:51:98:19:7e:c9:d0:75:71:92:eb:26:
         ee:c7:aa:b1:5c:14:3e:a3:61:0a:b1:01:43:b7:6e:5c:b3:58:
         9c:c6:4c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:26:37 2026 by rpki-client