Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          B7wp+UbJIc6kbT8h/6wYYZZKCJZT8rylPlrqMj/8N6k=
Subject key identifier:   B2:A1:DA:72:92:AF:0C:65:BD:F8:B6:8E:56:4C:44:65:E8:FD:7B:24
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       05F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0E13
Signing time:             Tue 28 Jul 2026 21:26:12 +0000
Manifest this update:     Tue 28 Jul 2026 21:26:11 +0000
Manifest next update:     Tue 04 Aug 2026 21:26:11 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: 2sf19QihOB9NzUbTKISqkOD4sIoCU23g+CSVFJLKF0E=)
                          2: A291634816B711ECBD752D47C4F9AE02.roa (hash: 90gg9p9hqCqXZqb9rZEtlIQBjTiadOFi/oal1s/i89k=)
                          3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: f2I2JUyPVwawA2Jitwp6FbWujLi61XO5prWcR/JL+8o=)
                          4: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: eXwz4PBP+rkDjztNy2SDSGV8UgeMg6eew855+0UUdP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jul 28 21:26:11 2026 GMT
            Not After : Aug  4 21:26:11 2026 GMT
        Subject: CN=6a691e74-93a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:e4:45:7d:2f:5f:4d:3e:d7:7d:eb:04:ef:
                    70:24:0b:03:11:22:1c:e3:7c:da:6c:ab:17:87:43:
                    93:b6:e1:a9:50:86:70:4a:8d:a2:86:23:65:91:1b:
                    9b:1a:33:ba:86:3d:45:7e:1b:e3:4f:45:f7:d2:0b:
                    f6:64:6b:03:fb:77:98:6a:7f:09:df:ea:83:d4:bf:
                    62:dc:7a:d4:2d:0c:a0:cb:79:58:65:16:21:d7:34:
                    c0:21:29:d5:83:57:6a:25:65:aa:a7:ec:db:5c:66:
                    8a:76:25:1e:39:03:5d:33:cf:14:a3:eb:16:92:09:
                    f5:fe:6d:fe:94:e8:17:36:c2:37:cd:2a:e2:70:2a:
                    78:04:f7:06:0a:dd:0d:0b:88:2c:a4:af:ed:67:96:
                    df:b1:d2:23:93:80:7e:73:83:1b:3a:0f:d3:32:1a:
                    0b:7f:9f:82:fe:d3:1f:58:b4:c1:2d:7a:1b:5d:92:
                    8a:ff:70:a9:4a:d9:3d:87:c0:de:d4:80:70:ab:93:
                    fa:18:f8:b8:5b:7e:58:da:00:85:3e:ab:be:d8:bb:
                    74:47:7f:2a:8e:a0:b7:4f:0a:b8:91:a0:fa:99:9b:
                    1c:86:53:d1:a6:ab:4e:b0:99:25:37:d8:27:28:8d:
                    4c:c7:3f:e9:45:5c:27:24:da:6b:cf:bb:d4:e4:74:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A1:DA:72:92:AF:0C:65:BD:F8:B6:8E:56:4C:44:65:E8:FD:7B:24
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:34:b1:9a:8c:be:e0:67:f4:cd:10:9c:c6:e1:57:31:ab:d0:
         29:1d:87:05:c4:a9:df:de:be:99:2d:27:39:2a:e3:13:9e:5b:
         18:87:2c:19:ac:61:76:0b:51:86:3e:68:49:c3:0b:b8:27:ff:
         2c:c8:a6:0e:ca:70:5a:08:0b:d0:e7:c5:40:41:9d:69:d7:12:
         fa:cf:c0:ca:9f:66:f2:46:79:d4:58:13:fc:e6:17:5a:ce:52:
         16:63:4a:30:00:3f:bb:9c:35:70:29:4f:5b:51:1e:ca:5d:e3:
         da:94:f0:bd:8e:fe:f8:45:6e:c8:69:41:3f:90:4c:8e:6c:3f:
         4d:9a:00:14:c1:44:03:37:76:95:da:1f:25:82:94:a4:91:f0:
         96:97:fa:2b:de:26:f7:06:e5:11:1c:27:ad:3c:b4:6b:52:32:
         9b:d2:ff:0b:53:19:7c:a7:79:7f:7e:e3:c9:0e:81:25:c4:c5:
         af:7e:68:d2:0c:83:a3:f5:33:16:cf:d6:ea:b5:f5:8b:7b:96:
         d5:b9:a9:92:5b:2c:46:4b:ec:12:f7:2b:b8:b2:ab:52:8d:c6:
         07:86:09:4b:94:f6:ed:2c:5a:31:70:1d:22:31:af:ad:32:16:
         e0:80:95:a8:64:8c:80:7b:6e:6d:0f:91:35:ce:76:64:64:f5:
         a8:8f:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:37 2026 by rpki-client