Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
File:                     Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json)
Hash identifier:          mPwIhpTPhwmxDYrwt3AkEcXCvnI9FwlFDV5sxfZDZsc=
Subject key identifier:   99:99:0E:C0:2F:0F:5C:B6:10:AA:6A:39:9F:86:48:5F:F7:D1:58:30
Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
Certificate issuer:       /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Certificate serial:       05A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
Manifest number:          0599
Signing time:             Mon 27 Jul 2026 00:06:10 +0000
Manifest this update:     Mon 27 Jul 2026 00:06:10 +0000
Manifest next update:     Mon 03 Aug 2026 00:06:10 +0000
Files and hashes:         1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: eyIpZaIAkIG4mCxM5mojiD55PD677OMU5ycd86dTss0=)
                          2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: 9ZEEK3IQ8UuFSqgHtrQ6O84JIh+FgFNIqrwN+9CFIi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
                          rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:06:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
        Validity
            Not Before: Jul 27 00:06:10 2026 GMT
            Not After : Aug  3 00:06:10 2026 GMT
        Subject: CN=6a66a0f2-78f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:d0:fb:6b:85:60:21:59:fe:5e:8f:b5:50:
                    5f:ff:9a:dd:5b:b4:3f:d5:d0:00:fb:d7:8b:22:94:
                    d1:b4:25:bb:b6:ba:c2:ef:5b:8e:ad:1e:3d:33:56:
                    51:ba:9d:8f:16:fc:2f:d9:cf:0a:03:85:69:b2:83:
                    a6:6a:07:af:47:e2:43:15:d0:f6:a9:c6:12:3f:be:
                    74:3e:37:a3:8a:71:30:73:90:c8:55:5e:09:94:32:
                    61:16:ed:36:35:8a:31:34:72:72:3a:80:0e:ca:70:
                    ea:a3:fc:4b:c5:88:50:c3:4e:95:92:b8:d5:04:b5:
                    96:73:48:d8:ab:26:52:ae:c4:0c:4e:ea:af:33:ee:
                    55:29:29:e5:86:d8:e7:f9:05:f2:a3:54:56:ab:60:
                    a8:88:f1:12:d2:fb:b9:a5:d3:37:2e:cf:f6:49:ce:
                    2e:ad:4f:e1:b1:42:87:38:b1:f5:9e:2e:31:92:c9:
                    41:29:25:c1:ff:f3:ea:6a:da:77:e5:98:28:9d:7a:
                    80:a1:8a:e6:ed:68:55:73:a6:e7:6d:8e:30:c2:01:
                    65:0c:7b:62:bb:fd:60:3e:30:6b:e5:de:5e:8c:5b:
                    2e:c2:78:52:82:53:9e:f3:81:70:4d:48:d2:06:41:
                    33:1c:e5:69:96:c8:32:28:0a:fe:9f:b0:54:6a:d4:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:99:0E:C0:2F:0F:5C:B6:10:AA:6A:39:9F:86:48:5F:F7:D1:58:30
            X509v3 Authority Key Identifier:
                keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:ad:0d:f0:bf:5f:5c:19:a1:5e:ac:9b:a4:63:e5:94:8e:
         06:f1:59:69:b3:a2:30:01:4c:ed:26:b9:2f:bc:2c:d5:de:ed:
         8b:88:f6:06:29:e7:6a:92:c2:a8:1a:22:ca:71:08:08:99:f1:
         c9:84:89:56:fb:ae:c9:cb:cf:fd:1f:f4:2a:a9:40:e5:c6:8a:
         6e:57:62:c3:b3:a1:00:9b:df:83:09:f6:b2:b7:3b:92:cc:2c:
         e2:e2:01:00:0c:89:f3:5c:53:b5:93:96:9e:5d:b8:b8:67:20:
         08:79:a9:d9:9c:bb:fb:7d:1c:ff:b8:66:2e:ff:b4:b1:32:80:
         1f:ae:f8:05:1f:07:a6:d7:54:87:26:8e:bb:5d:53:43:e4:2b:
         87:cf:1f:ea:c1:95:18:6d:6c:f6:6f:f7:22:d9:a9:10:ea:91:
         3b:f2:5c:5d:84:26:ba:47:d4:40:6d:71:f5:2a:bf:f7:dc:a6:
         34:65:c1:90:6d:77:87:68:88:ec:32:a6:de:d5:99:76:be:86:
         20:e4:e0:af:78:b8:2f:55:5e:c3:fa:bb:18:20:90:3d:23:3a:
         12:82:c5:d8:08:78:b0:3a:78:8b:0b:2c:42:cb:56:e9:99:0a:
         9b:12:3a:e4:03:92:35:3e:d6:aa:cd:44:b2:19:42:b4:91:29:
         3e:bb:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:44:39 2026 by rpki-client