Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
File:                     qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json)
Hash identifier:          YB28PCrDBCTSDnV64DfiZ42RZ5CDmux7X5Ngy40+plE=
Subject key identifier:   6A:E5:38:0C:88:B2:54:F3:86:75:E6:E4:82:61:A6:1E:DE:F1:BD:63
Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
Certificate issuer:       /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Certificate serial:       0473
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
Manifest number:          046A
Signing time:             Mon 27 Jul 2026 01:11:40 +0000
Manifest this update:     Mon 27 Jul 2026 01:11:39 +0000
Manifest next update:     Mon 03 Aug 2026 01:11:39 +0000
Files and hashes:         1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: x84XlWkKb9q/iM3RLMK+vfNBV25aEZtOVxDMhGkPPQA=)
                          2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: 6lKTziOdOqmTb1PCIIO9sZDwLoUVQCnoQ63nhna/M3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
        Validity
            Not Before: Jul 27 01:11:39 2026 GMT
            Not After : Aug  3 01:11:39 2026 GMT
        Subject: CN=6a66b04c-2def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:1f:14:3d:56:f6:95:88:0f:0b:56:62:75:
                    4a:55:d2:b9:aa:e6:b9:e9:c5:7e:f8:b5:79:b9:12:
                    4a:62:16:bb:04:f3:33:6a:12:51:0d:ad:21:5c:df:
                    d6:c4:4c:8e:62:95:46:9d:0f:ac:57:55:35:87:ce:
                    42:da:90:72:8e:b4:17:0f:d6:35:ee:b3:0d:5d:d9:
                    af:1f:bf:74:ae:cc:51:00:24:a9:be:99:76:11:44:
                    45:9d:44:68:f8:3d:62:3e:55:c6:22:38:f3:10:60:
                    42:5b:af:e2:a2:a0:f5:b9:d0:77:fb:97:0a:ed:ae:
                    28:db:2e:2b:0a:62:75:2a:23:1a:d9:fb:09:e2:0e:
                    2e:e9:b9:31:89:e6:52:42:dc:90:99:94:56:91:ef:
                    cb:75:e9:e5:b7:62:e8:9f:16:f6:02:84:e6:fd:2b:
                    d1:af:e7:85:f9:7f:0d:88:0a:95:17:47:e8:55:b4:
                    e5:10:3e:0b:3d:a0:7f:45:16:e0:26:e7:b1:79:a2:
                    65:c7:8c:f9:85:bb:52:1e:80:35:79:a0:81:05:c2:
                    c0:26:fe:da:0d:d4:f1:f1:1c:76:ea:89:2e:d9:57:
                    c0:e4:a4:c8:4b:4c:9f:86:b4:74:78:2e:b4:b0:be:
                    25:38:82:43:8d:3f:86:32:b6:0d:bc:61:82:c3:f5:
                    47:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:38:0C:88:B2:54:F3:86:75:E6:E4:82:61:A6:1E:DE:F1:BD:63
            X509v3 Authority Key Identifier:
                keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:f6:42:2f:d3:01:93:04:4e:7c:66:09:fd:eb:d8:2d:aa:
         d8:27:f8:91:8f:b8:fe:e0:52:a1:90:e8:d2:98:90:48:a5:94:
         b4:ab:19:86:fc:ae:40:f4:31:62:d2:cf:c4:16:c0:70:74:35:
         2a:d9:0d:e5:f6:4e:f4:bb:e0:66:b3:cc:e0:8f:ca:e3:31:22:
         ca:54:e9:52:bc:f8:ce:c2:4e:41:e3:06:67:42:16:20:cd:55:
         1e:42:21:b0:cd:1f:24:78:c6:45:91:66:c3:95:db:d3:25:fc:
         f3:7d:c4:88:81:8c:3e:2e:3c:ad:89:5a:cf:14:2f:04:1f:62:
         80:d8:9f:eb:4d:df:8a:50:5f:ad:78:02:3e:36:90:02:42:46:
         fb:06:be:32:0d:93:58:d2:eb:6f:4a:1b:93:82:18:68:03:05:
         b1:4a:b9:9e:b0:1b:fa:02:92:e5:cc:c2:4d:25:f2:03:1c:e3:
         4f:2c:26:3c:96:ae:1a:fe:e6:17:da:a7:62:ad:e2:b3:0c:68:
         06:03:8e:75:75:dc:5b:ba:65:4e:98:24:d5:1a:9c:3d:dd:0c:
         b1:90:ed:eb:8c:15:d1:e0:9f:0a:50:c6:0c:14:2d:05:33:1d:
         51:e1:76:d9:e3:87:bd:81:5b:a0:13:88:04:73:53:6b:23:5f:
         ad:8d:49:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:21 2026 by rpki-client