Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
File:                     QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json)
Hash identifier:          OQPWN18bUFA2vxqBEUoFMq5WPRxeMjHEbi1OLei+KnE=
Subject key identifier:   EF:2F:6E:23:CD:90:38:7F:6E:84:48:C6:61:FD:19:E3:BE:80:23:C0
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Certificate issuer:       /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
Manifest number:          028D
Signing time:             Mon 27 Jul 2026 03:32:18 +0000
Manifest this update:     Mon 27 Jul 2026 03:32:17 +0000
Manifest next update:     Mon 03 Aug 2026 03:32:17 +0000
Files and hashes:         1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: v+8WBSSaQAmYs+sr1+qeB9VIEmZdY7VQfKDQs4WQU4M=)
                          2: 9E1DAA4A7D6B11F1802936357FA30FBC.roa (hash: Hsov6BU0z8az1Wr0ISWSrVfJM+rDAtlUR7qSGNNPaWs=)
                          3: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: fNeBh4F/Z5Lr0cdIogNFqAUQL3+lXFo8GVNnYQF5cVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
        Validity
            Not Before: Jul 27 03:32:17 2026 GMT
            Not After : Aug  3 03:32:17 2026 GMT
        Subject: CN=6a66d142-2679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e0:d6:e1:5a:c8:4a:26:78:96:72:1e:81:d4:
                    00:86:77:bf:2b:3f:d4:f2:6e:49:65:cd:f7:a5:b3:
                    25:28:ec:e6:03:6f:e4:a2:77:97:b9:4d:ef:68:83:
                    a1:31:fc:f9:43:10:6d:ed:92:2e:44:87:42:26:21:
                    d5:80:d7:12:de:20:27:8e:c5:32:e2:cd:ab:40:52:
                    3b:08:05:dc:fe:44:f4:a7:a5:b0:5b:45:18:7a:d2:
                    f1:79:86:ca:9a:44:63:fb:c6:c2:1d:aa:09:68:f6:
                    68:85:0e:09:0a:1c:f2:9a:8d:f9:f2:7c:48:de:37:
                    e5:cd:2b:06:23:2f:15:5a:89:c0:00:eb:e1:a8:c5:
                    a8:80:58:65:cd:57:fe:01:d4:39:a0:ae:f2:14:17:
                    f0:1e:8b:30:2c:6b:0f:ee:1d:11:d2:27:c8:74:65:
                    ab:4d:a2:10:e0:65:d6:5d:f8:58:c7:54:c3:7c:65:
                    98:a6:02:f9:96:6a:13:92:a7:52:89:9d:ce:47:80:
                    21:d3:51:7e:41:ff:68:9c:b9:fd:df:44:6c:4c:ac:
                    47:de:3c:4b:18:99:c0:a5:09:a6:ac:ae:b7:e8:b2:
                    4a:9b:3a:c6:41:64:be:ac:ed:bc:d1:19:3a:ba:af:
                    ec:be:36:54:92:76:40:4a:c9:2a:c5:9e:db:da:14:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:6E:23:CD:90:38:7F:6E:84:48:C6:61:FD:19:E3:BE:80:23:C0
            X509v3 Authority Key Identifier:
                keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:96:84:59:85:0f:a8:da:c9:32:a0:93:40:a8:d1:01:08:
         82:87:2e:94:38:4c:c7:80:9e:12:1b:39:18:41:45:23:5e:4b:
         f7:1b:ef:d8:9d:46:cc:af:8a:b3:14:76:be:29:34:de:2d:78:
         9c:a2:f0:95:96:c8:76:fd:ea:7a:40:2b:67:fa:ef:2e:44:75:
         fa:52:81:9e:a4:18:b8:53:75:4a:87:f7:04:0e:fc:da:e0:6d:
         8b:0a:d0:34:e4:87:2c:61:a8:ec:ff:0c:43:eb:74:62:7e:1a:
         b4:79:d7:58:b0:e6:27:fa:b6:43:dd:90:a2:1f:cd:d5:41:bb:
         a7:11:4f:60:2e:1e:41:6d:f2:41:8b:55:d5:7b:06:a1:e3:0e:
         22:11:0a:ef:4e:f5:00:c3:d6:f6:68:27:64:7a:35:db:37:98:
         af:55:cc:f5:a8:51:b2:b0:ca:e7:77:66:88:d2:c5:a7:29:63:
         76:42:c6:2b:db:73:a4:6b:76:f9:a1:c3:b5:05:f9:96:62:fa:
         e7:e9:84:e2:6c:34:1d:90:41:43:89:57:68:58:6e:3a:fe:19:
         86:0c:1a:dc:44:4b:c2:70:9c:ef:73:0d:62:09:09:12:2c:cd:
         f2:35:2f:21:7a:cb:0a:5c:cf:35:b1:2a:36:5e:c2:af:61:ec:
         93:fc:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:24:54 2026 by rpki-client