Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File:                     Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier:          nquwyM8VIGwD1Z0Ml0kUOGB8/UGdsp49T/EQOWoOMsw=
Subject key identifier:   D4:6B:54:9E:AA:1E:2D:31:CF:D4:76:02:89:76:87:E8:10:22:C6:45
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer:       /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial:       0A22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number:          09FE
Signing time:             Wed 22 Jul 2026 20:15:58 +0000
Manifest this update:     Wed 22 Jul 2026 20:15:57 +0000
Manifest next update:     Wed 29 Jul 2026 20:15:57 +0000
Files and hashes:         1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: +0NkQ9NEviWnvNCvmWBMECl41XU9EwgBMo4D3c71R54=)
                          2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: G8tEalgIYlF459jNjIZOJNDqLr5DDsJR+CWVbE3khX8=)
                          3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: 61z0KuT36nUVuAoy7v3bsXZ/PxDyaJ+n/vqrzGvGZYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
                          rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2594 (0xa22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
        Validity
            Not Before: Jul 22 20:15:57 2026 GMT
            Not After : Jul 29 20:15:57 2026 GMT
        Subject: CN=6a6124fe-b769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1a:95:96:9a:8e:d4:8d:20:cc:f8:c9:9e:33:
                    d4:81:97:07:ef:f4:67:77:9a:94:e4:60:38:2d:af:
                    82:2b:c1:be:8b:df:82:39:73:e2:32:e4:ce:40:63:
                    8f:ac:bb:1d:07:96:54:d8:85:7e:fa:8a:0c:ba:89:
                    aa:bf:86:60:d3:ba:04:e4:fe:f2:8f:92:5a:72:c8:
                    2d:aa:0b:41:a8:8d:3b:c3:e4:0b:8f:04:05:06:e7:
                    c2:c9:47:4e:fb:0e:b4:cf:e0:54:37:9d:64:ab:fa:
                    9d:52:e0:fa:b3:0f:38:ea:e3:7b:1d:cc:7b:0c:d7:
                    37:a4:af:a3:30:97:4b:c6:ce:17:c0:18:9c:bb:44:
                    a6:ab:1d:a3:09:a6:3b:52:8b:8c:6f:9a:b6:6d:a4:
                    55:52:12:e9:63:6c:32:b3:13:ed:0f:1c:de:29:50:
                    58:c9:ca:61:1b:cc:a7:8e:e0:c2:d0:da:f4:39:64:
                    b9:4c:91:94:0a:da:d9:72:70:55:6e:5f:1b:bf:3b:
                    bb:3b:f0:08:4d:e6:57:da:a5:c3:d4:eb:8a:a3:4e:
                    ba:85:58:37:16:11:23:0a:1b:bf:2f:64:33:f1:ec:
                    f9:d5:fd:59:13:45:c6:93:4b:e2:25:76:87:d5:32:
                    eb:5f:6d:a1:52:f2:cb:a0:64:f9:5d:13:d5:eb:3c:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6B:54:9E:AA:1E:2D:31:CF:D4:76:02:89:76:87:E8:10:22:C6:45
            X509v3 Authority Key Identifier:
                keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:71:9a:cb:50:48:18:3d:0c:a3:0c:28:54:05:95:11:3b:2d:
         a4:e5:dc:a7:a6:01:7a:d9:40:7e:b0:de:2f:b8:56:06:dd:36:
         94:af:4b:d9:06:bc:08:c8:73:e6:d7:f3:bf:9f:3c:de:4c:ae:
         b3:50:f9:b3:8c:a1:06:fd:3a:26:ef:5f:4a:fc:3b:5b:33:f4:
         58:9b:ff:39:80:c0:e7:f4:ef:5c:10:e0:07:81:01:9b:dc:c9:
         94:58:47:46:b6:da:42:eb:91:11:e9:7e:4e:e8:0f:12:b9:0e:
         c6:3a:1e:ba:c1:16:7c:20:00:a3:01:65:dd:c3:fb:6f:44:4c:
         01:70:d3:82:55:b1:01:c4:b3:4d:c8:f6:d7:57:52:d4:5b:ed:
         21:bc:7e:8f:89:d4:48:8a:7b:56:d8:f1:89:2b:50:57:e5:00:
         44:ec:4f:3c:6f:39:21:84:a0:21:11:4d:cc:dd:8f:e4:e0:cc:
         af:76:61:54:75:06:8f:23:ec:bb:6f:bc:82:e1:6c:e7:59:0d:
         81:c9:c4:30:0d:e7:30:e8:4f:94:ab:54:40:2f:92:e8:2d:65:
         3e:45:28:3c:1c:5b:46:5d:7e:67:00:ef:ab:a6:51:08:c4:e0:
         21:a6:17:e5:36:a8:68:cd:8f:36:19:2c:7f:03:a7:52:81:53:
         9e:ba:5f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:33 2026 by rpki-client