Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File:                     qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier:          ILTy0KOKQLKcK7n8XAhCYGGmPVihnQGSWxeS8ll/U1s=
Subject key identifier:   EF:E6:F5:A4:B0:BB:07:D9:F4:AF:BD:94:16:39:71:65:00:8C:8B:9B
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer:       /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial:       0289
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number:          0281
Signing time:             Thu 23 Jul 2026 03:08:09 +0000
Manifest this update:     Thu 23 Jul 2026 03:08:08 +0000
Manifest next update:     Thu 30 Jul 2026 03:08:08 +0000
Files and hashes:         1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: oPyU/UGVuoGu2MZ7zzVtr6VddrJld+TaBW0fEc43Oaw=)
                          2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: Q3iqUPNxpMUTGIgTwjjfM3K9Qqme00bVcKDIrn27a8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
                          rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
        Validity
            Not Before: Jul 23 03:08:08 2026 GMT
            Not After : Jul 30 03:08:08 2026 GMT
        Subject: CN=6a618599-61eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:f9:89:06:be:99:d2:03:77:f4:84:7b:e7:
                    48:b8:a3:32:47:31:e8:27:9f:cb:12:11:53:57:0d:
                    51:74:94:c4:a6:fb:d0:b7:7f:cb:1e:33:7a:1a:80:
                    eb:d3:8e:5d:95:e7:37:a4:07:bf:9e:4f:0f:52:5a:
                    fa:74:66:00:b4:c3:20:cb:73:b1:36:7a:d4:31:9e:
                    30:5b:3e:a0:a3:1f:d5:b0:b4:89:bf:f9:99:c4:36:
                    f6:d5:1a:51:12:89:25:99:06:15:a6:e8:6d:d4:88:
                    da:b9:87:83:82:c4:09:8a:dd:31:7a:89:13:09:50:
                    92:57:be:b3:df:ea:01:6d:89:f4:32:0c:f5:fe:22:
                    a0:67:1e:41:d6:a6:fc:0b:7d:c8:44:59:0e:be:e7:
                    a5:8c:7b:4e:db:92:d7:ff:f5:8e:64:71:6d:cb:39:
                    49:44:1a:93:a8:84:e6:79:05:ad:03:61:9b:95:31:
                    40:4c:a1:cb:75:12:1a:a8:cc:82:6b:80:15:8f:38:
                    48:fa:32:5d:98:48:24:06:a1:26:db:d1:05:3d:ae:
                    66:96:ef:c3:31:14:77:1d:4b:a7:f0:7d:9e:6a:a7:
                    cd:42:bd:22:f9:aa:78:b7:58:07:dc:f0:7c:1c:44:
                    7d:18:f1:fd:65:12:27:28:9c:de:e4:a6:be:b9:bb:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E6:F5:A4:B0:BB:07:D9:F4:AF:BD:94:16:39:71:65:00:8C:8B:9B
            X509v3 Authority Key Identifier:
                keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b5:38:bd:92:77:ad:c8:26:7d:81:ba:a9:c0:cf:c4:1e:e7:
         97:88:13:41:b0:45:8d:17:e3:a5:13:85:2b:63:7a:a4:c3:c2:
         4a:df:4e:6c:5a:ed:7e:10:87:64:06:8b:e2:36:33:7a:53:ec:
         7b:29:47:c7:2c:5d:3f:21:37:3c:b0:7c:26:52:55:ea:64:36:
         bb:bd:4d:0f:27:6f:3b:cd:39:0d:be:94:f9:a0:57:89:2b:9f:
         8f:79:88:76:ad:3d:3d:be:ad:46:f7:e2:73:a4:8a:0d:09:2b:
         eb:2b:ae:5a:70:93:0d:d4:91:da:cf:48:8d:6b:7e:ce:a1:32:
         98:9e:00:49:19:dc:43:03:02:a3:e0:c0:9d:73:35:e8:76:a9:
         97:dd:8b:aa:fe:b0:4d:99:0e:f6:c4:33:c5:76:bd:eb:54:12:
         86:21:83:79:bb:e3:87:bf:14:53:b2:3f:3e:cf:5e:f0:32:1e:
         b5:e4:a8:54:ad:71:d2:23:13:49:82:1f:85:23:b7:a2:8f:9e:
         b9:92:65:d7:0c:fc:ce:aa:fa:9b:a4:22:1c:53:e0:56:33:96:
         e8:59:92:01:d8:c1:58:b9:18:e1:65:eb:35:fa:0c:11:72:84:
         0f:6f:c2:f4:69:52:8e:e8:61:27:96:6e:cb:7e:fc:76:58:a6:
         b2:2e:d9:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZBQkMxMTAvBgNVBAUTKEE4NzI0MkI3MzYyN0Q0MjkyMzRBNUY1NEM1MjNCQjQx
RUJCRTg3QUEwHhcNMjYwNzIzMDMwODA4WhcNMjYwNzMwMDMwODA4WjAYMRYwFAYD
VQQDEw02YTYxODU5OS02MWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoV/5iQa+mdIDd/SEe+dIuKMyRzHoJ5/LEhFTVw1RdJTEpvvQt3/LHjN6GoDr
045dlec3pAe/nk8PUlr6dGYAtMMgy3OxNnrUMZ4wWz6gox/VsLSJv/mZxDb21RpR
EoklmQYVpuht1IjauYeDgsQJit0xeokTCVCSV76z3+oBbYn0Mgz1/iKgZx5B1qb8
C33IRFkOvueljHtO25LX//WOZHFtyzlJRBqTqITmeQWtA2GblTFATKHLdRIaqMyC
a4AVjzhI+jJdmEgkBqEm29EFPa5mlu/DMRR3HUun8H2eaqfNQr0i+ap4t1gH3PB8
HER9GPH9ZRInKJze5Ka+ubtXJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/m9aSw
uwfZ9K+9lBY5cWUAjIubMB8GA1UdIwQYMBaAFKhyQrc2J9QpI0pfVMUju0Hrvoeq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCQy9EOTQyMDA3NkM0
RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFDa2pTbDlVeFNPN1FldS1o
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FISkN0elluMUNralNsOVV4U083UWV1LWg2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkFCQy9EOTQyMDA3NkM0RDIxMUVEQkYwRTE5ODJDNEY5QUUwMi9xSEpDdHpZbjFD
a2pTbDlVeFNPN1FldS1oNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC7U4vZJ3rcgmfYG6qcDPxB7nl4gTQbBFjRfjpROFK2N6pMPCSt9ObFrtfhCH
ZAaL4jYzelPseylHxyxdPyE3PLB8JlJV6mQ2u71NDydvO805Db6U+aBXiSufj3mI
dq09Pb6tRvfic6SKDQkr6yuuWnCTDdSR2s9IjWt+zqEymJ4ASRncQwMCo+DAnXM1
6Hapl92Lqv6wTZkO9sQzxXa961QShiGDebvjh78UU7I/Ps9e8DIeteSoVK1x0iMT
SYIfhSO3oo+euZJl1wz8zqr6m6QiHFPgVjOW6FmSAdjBWLkY4WXrNfoMEXKED2/C
9GlSjuhhJ5Zuy378dlimsi7Zkg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:08 2026 by rpki-client