Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
File:                     QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json)
Hash identifier:          h4tXfKlRcXTVxeq5IetZWJcPf7ABAn/1OALMUVJYMw0=
Subject key identifier:   D8:B9:8F:A2:F0:3B:B0:ED:3F:87:67:57:4F:85:A5:F9:6B:59:8C:A2
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Certificate issuer:       /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial:       0806
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
Manifest number:          07E8
Signing time:             Wed 22 Jul 2026 21:57:48 +0000
Manifest this update:     Wed 22 Jul 2026 21:57:47 +0000
Manifest next update:     Wed 29 Jul 2026 21:57:47 +0000
Files and hashes:         1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: 1ArhIGITAzdJlnOOWHSJzSFRXeIvu78YBzHWNe/Cj2A=)
                          2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: 1duLitLlKe5JGX7eQUYs2Azf52gj3DJyaqa7K/tCUk4=)
                          3: 68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa (hash: w5VOo/6r3NeoiKj8fNZOZ/VJngKbDV07+QpgEuw1iFA=)
                          4: 66667640547B11F1B35F59E4B9833773.roa (hash: xUvcOGfbKcgryK4sqev8kZ+k3b3AHJ+6QuD/2AevDnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
                          rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
        Validity
            Not Before: Jul 22 21:57:47 2026 GMT
            Not After : Jul 29 21:57:47 2026 GMT
        Subject: CN=6a613cdc-6e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:57:15:95:d5:43:33:ba:7d:e4:85:a5:4f:
                    32:f5:5d:18:0b:54:27:65:41:ff:64:ff:2a:34:bd:
                    82:6d:8a:36:ab:33:69:9e:25:d0:17:74:e3:22:d2:
                    7f:d2:6c:01:d3:1d:f2:61:81:38:a3:06:74:6b:10:
                    6e:77:46:12:f4:80:01:f8:b1:ff:66:e6:5c:8b:19:
                    b8:94:02:0c:ac:38:f5:75:6e:e0:10:9e:11:3e:27:
                    29:c8:1a:d0:64:f3:6c:0c:10:ff:bc:5a:c4:67:59:
                    c8:4b:a9:5d:80:d7:4e:d6:dc:70:e7:1c:16:75:4d:
                    87:0f:d6:6c:4b:38:f9:91:4a:60:e2:46:0a:8b:e0:
                    db:f9:8f:a5:85:83:f4:52:3a:7d:16:bd:10:a2:81:
                    81:56:38:2c:7f:bf:68:7a:99:a7:c6:f6:91:d0:39:
                    14:d6:7a:33:b0:80:27:30:4e:bf:5f:9f:e4:24:40:
                    da:6a:99:e5:b2:8a:ba:cf:26:c1:5a:c7:6d:64:55:
                    d9:31:4f:da:85:f0:d6:90:97:d4:65:08:ee:9f:e5:
                    bd:ee:ff:62:e8:aa:d0:0e:9d:68:d8:66:5e:37:c6:
                    05:f8:ad:b6:08:01:e8:e4:d9:47:ac:83:d1:d1:c8:
                    60:c7:17:94:26:62:3f:4c:c7:7e:2a:11:ee:c9:72:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B9:8F:A2:F0:3B:B0:ED:3F:87:67:57:4F:85:A5:F9:6B:59:8C:A2
            X509v3 Authority Key Identifier:
                keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:26:ec:61:94:28:14:5d:ea:11:89:b5:53:c6:18:c8:28:a3:
         50:56:13:a6:14:25:b5:f7:06:5a:9f:31:ca:26:52:c7:1f:11:
         0d:d8:3c:12:7a:50:cc:3f:09:07:5f:7a:9d:66:da:b4:1b:43:
         6d:fb:a7:04:9c:c7:81:bd:44:f7:86:12:14:cf:e3:c9:7a:bf:
         82:36:b3:54:22:c2:2b:05:e8:19:2f:6c:7d:b0:28:e6:fd:e8:
         ed:13:f4:2e:5d:14:f1:ed:0e:a0:3c:11:f6:ce:38:08:42:82:
         80:cf:af:a9:40:5a:8e:6c:14:4b:c0:9e:f0:93:b0:66:3b:05:
         8c:f6:79:1b:85:2a:44:24:d8:04:f9:9c:05:35:42:69:40:25:
         73:95:ac:de:da:c4:9f:bd:76:22:2e:59:ff:75:78:02:5e:3e:
         66:13:8c:89:8a:f1:93:46:80:7e:23:4c:8c:dc:f5:96:ce:ee:
         c9:52:90:f4:8d:e3:91:ed:68:d4:07:43:a8:84:9a:44:5d:e9:
         c9:47:12:73:17:3c:6f:74:76:1e:37:0f:b3:65:58:03:a1:a7:
         ec:55:a4:cf:77:85:a4:6b:97:6d:ab:16:26:22:ff:9c:6f:ae:
         5b:6a:05:3e:2e:f2:7d:50:5d:a5:99:44:01:ba:93:88:db:b2:
         3c:6a:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:21 2026 by rpki-client