Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
File:                     mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json)
Hash identifier:          TrnYAtf0QVzXrmnZFvkyEKVHdYmISfegj6ldv36R+uU=
Subject key identifier:   48:73:6A:1E:6B:E9:85:C8:76:07:FB:2E:B3:C0:ED:BD:08:AF:E8:7F
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       02A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
Manifest number:          028D
Signing time:             Thu 23 Jul 2026 03:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 03:01:14 +0000
Manifest next update:     Thu 30 Jul 2026 03:01:14 +0000
Files and hashes:         1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: bnwhYAb0vlW8wqXKhLqS8GvaYhAqsDzJ7WNmPiBgUHw=)
                          2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: knFwvMjPgbAwZWQ4tl74NJH9Eoq0c8p4Rxp+Mu8Ms4k=)
                          3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: rF7SOFEvy817x7nCvoQTwE931VplbOd/lPkpG4O4yR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
                          rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
        Validity
            Not Before: Jul 23 03:01:14 2026 GMT
            Not After : Jul 30 03:01:14 2026 GMT
        Subject: CN=6a6183fb-a661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:17:56:8d:24:c2:e3:2b:6b:bd:33:2f:b9:
                    fa:a7:6f:a1:b3:6b:3a:5a:60:82:95:2a:d7:d1:92:
                    9b:73:a6:07:04:e8:6b:23:26:71:c8:0e:72:40:5a:
                    d7:b2:36:cc:f3:5e:6d:80:5c:89:ed:e5:25:d7:81:
                    69:fd:5d:d8:79:f3:68:95:dc:56:67:97:17:64:7e:
                    44:4e:f4:8c:cf:98:99:d8:7e:2c:c2:65:ee:82:65:
                    9c:4d:d2:35:2d:dd:15:f2:5c:2d:07:76:36:30:63:
                    58:b3:d0:63:70:97:35:ae:ad:fc:18:8a:63:1d:43:
                    21:91:c3:8e:c2:41:37:51:ba:71:c0:fc:a9:40:67:
                    27:cc:47:b0:7d:48:c0:be:54:b1:38:0a:02:00:73:
                    34:b4:a6:9d:cc:cf:a7:15:c3:d9:b2:25:bc:0d:8a:
                    a5:42:af:cb:2d:86:fe:4e:86:34:a1:e1:a7:57:81:
                    a0:ba:ae:b4:cc:cd:2e:3a:7e:08:c0:86:76:15:29:
                    44:8b:68:90:b2:00:8c:2b:9d:39:a4:3f:d2:9c:eb:
                    e7:6b:74:2a:61:11:f8:75:59:73:5d:4d:34:5d:d2:
                    d3:63:5e:4c:8f:b3:6d:42:6e:f7:d9:be:19:28:b2:
                    44:c0:ca:e3:d0:48:49:7b:f4:0e:2e:78:f5:fb:a0:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:73:6A:1E:6B:E9:85:C8:76:07:FB:2E:B3:C0:ED:BD:08:AF:E8:7F
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:ea:9c:3a:e1:cc:29:29:67:47:9e:25:d2:fb:e5:00:d9:
         1a:05:3f:7c:fe:74:a2:9a:08:c3:10:bc:72:0a:ed:ad:12:4b:
         b8:79:09:9c:de:b4:c5:f7:37:d5:14:b7:61:90:25:77:71:a2:
         0b:cc:43:6d:0d:b3:be:d5:fa:98:a4:3c:6b:1c:99:2a:fd:15:
         e8:a4:21:9c:d6:9f:c9:02:31:1e:57:a0:49:d2:44:76:0f:61:
         95:b7:40:40:6a:aa:d1:e9:1e:17:2b:cb:4a:ae:c8:53:59:bd:
         d2:4e:50:4a:f7:39:a8:b6:04:a0:d4:54:2c:f6:c8:7f:34:90:
         7b:41:48:63:7b:92:a2:e9:b9:1e:57:51:6e:9b:24:81:26:5f:
         02:72:18:8d:38:bb:11:f7:e7:45:8b:4a:89:52:5f:1d:cc:db:
         f8:c8:f5:35:7d:86:ed:b8:d3:a6:78:02:2f:90:d8:b5:ce:a9:
         04:64:4a:6f:f0:36:70:83:b5:24:4d:ae:37:5b:fa:bf:bb:24:
         85:75:28:fc:59:bd:2b:c5:6c:14:ac:88:78:5a:a1:8f:d8:9d:
         97:d5:9c:cb:d4:08:6f:f8:56:92:b7:d7:f3:5c:b8:41:77:b5:
         44:0a:30:c5:1a:a2:99:f0:76:87:87:e9:c3:7d:df:e7:ea:eb:
         4f:93:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:21 2026 by rpki-client