Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
File:                     qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json)
Hash identifier:          Xlbqf4tvuYYSAIXMTmoIKeZJTDYTWzDlrli9AsvaEUc=
Subject key identifier:   A0:33:05:9D:49:2E:72:79:F3:36:0B:90:0E:12:8E:F7:3F:D8:41:1E
Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
Certificate issuer:       /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
Manifest number:          A0
Signing time:             Thu 23 Jul 2026 09:08:12 +0000
Manifest this update:     Thu 23 Jul 2026 09:08:12 +0000
Manifest next update:     Thu 30 Jul 2026 09:08:12 +0000
Files and hashes:         1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: VHU6IgpkVBPXG8FcxAQFHOBXooUQCjtOw0UF9+O5B58=)
                          2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: +Obkn2kDVy3VtWSxRmw2o+KBF3RFJlPLni7LR/Uptdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
        Validity
            Not Before: Jul 23 09:08:12 2026 GMT
            Not After : Jul 30 09:08:12 2026 GMT
        Subject: CN=6a61d9fc-b5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:a1:8d:31:c7:fb:2d:2f:6b:5a:cd:d2:0f:
                    b6:77:4a:71:96:55:70:a8:70:ce:0c:3a:f9:2c:65:
                    b4:75:17:5c:f8:17:8c:e8:27:6f:22:f9:4e:59:45:
                    04:78:16:2e:db:4f:b9:f1:52:b3:72:41:8a:db:4e:
                    cd:8c:dd:96:13:33:f5:84:19:9b:ab:cb:8c:51:41:
                    4c:7a:6d:0c:05:59:5e:bf:3b:c3:2c:58:d9:11:cc:
                    4b:d5:3b:ae:e6:12:8e:e8:e5:5a:b7:00:cb:c1:50:
                    86:4c:37:73:c6:fb:3a:a2:c4:bb:d7:4d:8d:32:85:
                    88:02:be:71:5b:21:56:a5:0f:5f:e1:02:97:32:42:
                    a9:d9:85:cd:22:d7:8d:f7:04:07:a0:bb:34:19:b9:
                    1d:cd:ef:36:1e:5d:8c:99:79:4c:b1:23:64:6d:73:
                    af:3f:0e:58:a0:9e:3f:bc:ea:97:29:bc:9a:65:0d:
                    b0:64:89:61:e5:f0:0b:b0:8b:6d:8a:c4:bc:37:e9:
                    7d:c3:8e:74:63:13:f4:d6:fe:9a:1d:1d:17:dd:0f:
                    15:4c:b4:80:e9:9d:b6:3b:50:78:00:00:64:85:1c:
                    36:2e:bb:3c:d0:f7:c9:77:0c:79:8a:3e:4d:73:7a:
                    28:3a:96:b1:b4:7c:f8:c8:0a:38:ae:9a:3f:7c:4c:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:33:05:9D:49:2E:72:79:F3:36:0B:90:0E:12:8E:F7:3F:D8:41:1E
            X509v3 Authority Key Identifier:
                keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:4c:d3:73:26:04:ca:39:7a:c0:3c:02:f6:79:ca:72:01:
         45:2a:c6:92:1e:96:af:ea:e8:f7:73:75:81:da:c9:d1:0b:72:
         a6:d0:ac:3c:08:ef:81:dc:e6:64:f3:e6:1e:6b:65:59:8c:d1:
         6b:51:5f:97:1e:6c:0a:f0:32:a4:6c:4d:55:a4:85:f1:6e:e0:
         27:e6:1b:53:48:eb:5a:74:19:00:a2:a9:4b:57:26:94:0f:34:
         01:b1:af:eb:87:43:7d:ae:0a:2e:9b:9c:3b:1f:c2:83:cf:60:
         30:07:49:94:e0:31:7a:b3:e4:a2:43:ce:71:98:42:df:7c:bb:
         7c:b8:12:51:c9:25:ac:d7:45:b3:7e:10:06:c2:bf:ee:b6:ca:
         b1:ba:ce:e4:c9:48:b0:da:2a:2a:a2:24:5f:28:8d:37:6f:1c:
         d2:b7:97:90:ac:b0:4f:c0:c2:88:44:c6:aa:0b:b9:16:b6:85:
         ae:40:b7:7a:4c:74:4d:c4:9c:51:4d:6a:2b:8f:c0:38:73:c3:
         fa:61:20:4f:06:37:3f:a0:d3:68:ee:db:66:3e:72:c1:14:a3:
         ed:e1:63:de:47:b0:01:94:93:64:be:34:3e:f7:38:6b:e7:67:
         45:97:d8:13:1c:e6:d1:06:e2:4f:df:d6:8a:53:1d:f7:b4:15:
         f2:30:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:03 2026 by rpki-client