Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
File:                     QF5asHUAe6PYUmLWiyUZhsbp3V0.mft (raw, json)
Hash identifier:          ZinAb+sJkMKWbqosFM14FAYwAIy+N3gK+1MHhBaK6T8=
Subject key identifier:   79:56:48:74:16:77:68:A4:51:93:67:29:7A:B3:AD:DA:0C:B2:4B:D5
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Certificate issuer:       /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
Manifest number:          7C
Signing time:             Thu 23 Jul 2026 09:45:34 +0000
Manifest this update:     Thu 23 Jul 2026 09:45:33 +0000
Manifest next update:     Thu 30 Jul 2026 09:45:33 +0000
Files and hashes:         1: QF5asHUAe6PYUmLWiyUZhsbp3V0.crl (hash: Bz6P2V+8nnCKOjqjHdGfnbj9YtI6mA3QcvYV5qLQI5I=)
                          2: E7C4738EF69011F0944A82D5396F56BC.roa (hash: FMzFZrlslBMIjQSp5kS4GLLPEkEhvoj8LXFantUsG14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
                          rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
        Validity
            Not Before: Jul 23 09:45:33 2026 GMT
            Not After : Jul 30 09:45:33 2026 GMT
        Subject: CN=6a61e2be-9a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9d:71:2f:a3:59:5a:b5:49:d4:88:a5:72:a6:
                    94:af:e9:3d:27:59:88:86:b3:2d:5e:0c:ce:5c:c4:
                    9a:ee:c8:81:46:27:41:db:50:87:94:8b:32:27:ad:
                    bd:e4:0f:d0:dd:30:ed:aa:a9:04:26:a1:85:ec:6d:
                    dd:22:57:33:7d:65:9c:9d:42:bf:fa:d2:55:4f:d3:
                    e6:ed:60:ea:eb:60:95:51:9e:36:29:f6:cd:02:2b:
                    a5:52:d1:7d:06:3f:fa:d6:61:15:c7:46:fd:73:7e:
                    11:e3:83:17:13:8d:ac:55:c8:e4:38:1c:c7:3d:ef:
                    8d:fa:69:9e:ce:36:5f:58:81:47:96:14:2c:37:de:
                    4b:ff:1c:d6:cd:0a:c2:e9:c9:70:62:68:15:97:c7:
                    9f:96:2a:82:b8:65:ef:14:fd:f5:d4:94:58:68:95:
                    4e:01:c6:dd:3b:22:f4:20:60:8e:5d:bc:0f:ee:65:
                    dc:73:c2:03:2e:df:98:c3:74:ac:1a:26:a9:23:ae:
                    16:5b:7e:f4:ca:f4:a4:c9:3e:85:1b:f6:50:ff:45:
                    f8:36:f6:d0:22:fc:eb:b3:1b:89:e6:08:b4:c0:5c:
                    19:46:2d:c2:6c:d5:41:b0:5b:8c:00:8a:e3:e4:4b:
                    bf:59:f7:6e:49:f6:af:63:73:c5:a8:b1:19:e9:6e:
                    48:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:56:48:74:16:77:68:A4:51:93:67:29:7A:B3:AD:DA:0C:B2:4B:D5
            X509v3 Authority Key Identifier:
                keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:51:e9:fd:31:c9:8c:86:a6:bd:9e:39:85:28:82:38:c1:
         99:ec:93:2e:78:19:b8:bf:6d:b7:5a:53:1d:6e:5f:7b:1c:8b:
         8b:7e:9f:9d:d9:2a:df:8f:9b:a2:3e:39:e5:b0:3b:21:83:a6:
         ab:f6:87:c5:d5:24:fa:64:00:e4:97:db:09:25:06:82:b8:9d:
         d3:fc:93:9c:88:4f:ab:65:fe:13:7f:24:83:d2:87:6d:c3:d2:
         67:d5:26:98:6f:33:5d:04:f3:49:6e:5a:95:51:ea:19:05:f0:
         04:cb:60:87:65:2a:7f:8b:03:91:c2:da:1e:22:4d:de:2e:88:
         76:b4:3c:51:f7:4f:53:63:76:7d:64:2a:dd:0d:54:64:59:a3:
         c9:e5:6e:ba:49:2c:11:0b:4a:0a:1c:c0:b4:a0:61:19:f7:cd:
         82:ba:e2:78:47:b4:d8:35:d2:1b:8f:9d:4a:e7:48:c5:07:b2:
         45:c4:19:d1:b5:c0:74:f4:bc:58:1a:df:78:dd:aa:71:1b:80:
         fc:a7:56:00:7d:92:a0:44:d5:aa:ac:69:e3:c1:43:bf:c4:1a:
         5c:d1:57:df:10:fa:e9:30:78:d5:3c:f2:07:9b:57:90:fe:e1:
         4c:28:32:ea:28:ae:4c:1c:94:5c:5a:e4:39:c0:bf:ca:c9:10:
         80:7c:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:00 2026 by rpki-client