Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
File:                     qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json)
Hash identifier:          AU0N4Qj2HDhiXoYpxSe0PPCxZYlK+YS8d/2Gzln2Jcs=
Subject key identifier:   B0:83:B5:14:B7:B4:40:D4:A7:81:06:85:39:80:BA:7B:EF:E4:E4:0F
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Certificate issuer:       /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial:       0834
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
Manifest number:          0820
Signing time:             Wed 22 Jul 2026 21:47:25 +0000
Manifest this update:     Wed 22 Jul 2026 21:47:25 +0000
Manifest next update:     Wed 29 Jul 2026 21:47:25 +0000
Files and hashes:         1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: BR95TZ2PD+2KQIaaAEhiwid3q+af8LwDfr8cQQRgoyo=)
                          2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: 2gCt/x7KidgUUiic8KeZ4+Ldk+O6Z1R5WNeHf6m8yn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
                          rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100 (0x834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
        Validity
            Not Before: Jul 22 21:47:25 2026 GMT
            Not After : Jul 29 21:47:25 2026 GMT
        Subject: CN=6a613a6d-7fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:27:73:1a:81:f7:f2:9a:23:45:0c:b8:62:
                    ce:8e:b1:82:5c:32:6d:49:a4:28:f5:17:0a:b4:4c:
                    27:4a:ab:f7:48:b6:70:7a:1c:63:e5:9c:9b:0e:33:
                    ab:20:79:8a:5e:18:77:ce:39:76:a0:69:7e:42:55:
                    34:41:ad:cc:9f:7b:9b:92:17:69:2a:ba:53:79:40:
                    4b:d7:93:1e:7a:e3:04:d0:74:55:b2:5d:c0:2d:88:
                    5c:80:a9:e1:73:6e:62:19:99:c3:64:f0:34:64:84:
                    69:c6:ac:cb:8c:47:f8:ae:5c:79:ea:b2:ac:74:88:
                    6c:8a:07:e7:59:8b:8a:6d:4a:98:f1:6d:96:ea:7f:
                    87:73:2e:5e:9a:cd:0c:02:ff:ed:9c:9b:9f:c1:18:
                    ec:e2:1c:95:88:a8:3b:60:9d:c2:21:23:bf:76:5d:
                    5f:e0:6f:e9:73:38:51:89:01:44:64:14:23:25:da:
                    0b:a9:1c:f4:cc:2b:c0:df:57:7b:99:d6:ed:64:fb:
                    ae:85:17:7c:56:9c:6f:37:a3:e1:10:7e:6a:51:c0:
                    cf:75:76:e9:5a:33:a2:cb:31:30:d1:d8:ce:36:73:
                    3f:fb:e3:73:dc:48:76:56:e0:c8:5d:4a:aa:a3:66:
                    22:96:39:20:94:33:ff:b6:9c:26:7d:35:f0:a4:c0:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:83:B5:14:B7:B4:40:D4:A7:81:06:85:39:80:BA:7B:EF:E4:E4:0F
            X509v3 Authority Key Identifier:
                keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:79:8c:21:4a:b0:34:2f:f5:28:14:e1:84:e8:54:03:33:
         c3:42:3c:22:c9:f0:6c:78:65:20:fb:7c:f2:b5:e4:d0:7e:6a:
         f2:eb:ba:55:f6:36:fe:74:94:4f:43:c3:92:63:86:22:8d:c7:
         44:35:d5:e6:be:f4:77:c0:7f:32:6e:e8:1b:68:33:43:7b:81:
         32:61:ba:a1:bc:47:b1:3d:8a:82:17:05:a7:3d:1f:5b:90:fe:
         8a:cb:f4:93:da:0b:31:98:9e:6a:0f:dc:f2:47:58:1d:a5:3a:
         9b:11:70:0f:ca:f3:d7:5c:41:06:46:88:fb:49:0e:75:60:3b:
         e7:32:61:01:77:ed:8a:50:01:ce:df:5b:63:63:39:dd:99:6e:
         14:d7:0f:36:26:33:79:0e:77:c5:e4:00:3b:73:55:ad:8b:a0:
         30:c9:0e:a9:51:1c:b4:51:1e:c7:87:8c:c3:5b:10:1d:69:22:
         cc:61:8a:07:99:a0:ff:6a:08:e7:9c:e6:3c:f4:de:b6:37:e2:
         39:bc:4b:e0:3e:0c:13:c7:04:cd:38:58:44:c6:c1:29:76:83:
         69:72:35:68:29:dc:bc:fe:ef:23:88:f9:29:74:91:50:96:90:
         4d:93:04:60:26:07:38:bf:2c:ee:1c:5b:22:46:01:a3:08:03:
         fc:93:bc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:01:27 2026 by rpki-client