Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File:                     Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier:          0Uho7yOLR+7uLL1fb/U+6bdqNzSlEekO9bFITgBdun0=
Subject key identifier:   12:DB:F4:4E:AF:B9:89:80:2E:5A:77:63:AA:62:29:71:F5:BE:87:1D
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer:       /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial:       1BEE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number:          1BE7
Signing time:             Wed 22 Jul 2026 16:19:56 +0000
Manifest this update:     Wed 22 Jul 2026 16:19:55 +0000
Manifest next update:     Wed 29 Jul 2026 16:19:55 +0000
Files and hashes:         1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: 6NepI5edXUtQURqN4JdFCTHjwPp5JSuR5/CSZNClDkA=)
                          2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: VUPltuoFww8hZ1Urrtv19HM0IQZ3a1bmc12QvfJk9Ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7150 (0x1bee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
        Validity
            Not Before: Jul 22 16:19:55 2026 GMT
            Not After : Jul 29 16:19:55 2026 GMT
        Subject: CN=6a60edab-5967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:89:55:8c:f4:b8:bb:a6:47:61:a4:79:fa:
                    ef:e8:22:37:f0:82:80:bc:fe:66:7d:b5:af:99:62:
                    c0:7b:74:09:e9:19:d6:94:ce:51:01:a6:46:89:59:
                    bd:14:00:5f:aa:37:1b:54:6f:76:00:ac:6a:19:4d:
                    52:84:b7:d8:0a:27:fd:73:39:71:d4:6a:d0:e8:ff:
                    94:b0:db:a0:ff:0a:e0:2d:97:d3:ce:1f:d8:71:15:
                    a7:a5:62:80:86:d5:1d:a5:f2:6d:0f:9a:bd:f5:27:
                    e6:e8:f4:e9:87:33:10:f3:fa:38:b5:57:da:3a:6e:
                    15:a7:8b:ab:9a:d5:6e:5b:04:61:d7:f5:c8:1f:83:
                    c8:8d:fc:07:06:e0:e4:ac:5a:82:67:df:56:03:c0:
                    b8:8e:47:dd:75:a1:e5:49:53:bc:ed:b5:92:75:1c:
                    17:04:83:63:ec:c8:51:5c:26:55:df:ad:85:24:2b:
                    6a:7a:09:1d:30:d9:98:09:dd:be:69:26:e4:59:a4:
                    f8:60:84:6c:81:8c:50:4d:e2:67:65:97:7d:30:8f:
                    99:e6:3a:c4:84:83:10:fc:53:6f:d3:a9:a1:c7:65:
                    9e:dc:eb:c3:48:74:36:f2:4c:3e:6e:05:2e:5b:c8:
                    c6:ff:6c:2e:cc:84:09:ee:04:17:27:18:36:8e:32:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DB:F4:4E:AF:B9:89:80:2E:5A:77:63:AA:62:29:71:F5:BE:87:1D
            X509v3 Authority Key Identifier:
                keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7d:06:72:0c:f7:a6:fc:eb:d5:65:2e:a6:01:67:57:7a:5a:
         71:04:ea:28:af:23:68:b4:92:60:71:b3:24:73:5a:41:e0:02:
         44:e0:22:ff:67:d8:49:87:5c:f5:c4:e8:ab:f9:80:87:2a:56:
         6b:03:9e:6b:d6:d7:60:f4:c9:78:c9:4c:e3:68:35:de:d6:f3:
         fc:8c:78:dc:e3:da:68:0d:51:36:f9:f7:ee:83:ae:06:c5:f8:
         e3:ae:5a:24:36:6d:0c:34:50:a7:64:56:8b:cf:d7:bf:93:38:
         c5:67:a7:bb:cc:e5:73:c8:ec:d0:42:77:1f:87:d8:99:4c:60:
         b8:67:da:4e:45:74:f7:8f:a1:83:1f:4b:ad:ec:fd:21:e8:24:
         bd:d6:a9:de:13:dc:dd:c0:14:22:17:30:08:00:fa:59:4e:1b:
         ef:fe:00:d5:78:b5:c5:13:c6:9b:0e:37:6f:61:05:0b:e5:93:
         29:a4:7f:bb:15:51:0e:53:5f:70:5d:e7:c4:a4:db:f4:44:ab:
         b4:34:25:29:82:ac:38:19:19:5c:8b:03:4c:f0:f0:36:21:fc:
         f7:a4:d2:a0:2b:fd:ea:d8:91:5c:be:0e:17:52:d1:1e:52:f2:
         5a:5e:76:bc:7d:0c:5d:1f:81:44:b5:52:c3:86:0f:ac:10:63:
         a8:c7:6c:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2
NDg2MDIwMTgwHhcNMjYwNzIyMTYxOTU1WhcNMjYwNzI5MTYxOTU1WjAYMRYwFAYD
VQQDEw02YTYwZWRhYi01OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo5GJVYz0uLumR2Gkefrv6CI38IKAvP5mfbWvmWLAe3QJ6RnWlM5RAaZGiVm9
FABfqjcbVG92AKxqGU1ShLfYCif9czlx1GrQ6P+UsNug/wrgLZfTzh/YcRWnpWKA
htUdpfJtD5q99Sfm6PTphzMQ8/o4tVfaOm4Vp4urmtVuWwRh1/XIH4PIjfwHBuDk
rFqCZ99WA8C4jkfddaHlSVO87bWSdRwXBINj7MhRXCZV362FJCtqegkdMNmYCd2+
aSbkWaT4YIRsgYxQTeJnZZd9MI+Z5jrEhIMQ/FNv06mhx2We3OvDSHQ28kw+bgUu
W8jG/2wuzIQJ7gQXJxg2jjJAJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLb9E6v
uYmALlp3Y6piKXH1vocdMB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT
U3hFUWxseWM5UGxraGdJQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiX0Gcgz3pvzr1WUupgFnV3pacQTqKK8jaLSSYHGzJHNaQeACROAi/2fYSYdc
9cToq/mAhypWawOea9bXYPTJeMlM42g13tbz/Ix43OPaaA1RNvn37oOuBsX4465a
JDZtDDRQp2RWi8/Xv5M4xWenu8zlc8js0EJ3H4fYmUxguGfaTkV094+hgx9Lrez9
Iegkvdap3hPc3cAUIhcwCAD6WU4b7/4A1Xi1xRPGmw43b2EFC+WTKaR/uxVRDlNf
cF3nxKTb9ESrtDQlKYKsOBkZXIsDTPDwNiH896TSoCv96tiRXL4OF1LRHlLyWl52
vH0MXR+BRLVSw4YPrBBjqMdsOA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:18 2026 by rpki-client