Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File:                     bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier:          ORvOV/3HP3G1iMZ7tksW8rm5K7zzxYXUgF557tLv0Ww=
Subject key identifier:   F9:0C:A3:56:1A:DA:0E:68:F9:50:A5:40:23:33:EA:B1:58:EE:52:7E
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       0562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number:          0558
Signing time:             Thu 23 Jul 2026 00:13:53 +0000
Manifest this update:     Thu 23 Jul 2026 00:13:52 +0000
Manifest next update:     Thu 30 Jul 2026 00:13:52 +0000
Files and hashes:         1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: o9kBEkltoAPgxYVX6rYfxq1OM6WrzGVycwHudzSHz58=)
                          2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: 6tY3MA89EpAe/lRiSjB8kjlvtBFDcIlws9T/uGuzWKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: Jul 23 00:13:52 2026 GMT
            Not After : Jul 30 00:13:52 2026 GMT
        Subject: CN=6a615cc1-a37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:70:92:db:6a:51:bb:06:f1:1c:f6:a4:63:
                    15:04:ac:0f:08:42:a7:3b:b1:79:63:5d:af:1e:f6:
                    b7:6a:c2:a0:ab:b0:a2:a4:ae:78:d9:46:cb:db:c0:
                    a3:4f:66:f9:03:59:80:8e:c0:57:1a:a9:c4:ec:8a:
                    3b:5b:bf:9b:5d:ae:25:77:58:8e:2f:e7:9d:21:21:
                    c9:87:97:c9:67:f7:b2:5d:a8:ce:c7:90:b2:26:eb:
                    5f:26:7a:c0:58:39:0b:cc:70:28:23:7f:44:1b:3f:
                    b1:5d:2d:b1:68:38:55:91:fe:5c:b2:0f:13:ee:69:
                    56:ca:b3:7d:d3:04:2f:26:aa:c6:c7:76:46:dc:d5:
                    bb:cc:7b:a1:36:0f:08:3e:0f:5e:d7:0a:d9:e7:f8:
                    bb:3b:f9:db:b6:bd:0f:70:29:af:37:a6:b8:0c:5b:
                    a2:cc:fa:53:6d:9d:c2:1d:28:fe:cb:9a:4a:04:96:
                    b5:73:44:80:4b:8e:45:96:59:81:33:ce:db:e9:e9:
                    95:6a:3c:cc:2b:74:64:fe:e7:85:ab:0c:39:24:20:
                    13:81:8b:79:73:91:3e:82:89:c3:38:25:7b:3f:d4:
                    62:a9:e4:ef:b5:6c:87:90:58:af:f7:f7:74:f9:d6:
                    cc:1a:c7:48:5a:1b:8c:3c:f0:b8:0e:fc:72:14:bf:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0C:A3:56:1A:DA:0E:68:F9:50:A5:40:23:33:EA:B1:58:EE:52:7E
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:2b:92:a7:2b:d8:83:4f:07:55:5c:6e:ad:5a:66:4a:79:
         55:a7:09:b6:4f:c8:ba:78:f6:fd:6b:54:ab:aa:f3:e8:88:bd:
         a9:e0:4c:de:b2:7f:1e:93:af:c2:41:fa:d8:fe:bd:10:a3:0c:
         9a:69:ff:8c:4e:c5:68:a2:74:55:d7:db:d7:d6:e1:e7:02:11:
         f5:ba:0b:96:79:f5:7e:ae:ab:d6:81:27:64:b9:41:47:8a:23:
         46:04:d4:8f:0c:1a:68:71:87:2a:a2:4c:5b:fb:bf:eb:21:57:
         c5:cd:71:f0:0b:ee:02:53:d7:65:5d:63:18:c8:33:e2:37:45:
         69:09:5a:f2:4b:fb:16:06:5d:e8:4e:7f:07:c2:46:59:91:fb:
         23:a7:aa:8b:87:47:18:24:1a:4f:4b:74:65:ff:66:b3:7a:ce:
         89:09:2c:da:38:84:86:f8:11:0d:5b:6c:d8:ef:e8:42:09:f0:
         e9:a1:3c:47:65:88:bb:5c:36:77:bb:98:4c:91:a8:15:ee:be:
         61:e6:34:11:8c:44:5d:d0:f8:c0:4a:bd:12:30:6c:6d:65:f1:
         7b:5e:c1:f5:c0:e2:dc:8a:8d:19:bf:e0:35:74:3c:a7:28:26:
         63:4e:de:5e:7c:9e:ae:f5:63:da:39:f0:3c:37:e8:95:7c:64:
         e7:31:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:30 2026 by rpki-client