Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File:                     qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier:          NPZcu/76QkuBFjhbEUbRijfztytqn2KYFn48sZ9Go8s=
Subject key identifier:   53:4F:26:79:B7:95:26:C1:94:A1:7C:5B:42:68:2C:8B:9D:48:4F:78
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer:       /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial:       0140
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number:          013C
Signing time:             Thu 23 Jul 2026 07:02:07 +0000
Manifest this update:     Thu 23 Jul 2026 07:02:07 +0000
Manifest next update:     Thu 30 Jul 2026 07:02:07 +0000
Files and hashes:         1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: ie28JIPG/PljGjcYdeOyh+vjyEBjPRrZx8abv3dAINs=)
                          2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: jxhoNvhc+MHJtTBpxrrKXdZBqlL2SJCnjwyJaGHJC6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
        Validity
            Not Before: Jul 23 07:02:07 2026 GMT
            Not After : Jul 30 07:02:07 2026 GMT
        Subject: CN=6a61bc6f-2374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:78:2a:13:0a:e3:24:c5:ba:b3:f9:c8:e8:
                    a7:35:7e:25:55:cc:1d:2c:0c:8a:3b:0c:31:e8:95:
                    4a:a5:ff:93:79:e6:d6:7e:88:94:e6:98:e3:fa:91:
                    97:db:fb:03:fc:53:ad:33:0d:87:14:0e:2a:58:02:
                    ce:83:27:4c:52:39:94:07:dd:76:b1:26:f3:1e:ed:
                    05:9f:ae:7b:dc:a5:6c:ee:0c:fe:47:4f:77:0e:db:
                    0d:67:4d:30:6a:10:88:17:05:5d:27:02:e0:0d:1f:
                    07:bf:d0:83:fb:43:41:ec:9a:e3:b4:81:f0:fb:99:
                    f2:a9:28:6e:5c:1e:57:5d:2d:35:69:a5:fa:af:43:
                    94:71:8d:ec:52:3d:ed:c6:88:dd:52:32:29:65:be:
                    af:18:8c:1a:1b:8b:89:47:2a:69:3b:8d:f2:4f:67:
                    bd:1a:55:17:d9:63:5c:4e:e9:c3:a1:e8:05:55:bd:
                    7a:56:18:ee:68:c1:32:b9:21:b1:a7:a9:61:dd:aa:
                    e9:97:f8:1a:17:73:e4:ae:af:86:b5:3a:86:da:05:
                    24:20:cd:e5:97:fa:2f:5a:ad:69:2c:67:7a:63:d1:
                    bb:16:b0:1f:32:19:1d:a6:c6:40:ff:e5:e5:f5:e5:
                    9a:b6:d8:de:35:14:44:47:c5:51:0f:63:00:ab:23:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4F:26:79:B7:95:26:C1:94:A1:7C:5B:42:68:2C:8B:9D:48:4F:78
            X509v3 Authority Key Identifier:
                keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7e:6d:7b:f3:72:00:05:e6:5c:a5:86:96:be:3f:3b:bb:f7:
         97:c3:b9:d4:73:cf:12:af:ce:81:7b:d6:42:93:35:8b:15:91:
         85:aa:8a:59:c6:60:2c:8a:3a:18:77:e7:da:bf:33:63:b1:d7:
         29:cb:f9:c0:a7:05:68:d0:97:f8:30:a5:e2:dd:88:bf:3f:85:
         ab:f8:80:55:0d:d1:9e:43:08:75:52:ef:86:32:2a:d5:3b:ad:
         5c:29:48:cd:5d:e6:27:7f:0b:03:00:d1:e4:09:4f:89:44:ec:
         e6:43:ee:ac:5d:f7:5b:04:c0:73:b9:39:6d:98:eb:96:94:7a:
         b5:da:fe:c4:fb:4e:2e:c8:0b:b0:ca:cc:8c:cf:05:96:0a:ac:
         63:9f:84:9e:9c:5a:e6:19:cc:6a:2c:81:cc:19:0c:ca:2a:a8:
         e4:8c:ab:53:39:e3:b8:ce:f5:cf:45:11:62:f5:8f:91:95:a1:
         ae:ab:70:ba:b6:25:8a:e1:44:ca:dc:5d:6b:31:9e:97:d1:9f:
         44:39:4d:6c:d9:04:79:51:eb:2e:93:d7:68:c3:fc:2d:25:ae:
         89:db:0f:04:b9:90:95:7b:ff:7e:30:ad:64:72:06:15:69:91:
         bc:55:31:c7:2e:75:63:2b:4a:53:40:27:ea:5e:3e:c1:30:5f:
         97:9b:e3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:05 2026 by rpki-client