Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
File:                     DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json)
Hash identifier:          WG8Y73ojL2CYMdmuB9e3AFzNrwMarX/7eItHoCX/m3g=
Subject key identifier:   B7:81:7E:C4:6D:C5:F4:AB:83:60:61:FA:86:3F:21:BE:44:C6:C8:13
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Certificate issuer:       /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
Manifest number:          9C
Signing time:             Thu 23 Jul 2026 09:11:16 +0000
Manifest this update:     Thu 23 Jul 2026 09:11:15 +0000
Manifest next update:     Thu 30 Jul 2026 09:11:15 +0000
Files and hashes:         1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: DO90zVPfmmV96k26LekcPSMj56kjP1QGEAAe8Het950=)
                          2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: tzLz5H3WHIRmkrmCQ6z99a4YcvXFYzKj7iQvz5s9xtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
        Validity
            Not Before: Jul 23 09:11:15 2026 GMT
            Not After : Jul 30 09:11:15 2026 GMT
        Subject: CN=6a61dab4-30cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:b7:41:c8:1b:69:65:c2:11:2a:bb:42:1e:
                    39:80:ae:92:fa:1b:ff:97:11:3a:a1:0a:cf:c8:d9:
                    49:a3:48:56:0a:bc:0c:8e:9f:01:9b:4d:c5:f0:2b:
                    4b:91:83:7f:77:52:c8:f5:27:44:d2:86:27:6b:dc:
                    f4:95:e6:3c:6a:f0:5e:2a:d2:9b:c6:0d:37:fd:3f:
                    41:73:13:c0:f2:69:0d:0c:62:e9:3d:7d:68:86:60:
                    52:bb:1c:36:da:29:d0:ed:b1:65:c8:f7:5b:e0:0d:
                    50:ee:dd:38:11:8b:ea:74:c6:e6:21:f3:c7:97:18:
                    14:95:92:cd:e8:92:c7:20:a1:61:58:3f:88:b4:d7:
                    53:8b:84:70:3b:82:cf:5c:f6:85:79:c0:d7:13:33:
                    e5:b4:56:08:7d:69:ea:b0:cf:cf:f9:1d:e5:c4:b9:
                    b2:f9:d0:57:78:ab:44:22:e2:50:8e:4f:9a:f1:72:
                    bc:ff:e9:e5:d0:e6:1c:66:18:5d:1e:5b:44:3c:f0:
                    e2:53:63:9c:4e:8e:83:b1:67:bb:2e:ac:d3:8c:01:
                    f8:24:eb:92:0f:af:0d:1c:b8:cd:df:5d:1c:ce:ad:
                    47:33:a8:73:f8:e1:f8:ed:44:e8:eb:b1:3e:4e:1d:
                    4c:50:94:be:7d:4e:7d:57:74:b4:43:74:17:25:b3:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:81:7E:C4:6D:C5:F4:AB:83:60:61:FA:86:3F:21:BE:44:C6:C8:13
            X509v3 Authority Key Identifier:
                keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a1:18:c5:8b:6f:f7:5a:28:72:ae:cb:fa:9e:5d:16:af:42:
         db:81:71:ea:48:a0:78:ac:7b:a8:dd:e0:ca:e6:58:e8:a0:57:
         68:63:c2:0d:88:ce:af:84:2f:d2:d6:30:11:58:37:3a:2d:7a:
         c2:6c:84:6d:d7:ab:d0:39:00:96:d8:7e:db:b3:ac:1c:26:60:
         7a:d2:8e:b9:b1:60:1b:6d:f3:4a:57:9b:13:65:a0:a1:39:aa:
         c8:4b:58:db:3f:33:af:14:23:fd:8d:12:52:01:2f:0e:a6:e6:
         c5:82:31:62:b0:4b:30:ec:86:58:bd:e7:6d:99:16:92:1a:ee:
         0d:a9:d5:10:5f:a2:f0:6d:9c:31:7e:fc:cc:2c:5c:eb:42:c1:
         b2:59:10:20:c4:8a:1b:c8:88:03:a8:35:81:03:62:28:da:0c:
         ba:4f:db:75:c5:af:10:9a:84:cd:02:ad:9b:0a:05:ad:15:b5:
         e8:b3:ec:ef:26:f3:aa:78:8f:b5:01:92:8d:c2:6b:96:e3:8b:
         30:a6:b3:ec:81:46:44:9c:60:63:43:3b:3b:4e:49:0a:e8:28:
         07:89:7d:e0:c6:a9:4f:db:16:ce:ed:5f:b1:ae:d7:fc:06:a9:
         d3:8e:c1:35:f9:3e:2c:e9:da:38:ac:0c:cf:88:f7:5d:1a:1d:
         3a:c8:c4:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZBMzUxMTAvBgNVBAUTKDBFQThFMTgwNzgzMDQzMjE1NjA2MzRBM0I0RjI2RUM2
RUM3NjIxMjYwHhcNMjYwNzIzMDkxMTE1WhcNMjYwNzMwMDkxMTE1WjAYMRYwFAYD
VQQDEw02YTYxZGFiNC0zMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAobC3QcgbaWXCESq7Qh45gK6S+hv/lxE6oQrPyNlJo0hWCrwMjp8Bm03F8CtL
kYN/d1LI9SdE0oYna9z0leY8avBeKtKbxg03/T9BcxPA8mkNDGLpPX1ohmBSuxw2
2inQ7bFlyPdb4A1Q7t04EYvqdMbmIfPHlxgUlZLN6JLHIKFhWD+ItNdTi4RwO4LP
XPaFecDXEzPltFYIfWnqsM/P+R3lxLmy+dBXeKtEIuJQjk+a8XK8/+nl0OYcZhhd
HltEPPDiU2OcTo6DsWe7LqzTjAH4JOuSD68NHLjN310czq1HM6hz+OH47UTo67E+
Th1MUJS+fU59V3S0Q3QXJbPC8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeBfsRt
xfSrg2Bh+oY/Ib5ExsgTMB8GA1UdIwQYMBaAFA6o4YB4MEMhVgY0o7TybsbsdiEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkEzNS81NDY1N0RERTk4
QjkxMUYwQjk5NjBCMjBDNEY5QUUwMi9EcWpoZ0hnd1F5RldCalNqdFBKdXh1eDJJ
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0RxamhnSGd3UXlGV0JqU2p0UEp1eHV4MklTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkEzNS81NDY1N0RERTk4QjkxMUYwQjk5NjBCMjBDNEY5QUUwMi9EcWpoZ0hnd1F5
RldCalNqdFBKdXh1eDJJU1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo6EYxYtv91oocq7L+p5dFq9C24Fx6kigeKx7qN3gyuZY6KBXaGPCDYjOr4Qv
0tYwEVg3Oi16wmyEbder0DkAlth+27OsHCZgetKOubFgG23zSlebE2WgoTmqyEtY
2z8zrxQj/Y0SUgEvDqbmxYIxYrBLMOyGWL3nbZkWkhruDanVEF+i8G2cMX78zCxc
60LBslkQIMSKG8iIA6g1gQNiKNoMuk/bdcWvEJqEzQKtmwoFrRW16LPs7ybzqniP
tQGSjcJrluOLMKaz7IFGRJxgY0M7O05JCugoB4l94MapT9sWzu1fsa7X/Aap047B
Nfk+LOnaOKwMz4j3XRodOsjEGw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:33:59 2026 by rpki-client