Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
File:                     -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json)
Hash identifier:          Ag529ogIvJsLogWu6Pm9keG3IGAByCxcXqX6kiss/QI=
Subject key identifier:   D7:8D:D7:23:7A:95:4C:67:83:CE:04:4E:5C:47:10:82:A9:9B:BA:F0
Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
Certificate issuer:       /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Certificate serial:       0751
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
Manifest number:          0746
Signing time:             Wed 22 Jul 2026 22:23:35 +0000
Manifest this update:     Wed 22 Jul 2026 22:23:35 +0000
Manifest next update:     Wed 29 Jul 2026 22:23:35 +0000
Files and hashes:         1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: Qp1K9t5V+lx9IYnjMPAPPuWn19rFETQchVCOsZqrRoM=)
                          2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: H4nUYpPqOxi1wSgruwKar4kfBYf1aIvICgsUIhJSeV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
                          rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
        Validity
            Not Before: Jul 22 22:23:35 2026 GMT
            Not After : Jul 29 22:23:35 2026 GMT
        Subject: CN=6a6142e7-69e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:8a:1b:75:4b:35:14:2a:84:12:11:3f:d2:
                    06:80:d8:60:da:3c:a5:c5:49:36:c7:6d:6e:d8:50:
                    ee:50:ee:47:ff:ac:50:e6:30:5b:7f:58:2d:b0:d3:
                    30:11:62:9c:9b:a1:22:0e:ff:a4:30:a3:d1:19:b9:
                    de:b5:bc:5e:83:39:31:9f:95:e4:36:61:59:cb:02:
                    d5:b3:0c:21:f8:9f:93:36:c9:24:47:ce:85:5f:59:
                    6a:75:c4:c1:98:fd:8d:6c:4a:fd:00:ce:31:5d:6a:
                    bb:0a:0c:d1:97:9e:cc:20:ad:28:9c:73:6b:04:8f:
                    31:b8:7c:44:33:bb:d5:81:ec:a7:fc:da:78:2b:65:
                    fd:5d:11:a4:75:38:5d:63:12:7b:92:a3:fd:ac:ba:
                    13:00:3a:3f:c8:41:e7:df:86:92:20:94:0e:29:39:
                    b5:00:e5:14:a9:da:4b:23:81:02:7d:bf:14:c8:68:
                    5f:e3:54:7a:c7:4c:8e:ab:f0:77:ae:6d:65:3c:89:
                    82:3d:c6:ea:6b:14:18:44:ce:2b:91:c6:17:9d:49:
                    08:a8:a9:a6:d0:d7:28:25:58:31:3b:47:b6:4b:b5:
                    2f:38:2a:84:1a:4a:04:8b:5c:fb:54:c0:a4:f1:61:
                    65:1e:d3:69:12:27:b5:00:1a:fa:68:92:b3:7e:25:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8D:D7:23:7A:95:4C:67:83:CE:04:4E:5C:47:10:82:A9:9B:BA:F0
            X509v3 Authority Key Identifier:
                keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:18:c8:fc:9d:96:0f:9d:2b:10:3b:47:14:cc:1b:21:46:
         b3:f3:07:9c:cd:5a:9a:4a:ab:8f:72:68:be:6c:71:2b:4c:2f:
         08:08:58:09:ef:85:51:4b:3d:41:68:a4:47:8b:99:df:3d:16:
         e8:e2:dd:90:08:fe:50:9c:fd:29:7e:73:29:94:59:5b:14:0a:
         64:d0:70:dc:e9:c9:24:ab:78:23:74:33:ea:91:fe:d5:9b:02:
         78:18:2a:6e:88:32:68:3c:71:15:79:45:ae:52:05:e8:fe:1b:
         40:bf:30:3a:cd:6b:a5:c5:f2:9a:07:da:92:0f:e0:d2:34:42:
         41:69:4d:57:23:68:40:14:3b:de:cc:13:f7:35:0f:3b:b9:d1:
         31:e4:b6:05:8e:d4:5f:71:89:7e:fc:7e:89:2d:36:bf:8d:70:
         43:e3:b3:0f:25:fb:07:a9:37:ba:91:3e:58:c0:d3:d8:0e:33:
         4b:40:51:ef:c3:34:a3:a4:51:d3:ae:0d:eb:2c:57:8d:b7:f8:
         c5:a9:32:e3:c4:2a:e5:84:b8:a0:0b:d7:3c:fd:0a:5a:db:e8:
         1d:51:f2:7a:eb:f9:45:11:ee:00:70:7d:d2:e9:ce:bb:9c:32:
         f0:9f:de:47:1a:ef:e2:ba:13:c0:ce:1e:db:6f:95:3d:64:cf:
         00:66:4c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:16 2026 by rpki-client