Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
File:                     qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft (raw, json)
Hash identifier:          lx6VK2mQaIrywZdERQ3eTwwHAWFhLFdflim3rM3uPCw=
Subject key identifier:   28:AA:37:71:B7:E0:9E:C5:C1:1A:32:23:CC:67:82:68:FD:FE:ED:D7
Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81
Certificate issuer:       /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
Manifest number:          010A
Signing time:             Thu 09 Jul 2026 07:57:35 +0000
Manifest this update:     Thu 09 Jul 2026 07:57:35 +0000
Manifest next update:     Thu 16 Jul 2026 07:57:35 +0000
Files and hashes:         1: qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl (hash: nBh4639tvytwX5UmO8+Ck0EiocL8ODYHC6YaekcA8t8=)
                          2: B1C9E322E9EE11EF9D68D841C4F9AE02.roa (hash: ueAfbCMkj1wTXyISOQ5e3CCqBKbOGTMXBSwXfehkPHM=)
                          3: EB967844235F11F1A0672958B4833773.roa (hash: mobncmXjJUKPVRdY5SgsST8d5Lmn2t08RY5pwNlIsZs=)
                          4: 723F9406E9EC11EF9AC2151CC4F9AE02.roa (hash: oNKLcDDjauc2LSkFEeIeDtuA3XxvzZa1yPoz4Zcyal8=)
                          5: 7F053D7E0A9611F0AA1BF786C4F9AE02.roa (hash: C4PktSIqyer8MO6XphzB29DbUJzhVWW55CATe9fFwVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl
                          rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 06:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81
        Validity
            Not Before: Jul  9 07:57:35 2026 GMT
            Not After : Jul 16 07:57:35 2026 GMT
        Subject: CN=6a4f546f-3e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:41:dd:30:9b:a9:68:1f:7e:64:be:57:c9:
                    98:55:65:5e:b3:ba:03:29:40:49:88:ca:03:ef:95:
                    74:3e:a4:47:a8:85:25:b4:98:bb:3c:32:1f:32:67:
                    86:96:62:4a:1c:cf:e3:d4:b4:ad:4d:2c:f3:4d:d9:
                    08:1b:56:3a:2a:a7:8a:d4:ca:29:25:de:e7:61:b4:
                    33:f6:c6:08:78:bb:fc:1d:b6:e4:58:12:32:b0:4e:
                    b9:97:5b:b6:75:e8:f2:1e:f4:35:cf:22:85:9a:a2:
                    42:d2:9e:0c:16:61:51:c3:35:51:9e:63:c8:ad:0c:
                    d8:1e:0a:9e:68:8f:ff:d1:09:50:5c:98:8f:f5:6a:
                    e5:a8:eb:98:60:92:03:fa:0f:ad:e2:82:bb:0a:e4:
                    d0:c4:56:88:f2:dd:08:c8:41:a4:35:8c:f1:65:27:
                    f6:d1:7a:51:1d:53:29:2f:99:47:c8:d8:3a:9e:d4:
                    d5:df:48:f9:b0:82:e8:fd:28:1e:e1:b1:86:30:8d:
                    d4:3e:e4:29:b1:32:74:03:1e:68:d3:3a:4e:3f:87:
                    8f:9b:20:a4:10:83:46:9b:35:58:bd:8c:7c:2c:37:
                    62:2c:7a:71:21:85:ad:b3:e7:08:60:a1:34:87:74:
                    10:9d:ce:68:59:6a:7c:f8:01:96:76:8e:81:ca:1b:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AA:37:71:B7:E0:9E:C5:C1:1A:32:23:CC:67:82:68:FD:FE:ED:D7
            X509v3 Authority Key Identifier:
                keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:f1:98:d9:1c:04:b7:06:b4:c6:db:90:5b:be:a3:f3:fc:
         92:1a:76:51:5d:af:4b:a8:ba:f9:bd:36:d7:ee:38:e2:95:4f:
         cf:83:50:a9:b3:a6:22:b3:e3:d6:9a:d3:82:af:ac:d7:4c:0f:
         b0:a2:c5:d8:78:ac:52:d6:50:c8:56:64:c6:02:a5:f8:7b:fc:
         b9:27:ab:c3:8a:69:3b:5d:a4:fe:79:ba:70:dd:41:8b:bf:1e:
         b9:ff:9f:bd:13:f6:40:c9:5c:80:aa:28:94:f3:8e:64:ab:26:
         3c:69:90:df:05:03:48:83:ad:df:1a:4c:0b:3e:80:37:e0:23:
         bd:b0:0d:19:8f:64:14:27:d4:f4:40:be:b0:99:11:8a:87:07:
         92:fb:18:93:55:f5:32:d5:35:59:1d:f3:8a:7c:b6:be:c0:cd:
         02:48:8e:5e:07:73:73:6d:fd:27:d0:8c:35:e1:d0:8b:f5:c8:
         30:c6:25:2d:af:35:20:bc:35:65:fd:bc:27:77:c3:44:ac:05:
         ab:62:df:00:34:8f:f4:11:d7:da:fb:98:cf:50:b2:8f:e3:92:
         5d:ce:26:82:a2:32:b5:c1:09:a4:75:0c:3d:a4:c6:4e:68:5c:
         9c:74:f7:e0:82:3d:a9:90:4f:a9:e2:f4:d3:e8:d2:f7:22:eb:
         49:03:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 12:57:42 2026 by rpki-client