Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
File:                     NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json)
Hash identifier:          9Tdv0QievHauUSx+HMF0Z/pya9PG8CfGJ2+BCn77luo=
Subject key identifier:   E8:AA:AC:EE:17:4B:4F:F0:3A:1D:9D:44:12:B0:DB:57:EB:C8:9F:7D
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Certificate issuer:       /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
Manifest number:          0198
Signing time:             Tue 07 Jul 2026 05:17:20 +0000
Manifest this update:     Tue 07 Jul 2026 05:17:19 +0000
Manifest next update:     Tue 14 Jul 2026 05:17:19 +0000
Files and hashes:         1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: MCZ0Tfw+DL1xKaDLFH5A2QAMSIqB9pZhmc6mMbgcjyo=)
                          2: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: kHqgL13pwDNCnWVijT06uf83XtGX7ISyin8fJncV3XQ=)
                          3: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: mvClkx+/PklZJGKqgdrrZKMouehan4C+PlGcFt8iz2Y=)
                          4: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: qS3P8NL2nujD8GiZi/a7Ne2ppBzTvdhSsZKX+btH6bY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
                          rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 05:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
        Validity
            Not Before: Jul  7 05:17:19 2026 GMT
            Not After : Jul 14 05:17:19 2026 GMT
        Subject: CN=6a4c8bdf-e2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:91:ee:79:aa:2e:16:c7:66:50:a6:f5:16:67:
                    18:c4:60:6c:89:c9:d9:d7:00:24:28:fa:5b:ea:18:
                    a3:3e:e3:3f:1b:55:16:13:dd:55:dc:6b:03:62:ee:
                    79:fc:8a:61:f1:66:04:ea:bb:1d:3b:88:5f:cf:36:
                    24:9a:f6:76:6b:5d:50:f1:1f:72:b0:61:28:c3:01:
                    72:28:b6:b6:bc:2a:e8:50:a7:fe:70:23:75:33:7a:
                    23:39:19:f2:ec:c6:e2:af:63:61:7a:36:a9:e7:56:
                    6c:ba:f0:64:c7:9e:ef:ec:23:b1:b7:77:45:b8:14:
                    10:52:b0:fe:12:b7:fb:e5:2b:ae:16:5f:6a:a3:56:
                    3e:06:f2:8f:22:50:f5:f2:18:df:e0:4c:25:b7:f1:
                    de:e9:4e:08:c2:5a:1e:e4:f8:8f:7e:21:97:f4:28:
                    a2:9f:03:a2:4b:fd:37:3c:28:dd:eb:5b:97:44:c0:
                    14:5c:37:90:7a:e0:cc:7d:d6:31:94:ff:5b:4a:73:
                    69:c7:51:e7:a1:44:9e:85:a5:61:3b:38:09:9c:df:
                    8c:63:a4:99:d7:37:6e:66:7a:35:bd:ff:a8:55:73:
                    eb:a3:24:0b:80:db:53:e3:fa:d0:79:95:a5:c0:19:
                    98:92:ff:af:5e:4d:38:23:51:6d:d5:8a:97:3c:ae:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AA:AC:EE:17:4B:4F:F0:3A:1D:9D:44:12:B0:DB:57:EB:C8:9F:7D
            X509v3 Authority Key Identifier:
                keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:19:4e:a4:44:18:b5:fc:fb:f2:36:46:7c:b0:b3:dc:6f:2f:
         4a:bb:1a:58:59:8d:2a:08:98:4a:cf:46:0d:38:98:33:7f:61:
         c1:66:94:a2:4e:0f:c2:a4:ed:c7:6d:3f:16:d4:f5:32:a5:ed:
         d9:0c:ac:21:40:4d:47:f2:4b:7a:90:3d:d5:03:1b:31:36:96:
         6d:9f:f3:8f:fe:42:ae:5f:f3:21:4d:31:9e:59:97:c3:36:4c:
         43:37:ed:ad:fa:58:23:01:3d:3a:4b:8e:5f:2f:99:eb:68:df:
         a5:fa:2d:87:8d:27:7d:1e:1f:a1:f4:41:65:b1:7e:88:97:e1:
         f4:f6:4d:51:a0:dd:a5:54:c5:8b:1e:4e:28:37:08:2d:75:28:
         c4:f0:24:09:ea:29:dd:2c:c0:0c:a9:b0:29:c1:d2:95:99:6f:
         cd:4d:2b:4f:14:5c:29:26:15:bc:4e:ba:c8:7f:15:c8:05:ee:
         7a:c6:8a:1f:b6:8e:ad:4c:15:e1:df:23:9d:27:a6:d0:4c:83:
         b5:26:7d:73:01:78:6a:24:39:75:0b:e5:af:70:52:f7:c8:f2:
         4c:28:39:50:34:ad:03:88:38:72:51:24:79:23:ad:96:24:91:
         a1:6f:dc:44:37:17:82:0f:52:72:d4:58:42:d2:63:14:c4:ac:
         77:b8:07:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:14 2026 by rpki-client