Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File:                     Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier:          cXmOjUSl7Tcnb26Aw/1xI2+H0iRN0/1OpgnxhbuUSgk=
Subject key identifier:   03:28:B9:A7:02:9F:43:02:5E:50:73:F0:86:02:D5:2A:A5:48:F1:11
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer:       /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial:       0A19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number:          09F5
Signing time:             Sat 04 Jul 2026 19:59:15 +0000
Manifest this update:     Sat 04 Jul 2026 19:59:15 +0000
Manifest next update:     Sat 11 Jul 2026 19:59:15 +0000
Files and hashes:         1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: +w8wCRgXeTjLr88A28D8jPdah61vfw1jDKIQ3iYi1os=)
                          2: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: 61z0KuT36nUVuAoy7v3bsXZ/PxDyaJ+n/vqrzGvGZYM=)
                          3: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: G8tEalgIYlF459jNjIZOJNDqLr5DDsJR+CWVbE3khX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
                          rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 19:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2585 (0xa19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
        Validity
            Not Before: Jul  4 19:59:15 2026 GMT
            Not After : Jul 11 19:59:15 2026 GMT
        Subject: CN=6a496613-d005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:6c:23:db:07:e5:9e:03:50:9a:b5:12:af:
                    cf:22:ad:37:27:10:81:5a:39:f9:ad:23:1a:ae:ec:
                    5a:64:e1:3f:6f:11:0b:76:29:bd:35:d9:08:51:a1:
                    5f:dc:7b:5e:31:9d:ef:9c:64:a1:5e:9b:2c:4c:72:
                    10:76:3b:91:c6:6c:d0:89:7d:99:fa:26:c9:a6:72:
                    6b:cb:4e:5f:4e:3d:bb:f5:de:d3:86:8e:b1:9f:0a:
                    2e:ec:39:9a:27:65:e8:6d:c6:4a:b9:33:d2:a2:83:
                    58:1d:cc:7e:f6:7e:84:0b:0d:4a:aa:f7:92:5d:f5:
                    ae:0c:f5:46:3e:6b:ae:a3:c0:5f:79:3a:60:40:f7:
                    14:6b:06:91:b7:d3:4c:fa:36:ce:c5:b0:70:00:a8:
                    82:f0:b4:c3:84:a9:48:e2:48:2d:cc:a5:ba:aa:a4:
                    71:16:99:d7:c8:f6:cc:34:ad:ca:66:de:87:8a:74:
                    e9:c6:f4:50:25:60:f4:0b:06:00:20:7c:04:f7:0d:
                    38:a9:ba:47:3c:4f:29:c9:97:3c:91:9d:9d:4d:f2:
                    74:70:e7:86:d6:d4:b3:bb:c5:45:31:d6:fc:92:51:
                    1f:7b:98:78:65:2b:68:37:bb:f1:c9:24:bb:9c:45:
                    4c:98:f2:47:6c:a3:b3:00:1f:27:77:2d:d2:77:ca:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:28:B9:A7:02:9F:43:02:5E:50:73:F0:86:02:D5:2A:A5:48:F1:11
            X509v3 Authority Key Identifier:
                keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:01:b0:47:56:22:7d:f1:e4:8e:74:fb:56:37:8d:e7:fa:9e:
         01:ab:b2:a4:c6:fb:92:9c:51:b7:75:54:7b:50:71:11:20:bf:
         36:60:ee:e0:dd:86:62:35:90:9d:23:d6:b1:24:5e:40:04:fb:
         84:86:bc:f3:ff:b0:e4:96:ec:a4:a9:78:ec:aa:88:36:36:30:
         a2:3f:c5:5c:e2:79:e2:0e:ef:55:69:de:0e:54:8c:5d:ae:96:
         b9:9c:84:8d:15:7c:57:13:fe:c0:88:72:1c:aa:ee:d5:3f:b2:
         50:22:0a:76:23:29:4b:50:5a:46:26:b2:10:43:2d:1a:b6:2e:
         ee:e2:b5:bf:ff:1c:b8:4c:48:19:71:35:9e:32:05:c2:31:4c:
         5d:70:10:40:9e:be:b1:4e:fe:df:1a:f8:a9:d0:aa:7d:23:41:
         3f:7b:12:67:a9:71:cb:29:62:d0:dc:ee:dd:80:0d:75:ba:34:
         16:e9:9e:91:4d:44:6f:4e:ef:6f:ee:4a:7e:f5:34:11:1f:23:
         25:7b:74:af:19:2d:90:9c:ff:d8:da:34:a7:b7:a1:34:ac:e9:
         5d:77:57:16:0d:c7:e5:b8:bb:ca:90:4f:b4:18:e7:10:74:1f:
         35:96:58:9a:ec:53:2f:42:d8:87:4d:72:fd:bd:a3:55:59:75:
         41:bf:ea:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG
QkI0NkI4OEMwHhcNMjYwNzA0MTk1OTE1WhcNMjYwNzExMTk1OTE1WjAYMRYwFAYD
VQQDEw02YTQ5NjYxMy1kMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwntsI9sH5Z4DUJq1Eq/PIq03JxCBWjn5rSMaruxaZOE/bxELdim9NdkIUaFf
3HteMZ3vnGShXpssTHIQdjuRxmzQiX2Z+ibJpnJry05fTj279d7Tho6xnwou7Dma
J2XobcZKuTPSooNYHcx+9n6ECw1KqveSXfWuDPVGPmuuo8BfeTpgQPcUawaRt9NM
+jbOxbBwAKiC8LTDhKlI4kgtzKW6qqRxFpnXyPbMNK3KZt6HinTpxvRQJWD0CwYA
IHwE9w04qbpHPE8pyZc8kZ2dTfJ0cOeG1tSzu8VFMdb8klEfe5h4ZStoN7vxySS7
nEVMmPJHbKOzAB8ndy3Sd8qUGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMouacC
n0MCXlBz8IYC1SqlSPERMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2
NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1
SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI
MVBqa3o3ZWotRFA3dEd1SXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlwGwR1YiffHkjnT7VjeN5/qeAauypMb7kpxRt3VUe1BxESC/NmDu4N2GYjWQ
nSPWsSReQAT7hIa88/+w5JbspKl47KqINjYwoj/FXOJ54g7vVWneDlSMXa6WuZyE
jRV8VxP+wIhyHKru1T+yUCIKdiMpS1BaRiayEEMtGrYu7uK1v/8cuExIGXE1njIF
wjFMXXAQQJ6+sU7+3xr4qdCqfSNBP3sSZ6lxyyli0Nzu3YANdbo0FumekU1Eb07v
b+5KfvU0ER8jJXt0rxktkJz/2No0p7ehNKzpXXdXFg3H5bi7ypBPtBjnEHQfNZZY
muxTL0LYh01y/b2jVVl1Qb/q4w==
-----END CERTIFICATE-----
Generated at Sun Jul 5 12:38:22 2026 by rpki-client