Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
File:                     mkQDBAPVC3G5mEY7OuVoQ7klleE.mft (raw, json)
Hash identifier:          wO1W/tu+qSL2tLCqsUgYnmT6Gw3fYkqOLN5hHYKffYA=
Subject key identifier:   93:6A:FB:82:80:3B:DF:B3:8F:45:DE:D9:5F:42:B5:5D:B9:78:CB:F5
Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
Certificate issuer:       /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Certificate serial:       08DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
Manifest number:          1AC3
Signing time:             Tue 18 Aug 2026 17:21:01 +0000
Manifest this update:     Tue 18 Aug 2026 17:21:00 +0000
Manifest next update:     Tue 25 Aug 2026 17:21:00 +0000
Files and hashes:         1: mkQDBAPVC3G5mEY7OuVoQ7klleE.crl (hash: us5npn/9ZbMdcSz9pSAllAuSoBqLz+w0UTX2VTwqroM=)
                          2: AD46C158EDA911EA977E1C36C4F9AE02.roa (hash: pFivcl6/2LaS0iSbDcUyygHwyMDGedaAY+O1WaW+9u8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
                          rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271 (0x8df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
        Validity
            Not Before: Aug 18 17:21:00 2026 GMT
            Not After : Aug 25 17:21:00 2026 GMT
        Subject: CN=6a84947c-213d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:44:9c:b4:4e:b2:46:60:79:81:b4:2f:c0:
                    11:7c:c5:09:cc:4b:a0:9b:e4:74:6c:33:40:40:31:
                    5e:0f:fd:b2:50:46:a2:2b:8e:f8:f8:fe:13:35:7e:
                    14:23:78:c9:60:ed:51:30:d6:8a:a2:b2:ad:a5:52:
                    ea:b2:3a:cc:1b:d7:35:25:d7:22:af:eb:58:9f:e7:
                    f6:1a:25:2a:47:f8:86:b2:24:73:81:fd:10:9b:a9:
                    ca:18:fb:a4:a0:7c:40:64:15:b8:a1:57:e3:10:b3:
                    e4:9a:ca:0c:38:ec:19:ba:ca:76:e5:94:7d:18:23:
                    47:06:41:ae:31:14:3b:81:a8:38:5b:71:01:3f:00:
                    52:32:d6:38:b9:4d:fa:8e:e3:a1:0d:b3:d8:59:13:
                    bc:f0:0a:05:18:72:6d:ea:21:0f:17:8b:b7:67:20:
                    69:a1:74:78:5d:5d:58:6f:d1:8d:37:3e:29:57:0f:
                    7e:53:af:0d:5c:df:c1:4a:98:18:24:54:40:fb:95:
                    82:45:c2:9d:97:ae:fa:a8:9a:1a:e9:30:64:3e:99:
                    21:ab:d4:70:41:e4:69:aa:e3:29:e3:9a:c3:ac:1a:
                    d2:fd:8b:ff:59:7d:62:54:66:31:6e:8f:f4:08:27:
                    81:0c:44:26:e4:b6:29:6b:3e:ac:6a:05:aa:4c:52:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:FB:82:80:3B:DF:B3:8F:45:DE:D9:5F:42:B5:5D:B9:78:CB:F5
            X509v3 Authority Key Identifier:
                keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:20:ca:58:6c:27:22:50:c2:04:da:6e:ca:12:f3:1d:fb:b8:
         a2:d1:56:1f:f3:85:5d:d5:fc:c7:73:65:0d:58:78:ac:56:4a:
         52:c6:41:1c:77:a4:df:65:85:2b:64:80:29:cc:d5:84:dd:7e:
         4d:ce:51:b0:69:be:aa:7f:4c:49:25:18:da:a5:7b:bc:c3:69:
         3e:cd:8a:88:8c:e8:48:1a:f7:a9:07:c9:43:40:f5:7f:b3:fc:
         e2:3d:75:d1:fe:75:7f:01:05:82:b7:6e:a9:3e:1f:ac:1c:ec:
         54:76:55:6f:5d:10:cf:9d:8e:30:94:37:a3:77:15:93:84:fc:
         22:04:0a:62:70:1d:01:7d:d9:75:81:49:dc:77:cb:12:26:a6:
         f1:55:8f:32:38:f3:76:f2:18:93:31:a4:d6:53:81:11:cd:c4:
         6c:c6:83:b3:b6:eb:a5:4b:d7:09:a9:09:5f:bb:7f:61:e5:93:
         12:d7:7b:96:79:6a:80:61:b7:d2:20:70:77:3f:20:f1:de:e0:
         08:7a:93:15:f5:3a:39:3a:9f:2d:b9:e7:6d:b0:db:cf:de:a8:
         ff:a7:e4:a6:66:03:15:3a:3f:c8:0d:52:a2:2b:97:c5:11:0f:
         6b:f4:ac:4f:e8:7a:58:17:3b:7a:b4:b3:73:7b:b4:0c:e9:10:
         68:56:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:44 2026 by rpki-client