Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
File:                     QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json)
Hash identifier:          wApoZHow8BsYM0+fENy5aGBeh6jsektyOfMrnHJ2ZJQ=
Subject key identifier:   2F:81:9D:8B:D8:EC:B0:16:01:E2:EE:8C:FE:D2:2D:05:1E:D6:42:B1
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Certificate issuer:       /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial:       0805
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
Manifest number:          07E7
Signing time:             Mon 20 Jul 2026 21:57:51 +0000
Manifest this update:     Mon 20 Jul 2026 21:57:50 +0000
Manifest next update:     Mon 27 Jul 2026 21:57:50 +0000
Files and hashes:         1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: HG3izvHcKynnfRiwp3w7TVlu4BrB+C+eBESL8DcyNl8=)
                          2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: 1duLitLlKe5JGX7eQUYs2Azf52gj3DJyaqa7K/tCUk4=)
                          3: 68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa (hash: w5VOo/6r3NeoiKj8fNZOZ/VJngKbDV07+QpgEuw1iFA=)
                          4: 66667640547B11F1B35F59E4B9833773.roa (hash: xUvcOGfbKcgryK4sqev8kZ+k3b3AHJ+6QuD/2AevDnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
                          rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 21:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
        Validity
            Not Before: Jul 20 21:57:50 2026 GMT
            Not After : Jul 27 21:57:50 2026 GMT
        Subject: CN=6a5e99df-dcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:ce:c1:36:e6:33:d0:99:16:f6:2f:89:72:
                    d6:70:24:b2:e3:f3:b3:45:0c:e7:71:3d:3f:6d:9a:
                    bb:4a:d9:a6:f0:7a:0a:42:c7:5b:1b:b8:34:75:47:
                    64:98:74:44:58:f1:c8:93:0f:66:bd:a1:c6:65:d2:
                    c4:3e:57:2f:20:9a:bc:4e:14:fb:a7:ba:7a:bc:e8:
                    97:74:07:21:43:89:dd:00:e9:97:7c:2f:4c:e2:b1:
                    2e:ed:41:19:e3:1d:57:28:9e:53:08:81:11:61:28:
                    9f:e1:3b:89:81:f3:a9:b3:91:4d:73:14:12:a2:9b:
                    ed:36:53:26:bc:cb:49:e4:e9:85:ed:6e:c6:ab:41:
                    f0:a5:33:c2:b3:d8:23:d6:94:10:c8:6b:f1:f7:17:
                    8c:a9:4c:9b:60:fc:4d:0f:80:a2:8f:c8:a9:bd:9f:
                    0f:c6:54:d2:9c:b4:e2:c8:b0:43:8f:78:1b:49:19:
                    4b:41:2f:1b:6d:21:28:a2:8a:2d:76:2f:25:9b:23:
                    a1:e6:cc:ed:9e:3c:a8:04:c0:6e:8d:ca:89:83:47:
                    c8:f2:0e:b0:52:ea:34:7f:05:47:ee:76:fd:e2:a6:
                    12:5c:f1:f0:b8:3b:ee:38:9a:be:71:1c:79:9d:53:
                    c8:2a:b4:7f:16:38:75:17:6e:0b:5e:a7:05:7f:6b:
                    a4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:9D:8B:D8:EC:B0:16:01:E2:EE:8C:FE:D2:2D:05:1E:D6:42:B1
            X509v3 Authority Key Identifier:
                keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a8:36:23:6a:06:b3:9e:c5:08:08:b1:1d:34:67:e2:80:39:
         74:84:bc:14:75:20:0d:20:15:f8:6d:8d:3c:b8:10:d6:80:09:
         34:ac:66:61:14:b2:b7:09:45:f8:45:d5:16:0f:a1:c1:82:cc:
         87:8a:84:86:f0:7c:cd:0f:58:0e:77:3a:49:a0:96:32:c9:5e:
         32:dd:96:68:3e:65:ff:79:0f:ad:4d:8e:77:4e:15:51:e0:b1:
         3c:76:97:38:84:12:af:70:e2:13:24:a9:81:2e:10:f1:d8:54:
         32:24:8d:50:67:31:07:14:0f:a5:5e:44:1a:10:1b:ef:aa:7f:
         1d:86:e5:c0:c7:2b:71:c9:bc:40:0c:7f:15:ad:c5:e6:94:eb:
         04:cd:b7:6f:0a:4c:82:dd:6b:3d:70:7f:b7:9c:38:75:76:5b:
         31:d7:e5:c5:c6:a6:3a:81:92:3a:b3:a2:e3:d2:ae:02:a1:4a:
         c6:e4:83:c5:93:bb:ce:48:fa:76:0d:40:59:c6:b1:dc:8e:7f:
         dd:b6:5a:2d:d5:6f:d3:d9:91:33:ef:d6:13:5c:4e:ce:f7:f9:
         ac:f2:cf:b2:a5:5c:6c:49:ee:9d:e3:17:24:45:c1:9f:76:49:
         15:59:d6:7a:a5:f5:1d:89:bc:7d:55:9b:fa:43:3f:0c:22:33:
         d8:9e:fc:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG
RTcwRDg5RDcwHhcNMjYwNzIwMjE1NzUwWhcNMjYwNzI3MjE1NzUwWjAYMRYwFAYD
VQQDEw02YTVlOTlkZi1kY2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmcXOwTbmM9CZFvYviXLWcCSy4/OzRQzncT0/bZq7Stmm8HoKQsdbG7g0dUdk
mHREWPHIkw9mvaHGZdLEPlcvIJq8ThT7p7p6vOiXdAchQ4ndAOmXfC9M4rEu7UEZ
4x1XKJ5TCIERYSif4TuJgfOps5FNcxQSopvtNlMmvMtJ5OmF7W7Gq0HwpTPCs9gj
1pQQyGvx9xeMqUybYPxND4Cij8ipvZ8PxlTSnLTiyLBDj3gbSRlLQS8bbSEoooot
di8lmyOh5sztnjyoBMBujcqJg0fI8g6wUuo0fwVH7nb94qYSXPHwuDvuOJq+cRx5
nVPIKrR/Fjh1F24LXqcFf2ukewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+BnYvY
7LAWAeLujP7SLQUe1kKxMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1
OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzczMy9BRERDM0IzRTQ1OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09X
Y3EtZzZGaDMxT1AtY05pZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPag2I2oGs57FCAixHTRn4oA5dIS8FHUgDSAV+G2NPLgQ1oAJNKxmYRSytwlF
+EXVFg+hwYLMh4qEhvB8zQ9YDnc6SaCWMsleMt2WaD5l/3kPrU2Od04VUeCxPHaX
OIQSr3DiEySpgS4Q8dhUMiSNUGcxBxQPpV5EGhAb76p/HYblwMcrccm8QAx/Fa3F
5pTrBM23bwpMgt1rPXB/t5w4dXZbMdflxcamOoGSOrOi49KuAqFKxuSDxZO7zkj6
dg1AWcax3I5/3bZaLdVv09mRM+/WE1xOzvf5rPLPsqVcbEnuneMXJEXBn3ZJFVnW
eqX1HYm8fVWb+kM/DCIz2J78bg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:04:06 2026 by rpki-client