Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
File:                     qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json)
Hash identifier:          9ex0qvR1p0UFCg+tU+DLmV22QY+z5apjeGkHwxxKEeg=
Subject key identifier:   61:D7:98:A1:F4:EF:29:16:8A:14:E7:B2:8B:4F:46:1C:65:A9:97:70
Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
Certificate issuer:       /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
Manifest number:          97
Signing time:             Sun 05 Jul 2026 08:03:27 +0000
Manifest this update:     Sun 05 Jul 2026 08:03:27 +0000
Manifest next update:     Sun 12 Jul 2026 08:03:27 +0000
Files and hashes:         1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: rV9il0klVkdH4enyQQfOlyTBTuGeU3fnYdE2PGduMGE=)
                          2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: +Obkn2kDVy3VtWSxRmw2o+KBF3RFJlPLni7LR/Uptdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 08:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
        Validity
            Not Before: Jul  5 08:03:27 2026 GMT
            Not After : Jul 12 08:03:27 2026 GMT
        Subject: CN=6a4a0fcf-fae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:fc:68:65:f4:89:9a:dc:44:2b:26:78:c5:
                    68:c9:91:ec:8f:0d:8c:3a:a8:eb:52:c5:2f:cc:9d:
                    78:99:03:b9:36:12:6b:a5:d5:8b:57:af:d1:e4:98:
                    00:35:78:a6:7e:a3:38:bf:64:0e:51:2a:95:b4:40:
                    bc:a1:b9:75:d9:da:f0:b3:bf:a0:a0:21:7c:37:78:
                    40:21:a4:a3:4e:1d:a7:9e:79:29:84:85:16:96:2c:
                    ba:99:0e:4b:8c:d9:ff:af:47:a6:f5:97:74:3d:4f:
                    82:6c:78:be:96:9e:34:27:2f:d1:be:4b:c7:fc:73:
                    d4:b4:52:99:4a:e1:f2:eb:b0:2d:77:2f:0b:28:c0:
                    88:bc:d6:0b:19:eb:75:8d:a6:13:71:ec:0b:c2:53:
                    eb:4e:eb:3a:19:96:de:1f:b6:76:ac:db:d8:95:8f:
                    b6:f6:a1:3e:b2:92:a5:ba:1f:42:25:06:0e:de:ec:
                    a4:c3:e1:43:ec:a7:03:58:6a:78:7d:2a:67:46:85:
                    70:10:fd:b2:82:ef:d2:df:6e:5b:9a:bc:1f:d9:5f:
                    d4:aa:39:88:90:be:52:6e:8c:9b:32:5b:24:39:64:
                    21:47:35:38:ff:77:c0:81:90:84:be:34:5b:6c:e8:
                    5f:71:45:6f:cf:82:c2:da:25:25:e3:23:d1:00:a9:
                    65:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D7:98:A1:F4:EF:29:16:8A:14:E7:B2:8B:4F:46:1C:65:A9:97:70
            X509v3 Authority Key Identifier:
                keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:03:46:55:0a:b7:0e:de:35:74:49:8c:5b:66:87:72:4d:16:
         09:5f:5a:fa:cc:06:4f:ed:ca:bd:bc:df:5c:08:b2:0c:0e:aa:
         09:29:d7:c6:bb:a5:27:e7:f5:ca:c9:01:55:29:cf:32:c9:64:
         1f:e2:6d:33:1d:05:a7:98:9e:28:03:af:38:76:3c:be:1f:08:
         6a:14:1d:2e:e5:b1:6f:b7:34:56:41:96:1c:aa:42:cd:6c:06:
         36:03:77:2e:57:cd:ca:e6:42:58:70:e5:7e:f8:ff:c8:e9:00:
         86:8d:c4:26:4c:e8:ab:33:f8:01:cc:6e:e2:b1:9a:28:03:4e:
         2d:98:c9:40:0a:3c:cc:0e:34:43:0c:d3:af:ae:f0:cf:89:f2:
         43:74:23:b9:c3:99:59:69:32:4d:8f:d2:ef:42:1b:a6:41:86:
         54:78:7e:82:4a:c6:51:0d:dd:57:82:85:fd:d9:99:f7:c0:e3:
         cb:62:47:84:d5:39:fe:98:5e:96:65:e3:f3:9c:a7:d1:0d:c1:
         7f:ee:37:5d:ef:69:3a:6f:12:70:9f:19:fe:61:52:ce:69:43:
         20:90:73:12:1a:6f:08:86:78:ab:6d:36:9d:0c:4a:1f:75:c8:
         3c:70:dd:47:c7:c9:05:86:55:af:b4:7f:2a:be:52:af:53:b1:
         70:17:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:33:18 2026 by rpki-client