Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File:                     qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier:          +a1loz5bzr5CtczLj2w4HCcgEL07k/OtMr0Cqeao0kY=
Subject key identifier:   4A:6C:65:1A:B5:18:52:F8:FF:41:E8:1B:82:FA:74:A9:99:CB:A6:56
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer:       /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial:       10FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number:          10E4
Signing time:             Wed 26 Aug 2026 17:15:38 +0000
Manifest this update:     Wed 26 Aug 2026 17:15:38 +0000
Manifest next update:     Wed 02 Sep 2026 17:15:38 +0000
Files and hashes:         1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: 1LZB3B3M6iSHL+u5d0M9CHPYmDt2ad4Yka8oa+vgWg4=)
                          2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: GDAnZb/56NjHKOSDOXY9bNI/CfCE20/WA0Nzn9nbjnU=)
                          3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sBJRcb1jeiSo6W9iH/QWFKlKGnbO+XkPqf2UK7Z9wiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
                          rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 17:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4350 (0x10fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
        Validity
            Not Before: Aug 26 17:15:38 2026 GMT
            Not After : Sep  2 17:15:38 2026 GMT
        Subject: CN=6a8f1f3a-19de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:9a:20:54:40:81:44:b1:3c:91:98:65:7d:
                    8e:08:1f:3f:8b:28:5d:56:34:15:ff:70:27:b1:66:
                    e9:f0:e6:d3:d3:a0:23:74:21:5e:3d:b0:8b:4c:02:
                    15:b9:07:63:de:c6:7a:ba:7e:f9:09:96:3b:97:a9:
                    00:44:db:71:5c:47:b5:22:26:ba:6c:2d:89:d2:ee:
                    60:fa:ea:91:02:3a:f2:ba:49:83:67:6e:d2:49:db:
                    74:b9:2e:49:9f:89:d2:63:52:e3:ee:bd:6b:d0:46:
                    4a:71:4d:a0:36:c7:56:5b:15:ec:68:6f:be:86:ce:
                    26:c3:00:f5:91:7d:ce:57:64:01:e2:ae:b6:00:88:
                    b3:fe:b8:e7:d1:7f:ca:dd:4e:d7:87:f4:47:4c:19:
                    f4:40:df:c5:ec:48:f7:b2:1f:c9:b3:17:1b:b2:21:
                    a7:5e:90:18:2f:1f:c6:fe:bc:2f:88:f7:26:73:a3:
                    8e:43:24:25:f1:30:d4:d7:8b:12:ee:b3:fc:2f:c4:
                    99:25:cd:95:a1:f0:af:93:11:f0:3b:d4:86:8f:c9:
                    86:45:69:fa:8a:6d:69:b8:10:51:3e:97:fe:9e:c0:
                    96:5f:cf:65:1a:6c:ff:15:67:30:9f:ec:a9:3e:84:
                    15:6c:52:da:94:03:1d:f2:1e:f8:24:47:d1:0e:21:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6C:65:1A:B5:18:52:F8:FF:41:E8:1B:82:FA:74:A9:99:CB:A6:56
            X509v3 Authority Key Identifier:
                keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f1:17:55:b1:bc:ed:15:44:34:8e:0a:b4:45:37:4d:8b:c2:
         8e:32:3a:24:16:69:6e:85:2e:fd:ac:e5:db:e6:80:45:cb:29:
         34:15:d3:39:e6:50:5a:aa:c3:1f:06:42:73:90:bb:75:4d:b5:
         60:a9:0e:97:94:ba:0c:fb:a9:f5:44:06:d0:5f:e4:13:eb:5a:
         15:0c:a7:62:b1:6b:23:25:ed:79:16:fe:84:6b:5e:e6:e7:5f:
         cd:85:52:21:1a:9b:17:ea:dd:f1:40:0d:58:5d:53:c1:af:07:
         5d:55:84:d4:10:67:d5:60:60:18:95:1c:dc:04:9f:03:2c:43:
         e0:16:bb:cf:73:f7:d9:52:d9:86:4f:17:5a:2d:d3:6e:eb:54:
         94:5d:55:79:0a:42:d1:e0:c8:eb:0f:fc:88:d3:be:49:71:a2:
         4b:cc:43:91:6a:28:c4:cb:e0:66:9d:f0:00:5a:48:bb:f6:d7:
         a3:68:5d:1a:ba:d9:f7:fa:98:4c:9a:ca:39:07:d2:e1:87:65:
         01:8b:3e:90:4d:43:c4:a1:a0:d9:dd:95:d7:31:70:b3:82:6c:
         47:03:34:fe:bd:e5:90:06:00:6c:7f:1c:51:40:e3:ca:a5:18:
         41:fd:e5:0d:61:8e:7e:ee:c8:ec:26:66:d8:0a:4d:a6:40:4f:
         fe:c4:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:42:27 2026 by rpki-client