Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File:                     qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier:          8W9CAmQEuIAFDYk3ksfTEvrZP1uGELuQjLis4EPUYdI=
Subject key identifier:   7E:6E:21:C3:20:B8:0C:D1:FD:A8:CA:C1:8D:86:0F:01:DE:FB:E7:01
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer:       /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial:       10E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number:          10CA
Signing time:             Fri 10 Jul 2026 17:29:05 +0000
Manifest this update:     Fri 10 Jul 2026 17:29:04 +0000
Manifest next update:     Fri 17 Jul 2026 17:29:04 +0000
Files and hashes:         1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: ZbfTR3lOCVkh1PQOK42r9hR/ZkXz3Y+P269TviME0Is=)
                          2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: na3agWbpkvvPPGYrDAzu2fpB/eIpBQi6AGL/7SLQlTY=)
                          3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: IT79Hkoa22EueYUEPb7uUMkBxRjft5NtH+6nYpQUQTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
                          rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 17:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4322 (0x10e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
        Validity
            Not Before: Jul 10 17:29:04 2026 GMT
            Not After : Jul 17 17:29:04 2026 GMT
        Subject: CN=6a512be0-eba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:7f:37:23:83:0b:29:d2:cc:ad:84:4a:29:
                    d5:5e:3a:84:fe:a5:8d:7c:e8:23:5c:75:3e:d2:26:
                    ba:5b:1d:d5:6e:4b:88:44:29:c6:72:e2:1d:af:4e:
                    85:eb:72:7b:f7:43:96:75:3e:7c:f9:43:9f:53:77:
                    15:cb:49:71:b4:af:af:75:ae:20:70:70:0a:6f:1b:
                    18:9c:ae:79:41:dc:7c:36:83:f0:c9:ae:2a:15:1e:
                    e2:9d:0c:b8:2f:e0:2a:7a:02:14:43:d8:74:32:3a:
                    84:e4:3e:d7:7e:38:70:b4:9c:52:fb:91:28:61:76:
                    dc:4d:52:81:3d:7f:01:2a:a7:e9:8f:52:3f:33:86:
                    4e:e1:e6:96:0a:60:2e:cb:f4:66:94:79:0b:d9:b5:
                    62:4d:3c:51:ef:2e:05:3c:d1:15:76:91:25:59:82:
                    fb:6a:6b:27:ca:a8:c9:e1:97:85:7a:5b:f6:e1:a4:
                    2c:d4:c7:82:4d:fa:81:c4:a1:75:64:d1:5b:00:fe:
                    ea:e9:71:d8:6e:13:eb:24:b2:a0:cb:4a:a6:61:aa:
                    4d:73:c6:9d:f1:e8:0e:74:da:d5:41:2c:8e:3b:6d:
                    7e:08:a5:69:26:a5:e9:f5:a7:3a:ad:5a:48:0a:b8:
                    f7:67:2f:8b:f7:1d:d8:97:38:7c:44:eb:07:8c:0e:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6E:21:C3:20:B8:0C:D1:FD:A8:CA:C1:8D:86:0F:01:DE:FB:E7:01
            X509v3 Authority Key Identifier:
                keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:31:02:ba:b2:22:dc:25:8c:82:02:35:51:7c:c2:2a:b4:
         61:fe:76:54:3a:e5:1a:50:ec:61:9f:27:2f:43:d8:7a:bd:c7:
         5a:41:f5:23:26:2b:91:db:c2:e6:a9:30:51:d5:66:5f:40:58:
         7b:10:ec:05:2c:87:e3:94:41:a1:15:b7:8d:f9:b2:84:18:ac:
         65:c5:33:ad:8d:93:9e:5f:fc:7e:49:71:d9:db:59:3d:c9:e8:
         35:fd:8a:fa:7a:81:3a:ef:bf:bf:9a:49:3f:23:05:e0:21:e5:
         c7:c5:57:d3:cd:3f:a3:fd:7d:8b:d7:de:8b:be:75:13:b0:96:
         48:a3:29:30:77:8a:c5:f0:e4:34:08:34:db:7a:8b:92:07:1f:
         d8:19:68:5f:52:d2:b0:2f:09:47:9e:92:1f:14:2b:de:db:b3:
         7f:07:b5:ac:92:32:d7:0d:5d:0f:70:6c:d7:25:8c:8c:24:52:
         69:48:e4:2c:07:0d:2e:16:b8:cd:99:59:1e:7b:7a:30:11:aa:
         81:9b:1b:6a:f6:1d:12:d9:b8:f4:7c:a6:97:a4:ac:a5:79:ac:
         62:c8:7b:59:cf:bb:2d:a4:a6:87:b7:7a:04:bc:4c:7c:72:a8:
         07:17:11:78:fd:a7:85:88:af:4a:59:d3:1b:c4:3a:cc:2b:65:
         b8:8f:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 08:02:47 2026 by rpki-client