Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft
File:                     Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft (raw, json)
Hash identifier:          G72XTxYlLgeNKtXqa75JwEQ10jk5e4sy3T6+2/pN7DI=
Subject key identifier:   B1:74:40:5C:B5:C8:87:0E:BB:DB:57:FB:8F:98:E2:E0:BD:50:61:46
Authority key identifier: 43:FB:DD:D5:DB:77:9A:6B:1E:C4:8B:36:37:FA:97:B3:18:66:5B:1B
Certificate issuer:       /CN=A9154515/serialNumber=43FBDDD5DB779A6B1EC48B3637FA97B318665B1B
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q_vd1dt3mmsexIs2N_qXsxhmWxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft
Manifest number:          7D
Signing time:             Thu 03 Sep 2026 08:03:28 +0000
Manifest this update:     Thu 03 Sep 2026 08:03:28 +0000
Manifest next update:     Thu 10 Sep 2026 08:03:28 +0000
Files and hashes:         1: Q_vd1dt3mmsexIs2N_qXsxhmWxs.crl (hash: hKw7JQIuiClwicB9eCst/ArLNkDFKZXuWT+RKE1TTGs=)
                          2: 21F007E0F5FF11F0A5E3E8DF536F56BC.roa (hash: Nnd7RgfSHIzLCSHHiBA5Rftl8Ye/mbhR0u1X+itD58k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.crl
                          rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q_vd1dt3mmsexIs2N_qXsxhmWxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154515, serialNumber=43FBDDD5DB779A6B1EC48B3637FA97B318665B1B
        Validity
            Not Before: Sep  3 08:03:28 2026 GMT
            Not After : Sep 10 08:03:28 2026 GMT
        Subject: CN=6a9929d0-4e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:61:e4:31:07:0a:01:b3:bf:fd:d2:6f:ce:a2:
                    b6:c6:42:ac:24:2f:dc:7d:39:8a:57:10:75:6b:e3:
                    2d:d4:b3:06:2f:f4:3a:10:e6:c4:cc:27:8d:0f:e9:
                    a8:86:58:69:31:4a:4e:1a:4b:6e:23:16:a6:d7:4d:
                    6e:b0:52:d7:74:1e:57:c1:55:9f:78:ec:39:9b:05:
                    65:e2:9a:b0:ff:82:18:23:06:a7:75:be:7f:d2:f1:
                    91:b0:a0:f9:77:4a:e2:ee:8e:40:78:8d:ef:39:99:
                    fb:18:51:5a:79:87:11:09:ff:d0:ad:8c:36:5f:61:
                    54:99:3a:7b:6f:75:7a:2c:5d:c5:60:51:0e:5f:c7:
                    62:8b:36:d9:78:38:bf:07:0e:ec:f2:27:06:dc:16:
                    f4:42:bc:01:e1:de:6f:fd:b6:7f:48:22:6e:d2:6d:
                    7a:39:55:9d:76:8d:96:59:72:ea:29:89:07:32:57:
                    14:b4:01:10:fe:89:af:c5:f8:14:d4:e5:3f:32:a1:
                    35:3e:38:ef:0f:9f:f9:a0:80:a0:e9:3e:e5:4d:93:
                    30:32:c9:5b:df:26:f9:4f:b3:e8:34:89:49:34:41:
                    38:23:70:23:7f:12:13:36:d7:f0:ed:7f:df:6f:1c:
                    b3:44:19:74:6c:b7:80:f9:79:cb:3a:be:03:a2:46:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:74:40:5C:B5:C8:87:0E:BB:DB:57:FB:8F:98:E2:E0:BD:50:61:46
            X509v3 Authority Key Identifier:
                keyid:43:FB:DD:D5:DB:77:9A:6B:1E:C4:8B:36:37:FA:97:B3:18:66:5B:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q_vd1dt3mmsexIs2N_qXsxhmWxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:91:a5:69:2f:ed:d9:fd:3b:78:f6:fe:e0:7f:d6:ad:20:d5:
         25:76:72:08:ec:89:b5:60:ae:25:81:d8:e8:8d:5e:6c:30:7f:
         2c:48:61:24:49:fb:f6:5e:9b:45:96:d4:02:54:c4:fa:3b:c0:
         93:2e:4c:21:d4:e1:b1:78:0a:06:6e:e1:06:52:d3:41:da:c4:
         9d:59:62:e2:33:54:07:9d:1c:1e:8b:22:69:eb:c7:92:e3:b5:
         72:f8:c0:1e:94:e2:22:21:bb:21:c2:ac:10:3e:17:a8:51:a0:
         ab:6c:f4:7f:d9:e0:68:b2:9e:45:a6:b2:9b:4e:c1:ab:8e:98:
         3a:26:72:8a:47:71:0c:f3:45:cf:18:f9:37:65:81:ab:57:a1:
         2e:aa:46:50:fd:da:d8:32:b5:8d:d9:c9:62:5c:ff:83:cb:e4:
         eb:61:61:eb:cb:ec:3e:43:40:bc:64:f0:f6:f0:cc:ce:75:25:
         07:ba:cd:86:09:5f:83:10:34:00:89:f4:0b:cb:97:9c:f0:10:
         9a:6e:a1:a5:72:54:2f:6a:08:b8:d8:97:cf:a2:bf:c8:b5:98:
         a7:7f:13:f4:5e:ef:9c:b9:b6:e8:eb:60:aa:e6:52:3d:67:bc:
         9a:b2:48:37:27:22:15:d7:f9:4a:58:11:0f:41:91:fd:6d:87:
         b8:08:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:09:18 2026 by rpki-client