Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
File:                     QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json)
Hash identifier:          V2FfH5H5LZYvwtul6jjbhZIwSKpWgWZxBU5cQ5IwwUA=
Subject key identifier:   E8:C8:38:82:40:78:FB:B7:2B:C4:A3:71:CC:BE:34:F8:44:96:54:9B
Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4
Certificate issuer:       /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
Manifest number:          021D
Signing time:             Wed 26 Aug 2026 16:59:59 +0000
Manifest this update:     Wed 26 Aug 2026 16:59:58 +0000
Manifest next update:     Wed 02 Sep 2026 16:59:58 +0000
Files and hashes:         1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: Uk6rNkC/m1bP32pVq7T4QAkrJx9extjsg131MYeVbko=)
                          2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: XSrmRnZlMx5Z3Gsv5j+R2nebqshQgxS35JJmLLu9/UA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl
                          rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
        Validity
            Not Before: Aug 26 16:59:58 2026 GMT
            Not After : Sep  2 16:59:58 2026 GMT
        Subject: CN=6a8f1b8f-1896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:fb:03:53:16:13:91:20:50:cd:08:f8:6a:
                    13:0d:35:39:d5:d5:12:8a:53:a7:63:84:fb:2d:53:
                    c7:c9:f8:8f:60:f7:44:24:6c:4a:d2:1d:6e:b1:e1:
                    f1:bb:12:dc:ca:fc:ab:87:cc:60:c7:ed:8c:a5:fb:
                    a3:da:c9:55:b6:cc:fc:a7:e7:5d:5c:73:7b:1d:e6:
                    e8:70:f3:67:b9:b3:be:3e:7f:82:1a:b3:df:57:35:
                    8a:d5:5e:bd:f2:43:a5:01:83:6f:7d:78:39:43:c8:
                    84:8f:44:1d:05:2b:db:27:cf:27:02:d4:0c:63:7d:
                    0d:91:ea:6e:fa:0b:5c:87:96:ca:9b:c7:97:8b:74:
                    61:f8:44:a2:5f:40:89:a8:cc:c9:03:08:8f:a3:f4:
                    41:f3:55:32:a4:7c:66:1e:59:49:f8:45:36:a1:69:
                    a8:77:96:8e:38:7b:11:a1:71:e3:1b:5d:b7:d6:0c:
                    df:9c:2a:d9:05:23:3b:a4:75:ad:7f:cf:dc:7b:30:
                    bd:d3:fc:fe:da:2c:23:ee:53:4d:61:4c:84:c5:bb:
                    a9:0b:13:de:76:ca:6d:4c:7a:00:1e:12:91:1d:8c:
                    24:0e:ed:5b:72:d2:92:da:7d:3a:5c:50:03:77:2c:
                    00:be:6d:7b:97:a5:6b:b0:ff:c4:1c:00:4e:81:2d:
                    e6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C8:38:82:40:78:FB:B7:2B:C4:A3:71:CC:BE:34:F8:44:96:54:9B
            X509v3 Authority Key Identifier:
                keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:22:5f:39:35:b4:d0:bc:51:d5:61:5e:88:ed:ff:79:5e:0c:
         03:66:50:74:53:ec:73:4f:07:90:d6:6e:bf:b3:6e:96:88:17:
         db:18:cc:40:a4:60:38:84:21:cf:cf:dd:06:d0:c9:6a:6e:41:
         5d:a4:e1:3d:4c:48:df:bf:17:8e:44:c0:f1:d6:1f:c5:5c:2f:
         8b:eb:63:a8:7b:4a:e1:18:49:f6:fd:dc:b6:84:53:16:ff:5f:
         51:48:91:db:a5:32:de:cc:cb:7a:c1:13:e1:1a:a8:c4:fd:6b:
         19:72:09:8e:cb:1a:46:d0:c9:d3:95:3c:af:8e:9e:2d:05:64:
         9f:0c:a8:ae:0b:02:09:f5:79:6b:79:10:62:05:5b:10:c3:07:
         2b:7a:2c:3e:a9:3e:05:e9:03:e2:14:52:a5:68:6e:04:98:34:
         7b:59:d3:54:1e:a6:60:8f:78:84:ea:3e:d3:3e:90:9f:02:ce:
         cf:4e:63:1f:ab:cf:71:1a:89:c4:d8:d5:ce:49:cd:33:c0:72:
         a5:50:bb:36:94:5a:ae:ad:17:09:c3:98:d6:53:fa:b1:c3:2d:
         35:ed:b7:ab:e7:51:55:0f:cf:88:53:a3:02:8a:9a:0d:1a:e0:
         31:b8:6d:df:4b:cf:d5:92:f2:23:74:bd:70:87:d5:5b:d2:7f:
         3c:2c:a9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:35:21 2026 by rpki-client