Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
File:                     nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json)
Hash identifier:          bupMccmAOaaxhhTEwYJYfvvJ4xKzjWl14cQhBqk27u4=
Subject key identifier:   BB:41:86:48:04:B9:30:AB:36:36:21:A2:ED:97:56:06:0D:4D:F3:21
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Certificate issuer:       /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial:       091D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
Manifest number:          08DF
Signing time:             Sun 26 Jul 2026 21:13:27 +0000
Manifest this update:     Sun 26 Jul 2026 21:13:26 +0000
Manifest next update:     Sun 02 Aug 2026 21:13:26 +0000
Files and hashes:         1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: pmVmph1eJzFPYmrlJtFHptuvmOx1YBYcSrtCFkyWqwg=)
                          2: 30A238FA7C0311F192D3088B8FA30FBC.roa (hash: X1FnYer6ian8Ac0sFfx3IyMLAtIA4fKJbnOQ0obiOyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
                          rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
        Validity
            Not Before: Jul 26 21:13:26 2026 GMT
            Not After : Aug  2 21:13:26 2026 GMT
        Subject: CN=6a667877-5604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:75:d2:cf:9e:df:4e:b8:34:53:fe:d6:04:
                    5c:f1:bd:55:a4:a4:a3:0f:c1:63:59:05:f2:33:cb:
                    3f:6a:95:ce:54:be:a9:11:ac:ce:5f:4e:64:74:f8:
                    cb:36:c7:de:40:3b:d5:41:2d:91:e3:a6:a4:74:bb:
                    ce:0a:0c:5d:16:8a:18:94:87:e3:5b:07:45:bd:4c:
                    1b:c4:11:b1:9f:da:77:be:bd:67:92:78:ee:ce:83:
                    35:db:ec:6a:bd:81:36:43:4d:ef:f9:f2:28:8c:29:
                    28:70:6d:f2:b6:e5:e9:82:16:91:01:d8:40:bb:27:
                    3f:e4:b6:45:1d:70:72:be:c2:b9:19:d8:57:a5:9d:
                    29:b9:26:aa:23:7d:37:ca:9e:5d:fb:84:1e:98:e6:
                    d7:35:96:e2:d2:47:eb:e8:3a:a7:1c:15:2a:d7:b1:
                    09:35:0e:86:eb:62:81:9a:82:1f:6f:4c:ff:d0:17:
                    60:d3:15:83:ad:78:61:c0:07:b6:a9:33:9f:20:14:
                    6d:d8:ad:36:18:e6:a9:5e:84:ad:f7:6a:f9:88:ed:
                    27:84:b7:71:bc:20:80:95:61:78:8b:0e:c5:6f:a9:
                    c0:d6:04:7c:db:cd:59:0e:6a:59:2a:75:c4:d7:76:
                    7f:4a:f2:a4:f1:a7:b9:d0:8f:91:4b:75:c6:ea:85:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:41:86:48:04:B9:30:AB:36:36:21:A2:ED:97:56:06:0D:4D:F3:21
            X509v3 Authority Key Identifier:
                keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:f2:10:38:56:04:a0:ba:b0:c8:d0:d3:4c:50:23:a4:80:
         35:25:24:21:6f:5a:d4:d8:c4:5f:89:66:4c:c0:38:b6:3b:04:
         7e:11:07:f4:a5:e3:25:53:4d:60:24:10:a4:49:7b:4e:dc:db:
         c1:1e:4e:e6:fe:ae:7f:a9:9d:01:d9:1e:db:6a:cd:53:fd:49:
         3c:80:15:33:e8:63:1d:83:d8:26:97:6e:a7:42:49:50:ad:c5:
         cb:cb:75:b1:30:a2:de:7c:f3:66:72:93:a6:06:e7:0e:f8:37:
         14:81:58:e0:97:c0:c2:e8:a1:98:d6:96:6d:3e:65:b6:48:0e:
         9a:ce:32:93:61:4d:60:32:b9:7f:d5:8f:f9:cb:c5:07:d4:a9:
         34:ea:5d:f9:b7:f1:ef:fc:00:92:c6:cb:5a:d6:c3:ad:f5:31:
         c3:10:62:33:5e:cc:16:c2:49:c4:5e:52:86:20:60:a7:88:a5:
         17:30:c5:66:9e:45:94:7e:8c:a2:09:35:65:82:78:94:f4:97:
         8c:42:a1:0f:72:47:6f:3a:7a:8c:d1:d8:5b:85:84:40:e5:74:
         e4:98:cd:a9:99:30:ee:25:ca:32:2d:7f:49:59:76:26:93:81:
         d5:d1:ec:89:90:a4:db:49:8f:10:84:93:f0:4a:0d:92:60:77:
         a2:9b:f6:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3
MzVGNEU0NzAwHhcNMjYwNzI2MjExMzI2WhcNMjYwODAyMjExMzI2WjAYMRYwFAYD
VQQDEw02YTY2Nzg3Ny01NjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtc110s+e3064NFP+1gRc8b1VpKSjD8FjWQXyM8s/apXOVL6pEazOX05kdPjL
NsfeQDvVQS2R46akdLvOCgxdFooYlIfjWwdFvUwbxBGxn9p3vr1nknjuzoM12+xq
vYE2Q03v+fIojCkocG3ytuXpghaRAdhAuyc/5LZFHXByvsK5GdhXpZ0puSaqI303
yp5d+4QemObXNZbi0kfr6DqnHBUq17EJNQ6G62KBmoIfb0z/0Bdg0xWDrXhhwAe2
qTOfIBRt2K02GOapXoSt92r5iO0nhLdxvCCAlWF4iw7Fb6nA1gR8281ZDmpZKnXE
13Z/SvKk8ae50I+RS3XG6oWDyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtBhkgE
uTCrNjYhou2XVgYNTfMhMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB
MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG
ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl3zyEDhWBKC6sMjQ00xQI6SANSUkIW9a1NjEX4lmTMA4tjsEfhEH9KXjJVNN
YCQQpEl7TtzbwR5O5v6uf6mdAdke22rNU/1JPIAVM+hjHYPYJpdup0JJUK3Fy8t1
sTCi3nzzZnKTpgbnDvg3FIFY4JfAwuihmNaWbT5ltkgOms4yk2FNYDK5f9WP+cvF
B9SpNOpd+bfx7/wAksbLWtbDrfUxwxBiM17MFsJJxF5ShiBgp4ilFzDFZp5FlH6M
ogk1ZYJ4lPSXjEKhD3JHbzp6jNHYW4WEQOV05JjNqZkw7iXKMi1/SVl2JpOB1dHs
iZCk20mPEIST8EoNkmB3opv2FA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 03:15:40 2026 by rpki-client