Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
File:                     q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json)
Hash identifier:          jS4jg8i0A+gasE7JdPXkkjlf7oPbvRMlLc/ZoMZ4GsU=
Subject key identifier:   BC:A4:1F:E4:E0:06:74:21:41:3B:39:7F:B4:CF:70:D1:56:12:2B:89
Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
Certificate issuer:       /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Certificate serial:       19BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
Manifest number:          199F
Signing time:             Tue 18 Aug 2026 16:33:16 +0000
Manifest this update:     Tue 18 Aug 2026 16:33:16 +0000
Manifest next update:     Tue 25 Aug 2026 16:33:16 +0000
Files and hashes:         1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: hDn6+o8c4YaEBdQyx58LacUPf2lxeh/5eRSYPRwVib0=)
                          2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: i4NWXoIOqvLLIDoT5vnJRlML/dfECc5wW/haWblxm44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
                          rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6588 (0x19bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
        Validity
            Not Before: Aug 18 16:33:16 2026 GMT
            Not After : Aug 25 16:33:16 2026 GMT
        Subject: CN=6a84894c-24b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:02:18:db:24:84:99:91:84:31:83:b1:1f:
                    74:a0:65:be:f6:58:c5:8e:da:ce:48:a0:f5:ff:39:
                    cf:be:95:54:f2:c0:7a:12:4e:00:63:3e:88:a7:2f:
                    48:fc:c1:b1:fd:0b:48:c6:f4:74:78:06:5a:f7:5b:
                    9f:10:d5:e7:dd:34:e3:aa:d6:78:d6:7f:43:ae:76:
                    0d:d9:f8:f8:6b:fb:f5:b5:85:ab:43:1c:19:26:ec:
                    17:f4:5a:87:a4:8f:9b:b8:ab:f6:cb:aa:4b:e2:d7:
                    4c:c3:47:ce:06:a6:bd:e5:c6:bf:b4:ce:71:86:e2:
                    f0:da:14:bb:6d:45:54:b3:ba:c1:5f:c5:79:5c:03:
                    0a:d7:0c:0c:6d:32:87:bd:d3:c5:c5:cf:38:6a:15:
                    94:48:c3:ad:88:12:98:de:4c:11:87:25:e2:aa:43:
                    16:2a:12:4e:fc:bc:86:89:b6:aa:fd:a9:09:c1:b9:
                    7e:ea:e2:00:ac:dd:ef:1e:6b:bc:ab:00:4f:17:f9:
                    b9:00:10:4b:92:cd:fc:9c:6b:83:27:04:92:2e:38:
                    43:0a:9b:2c:37:ee:9c:48:85:63:3b:a5:57:1a:ea:
                    4a:65:92:57:7d:00:34:e3:47:5d:aa:c5:b8:70:9b:
                    ef:c3:81:e3:64:0b:7f:a9:e7:19:95:5d:b2:a1:61:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:1F:E4:E0:06:74:21:41:3B:39:7F:B4:CF:70:D1:56:12:2B:89
            X509v3 Authority Key Identifier:
                keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:71:83:df:c8:b2:f4:b5:f1:8c:05:2c:62:7a:bf:56:64:
         07:61:22:3b:e1:b7:bc:3f:f2:1c:3d:5c:5f:e0:34:b6:92:4e:
         9b:27:71:24:dd:62:cd:ba:50:fd:8b:53:45:63:ca:67:ed:58:
         74:ab:fc:48:fc:85:cf:2d:22:a3:ab:3c:57:c1:59:a7:51:86:
         95:82:d2:72:f0:31:04:35:d1:e3:ec:58:a5:ef:6f:c1:67:c9:
         4d:91:26:93:51:f6:47:f8:ee:5e:43:6a:cf:19:1b:d2:fd:55:
         cc:7e:29:3d:17:fe:b3:d0:0c:e3:98:fd:e9:96:74:03:59:de:
         f6:0f:0d:93:86:13:3b:1c:56:2a:24:2b:9e:ee:ff:63:c9:bf:
         24:ce:8f:a8:82:9e:66:48:1e:9b:25:60:9d:bf:17:9f:d5:12:
         6f:89:56:b3:f6:f0:08:96:29:42:5b:d5:f5:09:bc:bd:9c:6a:
         58:eb:db:78:3e:26:20:45:a9:a9:12:6c:fa:52:e5:b5:59:e0:
         c2:5f:4d:1f:48:2b:b7:d2:a5:7a:82:13:3d:3d:ae:87:d0:a2:
         56:22:67:47:5b:77:a1:02:11:e5:27:5d:1e:21:b9:95:a6:1c:
         44:ed:17:32:94:fb:96:70:43:a9:0b:49:87:3a:8e:ac:04:54:
         de:20:da:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFBNUIxMTAvBgNVBAUTKEFCN0QwQkQ1RDJBQjVERUUyRjFDRDY5NkI4MjlCQUVG
OTc3Rjc4Q0UwHhcNMjYwODE4MTYzMzE2WhcNMjYwODI1MTYzMzE2WjAYMRYwFAYD
VQQDEw02YTg0ODk0Yy0yNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtuICGNskhJmRhDGDsR90oGW+9ljFjtrOSKD1/znPvpVU8sB6Ek4AYz6Ipy9I
/MGx/QtIxvR0eAZa91ufENXn3TTjqtZ41n9DrnYN2fj4a/v1tYWrQxwZJuwX9FqH
pI+buKv2y6pL4tdMw0fOBqa95ca/tM5xhuLw2hS7bUVUs7rBX8V5XAMK1wwMbTKH
vdPFxc84ahWUSMOtiBKY3kwRhyXiqkMWKhJO/LyGibaq/akJwbl+6uIArN3vHmu8
qwBPF/m5ABBLks38nGuDJwSSLjhDCpssN+6cSIVjO6VXGupKZZJXfQA040ddqsW4
cJvvw4HjZAt/qecZlV2yoWHgKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLykH+Tg
BnQhQTs5f7TPcNFWEiuJMB8GA1UdIwQYMBaAFKt9C9XSq13uLxzWlrgpuu+Xf3jO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1Qi8xN0UxMDEwMjk5
M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhlNHZITmFXdUNtNjc1ZF9l
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EzMEwxZEtyWGU0dkhOYVd1Q202NzVkX2VNNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUE1Qi8xN0UxMDEwMjk5M0IxMUU3OUFCQjgxODFDNEY5QUUwMi9xMzBMMWRLclhl
NHZITmFXdUNtNjc1ZF9lTTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG1Zxg9/IsvS18YwFLGJ6v1ZkB2EiO+G3vD/yHD1cX+A0tpJOmydxJN1izbpQ
/YtTRWPKZ+1YdKv8SPyFzy0io6s8V8FZp1GGlYLScvAxBDXR4+xYpe9vwWfJTZEm
k1H2R/juXkNqzxkb0v1VzH4pPRf+s9AM45j96ZZ0A1ne9g8Nk4YTOxxWKiQrnu7/
Y8m/JM6PqIKeZkgemyVgnb8Xn9USb4lWs/bwCJYpQlvV9Qm8vZxqWOvbeD4mIEWp
qRJs+lLltVngwl9NH0grt9KleoITPT2uh9CiViJnR1t3oQIR5SddHiG5laYcRO0X
MpT7lnBDqQtJhzqOrARU3iDaBg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:38 2026 by rpki-client