Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
File:                     4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json)
Hash identifier:          iqeL66zw/s6Tcj/kv28rwpEICDVw7yViZ0ER1gJEBEo=
Subject key identifier:   CA:28:27:34:EE:18:E3:EC:21:F3:6B:A8:12:80:CA:39:60:41:21:FF
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Certificate issuer:       /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial:       0422
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
Manifest number:          037E
Signing time:             Wed 19 Aug 2026 01:21:07 +0000
Manifest this update:     Wed 19 Aug 2026 01:21:06 +0000
Manifest next update:     Wed 26 Aug 2026 01:21:06 +0000
Files and hashes:         1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: GrCmsxesJ4EOdq2X2SNa9iWd6c+G79WzJxwgFMRdUxU=)
                          2: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: 7JbMjB8d3ZxwfoscdTBgnl9vn7C/XbttuTcaCLuo0DU=)
                          3: 62B780C46EF811F1A12CAB807BA30FBC.roa (hash: WqvK9G7du0ZUPhPlzOYqfUxNooGlr51htpi5s+9yDqc=)
                          4: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: Zp1X1saUF8xeAN8dIa6PSZuihvrxW9yn1Q7v4yzeDZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
                          rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
        Validity
            Not Before: Aug 19 01:21:06 2026 GMT
            Not After : Aug 26 01:21:06 2026 GMT
        Subject: CN=6a850502-8716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:b8:72:30:e8:0d:62:fc:ae:41:5e:c9:ee:
                    f2:1c:da:15:cd:d5:88:93:56:ed:d5:37:e1:42:cf:
                    a7:57:2f:22:c5:13:aa:ff:6c:92:4e:57:2a:91:85:
                    7c:a6:50:3d:7c:dd:7e:03:2d:95:26:c2:aa:a1:b3:
                    80:ab:1a:fd:5b:eb:a4:bd:43:28:ba:e8:36:73:62:
                    26:87:1e:29:67:b4:d7:87:2a:43:f4:25:57:fb:4f:
                    b4:cc:8c:4d:54:78:9e:93:87:60:f3:ea:cc:3a:a4:
                    d1:6c:e7:e8:74:09:de:99:c6:77:e5:e2:25:fc:4c:
                    df:f1:f8:fb:06:42:c3:37:8e:02:13:8d:ca:d8:78:
                    80:58:52:78:da:54:2a:86:b9:38:bd:bc:f8:e5:c2:
                    fc:c8:3b:66:bb:2b:4d:a9:c4:04:db:8a:17:6b:79:
                    a4:ec:1d:7e:9a:bf:9c:4b:1e:23:72:8b:e2:7c:13:
                    79:47:7a:c8:91:aa:f9:66:ad:0d:30:40:f0:bd:6b:
                    1b:57:5d:6b:2b:b6:71:f3:01:d9:fa:84:12:d6:8c:
                    13:30:f2:eb:ec:11:9f:13:98:5e:55:3a:48:37:43:
                    b9:5a:19:84:a2:41:0d:d1:63:4a:4e:bb:e4:81:b8:
                    ba:fc:4c:02:d6:be:f9:59:df:85:3e:85:f5:fd:ab:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:28:27:34:EE:18:E3:EC:21:F3:6B:A8:12:80:CA:39:60:41:21:FF
            X509v3 Authority Key Identifier:
                keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:bf:f8:59:5d:36:17:2f:12:a4:dd:20:69:fa:39:2f:5f:
         19:84:5d:0a:44:ed:c0:f6:87:0d:66:47:55:16:d4:73:22:e4:
         05:a8:b4:3d:09:c8:29:7a:4e:19:36:d1:7c:e8:19:80:9d:8d:
         2f:97:95:29:08:25:9c:6d:7d:91:f4:9f:2d:aa:25:15:54:c0:
         da:6a:b6:37:16:20:ad:96:fb:61:39:c9:d1:00:eb:6f:8d:90:
         e0:cf:12:b6:b2:9d:f8:d8:8a:ff:3a:76:fa:67:e6:5f:52:5c:
         dd:51:9b:d8:e0:7a:07:2e:65:83:0e:60:4c:2c:dd:65:fd:a4:
         4f:62:23:53:5e:5e:79:cf:02:2a:7f:df:9b:8d:74:1d:c7:f6:
         91:f2:c8:45:08:ab:17:34:d3:41:be:52:ac:fe:d4:61:ff:73:
         c7:5d:88:90:e1:3f:6a:69:68:d8:55:fb:97:ec:01:8b:b4:54:
         c5:86:45:3e:d2:ad:6f:d2:70:31:29:a8:3d:59:a2:67:fa:6e:
         2a:4b:69:24:73:6a:95:61:0a:77:56:20:6e:18:03:9c:ae:3a:
         e5:1b:46:04:63:74:34:83:f8:3e:28:35:74:c8:65:f9:ca:45:
         49:d9:23:6e:f1:04:b6:cd:d4:ae:35:19:5d:1b:e1:c2:d0:01:
         17:5b:f7:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB
NkMxQUIwNjMwHhcNMjYwODE5MDEyMTA2WhcNMjYwODI2MDEyMTA2WjAYMRYwFAYD
VQQDEw02YTg1MDUwMi04NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApx24cjDoDWL8rkFeye7yHNoVzdWIk1bt1TfhQs+nVy8ixROq/2ySTlcqkYV8
plA9fN1+Ay2VJsKqobOAqxr9W+ukvUMouug2c2Imhx4pZ7TXhypD9CVX+0+0zIxN
VHiek4dg8+rMOqTRbOfodAnemcZ35eIl/Ezf8fj7BkLDN44CE43K2HiAWFJ42lQq
hrk4vbz45cL8yDtmuytNqcQE24oXa3mk7B1+mr+cSx4jcovifBN5R3rIkar5Zq0N
MEDwvWsbV11rK7Zx8wHZ+oQS1owTMPLr7BGfE5heVTpIN0O5WhmEokEN0WNKTrvk
gbi6/EwC1r75Wd+FPoX1/atKBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMooJzTu
GOPsIfNrqBKAyjlgQSH/MB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1
MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD
WTkybWRKcVY5enFtd2FzR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFB+/+FldNhcvEqTdIGn6OS9fGYRdCkTtwPaHDWZHVRbUcyLkBai0PQnIKXpO
GTbRfOgZgJ2NL5eVKQglnG19kfSfLaolFVTA2mq2NxYgrZb7YTnJ0QDrb42Q4M8S
trKd+NiK/zp2+mfmX1Jc3VGb2OB6By5lgw5gTCzdZf2kT2IjU15eec8CKn/fm410
Hcf2kfLIRQirFzTTQb5SrP7UYf9zx12IkOE/amlo2FX7l+wBi7RUxYZFPtKtb9Jw
MSmoPVmiZ/puKktpJHNqlWEKd1YgbhgDnK465RtGBGN0NIP4Pig1dMhl+cpFSdkj
bvEEts3UrjUZXRvhwtABF1v3fQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:04 2026 by rpki-client