Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
File:                     Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json)
Hash identifier:          OpltGWVxclU1W71Fc4NM866Oivux7lmwmnYSoUJ0LVk=
Subject key identifier:   73:C5:50:41:11:6C:13:16:21:C0:73:78:3F:AE:3E:A7:D8:D9:6D:D6
Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
Certificate issuer:       /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
Manifest number:          0138
Signing time:             Tue 11 Aug 2026 05:02:55 +0000
Manifest this update:     Tue 11 Aug 2026 05:02:54 +0000
Manifest next update:     Tue 18 Aug 2026 05:02:54 +0000
Files and hashes:         1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: PWhX7OX4EmwiIQxM2bI9pKjHWR5nMyFYlXqGwORDTzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Aug 2026 05:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
        Validity
            Not Before: Aug 11 05:02:54 2026 GMT
            Not After : Aug 18 05:02:54 2026 GMT
        Subject: CN=6a7aacff-1402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:bf:f1:fe:5f:29:e8:ca:7f:cb:ca:bf:72:
                    5c:d7:8f:a1:22:8b:43:cd:e7:2e:d4:a0:ad:df:47:
                    70:24:ea:fe:43:e8:ed:88:21:61:80:70:90:14:54:
                    eb:0e:f7:7d:d6:6e:d0:49:be:b9:8e:0f:3b:62:1a:
                    23:5c:21:89:c5:ff:8a:6b:28:ca:11:90:e1:c4:c0:
                    bb:7e:e1:29:15:5b:b4:1b:5c:38:b8:4e:56:01:ec:
                    59:9c:e7:43:1a:56:b9:29:94:a3:63:0f:9e:10:3b:
                    d6:e0:74:a8:3a:28:ff:09:1b:de:e5:35:87:c9:7b:
                    56:9d:6a:7d:19:52:b5:a9:e6:78:98:8a:46:f7:ab:
                    c1:7a:50:a1:d8:c3:49:9c:f1:c0:cc:d4:c0:cc:8a:
                    10:ae:90:b2:54:1a:09:f5:73:3e:f6:34:8f:aa:7c:
                    a4:2c:36:67:fb:11:f9:ce:d5:36:45:04:45:3d:6b:
                    c3:08:e4:87:f2:96:25:50:09:c4:a8:d3:da:fd:64:
                    dc:4f:5a:30:5a:06:ac:53:7b:53:43:e4:52:f9:c1:
                    08:30:a0:90:a6:ad:d9:a2:0b:a4:41:b7:c0:f8:af:
                    11:5e:38:7f:91:b4:6b:e5:e5:9f:0a:9a:95:1f:db:
                    a1:98:45:b9:b9:3e:75:08:8a:e6:af:d2:48:19:b2:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:50:41:11:6C:13:16:21:C0:73:78:3F:AE:3E:A7:D8:D9:6D:D6
            X509v3 Authority Key Identifier:
                keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:01:23:36:e0:e9:19:f2:21:63:42:dd:6b:67:67:53:be:14:
         d5:f9:31:2e:9f:84:76:ee:e8:ff:e3:18:43:93:6f:ec:d4:f9:
         3b:45:07:81:df:a5:f7:e2:1f:69:6f:89:73:dc:85:e2:3d:f8:
         4e:3d:21:1c:bb:88:dd:fa:3d:97:78:28:63:91:80:60:d4:b8:
         0f:c5:43:fb:93:dc:2b:64:2e:56:00:5d:ef:c5:5d:1c:0a:f4:
         16:a3:fb:64:28:82:c8:79:75:e8:1f:2c:67:35:9f:77:11:08:
         e2:af:90:ee:5c:2e:1f:13:92:d9:de:80:0b:09:70:f9:79:33:
         1d:13:5d:4f:ea:4d:bc:fc:9c:6a:cb:a3:49:78:44:59:bb:0f:
         a1:8c:02:2d:07:bf:b7:7a:88:98:02:a1:ba:e4:0a:df:94:9b:
         ad:e4:a1:22:7a:3a:4a:ce:5f:c1:9a:78:d8:22:8f:e9:ec:9d:
         45:c5:a8:d2:15:2b:0c:ee:db:44:c2:82:cc:da:b7:80:91:a5:
         c1:29:3d:f3:1a:d8:b9:36:70:fb:11:d0:84:8a:ec:0e:a8:42:
         c7:20:bb:e8:3f:51:50:72:75:3f:d3:02:95:26:a2:cd:6e:ff:
         1c:80:64:c6:38:46:83:fe:26:6e:c1:0a:8d:86:d6:b9:97:ce:
         bc:2a:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:29:51 2026 by rpki-client