Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
File:                     qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json)
Hash identifier:          7PyaK9tNE/AVynZx9NXu96VPnQBwU9VDRoMzPGdI2/o=
Subject key identifier:   40:04:F4:A7:C2:40:55:E0:A6:A7:DE:71:2A:E1:D0:D1:FC:05:D8:0C
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
Manifest number:          0130
Signing time:             Tue 21 Jul 2026 07:13:09 +0000
Manifest this update:     Tue 21 Jul 2026 07:13:08 +0000
Manifest next update:     Tue 28 Jul 2026 07:13:08 +0000
Files and hashes:         1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: gZKSebrL/nbXJiHJ0Ifa06zKEFq+YwCNPnsXjI/wwE4=)
                          2: 8F32CF70B52911F0A8B8B043C4F9AE02.roa (hash: taxyHSMu6qgppApaM1TlGNcuezRlMpE06j4rH3H1Gp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 07:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
        Validity
            Not Before: Jul 21 07:13:08 2026 GMT
            Not After : Jul 28 07:13:08 2026 GMT
        Subject: CN=6a5f1c05-29d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:1a:88:8e:32:f4:a5:20:8a:3f:11:90:df:
                    dd:05:a6:d9:61:e4:28:80:34:bd:b3:62:e0:13:70:
                    61:b0:c6:7a:26:99:04:ea:17:ce:d3:7f:c0:15:e3:
                    0d:d6:cd:63:a5:f1:79:d4:d4:42:7f:7d:2a:92:ca:
                    73:b1:26:84:69:4c:fe:da:9a:51:2a:85:c4:1f:73:
                    fd:ab:2a:c1:37:0d:b8:02:97:6f:9b:76:0b:f8:00:
                    03:f2:1d:94:ed:4e:17:8a:22:f3:10:bc:34:0f:43:
                    db:a1:83:53:6c:39:46:6b:86:f6:40:f8:35:39:cb:
                    a0:63:1a:2c:47:c6:fe:35:da:8b:df:8c:a7:05:ef:
                    69:f0:58:2a:4b:29:97:4e:2f:d3:d4:a3:5c:85:c4:
                    5d:54:ea:bc:0d:a2:5f:82:23:61:ab:00:2e:cf:02:
                    16:d0:2a:2d:a0:69:42:6d:68:57:e9:22:69:da:f9:
                    84:d6:fb:a6:26:af:94:56:ee:85:bf:37:07:32:fc:
                    42:6a:81:cd:d0:44:90:e9:bd:21:47:ef:6d:3b:bc:
                    09:37:86:43:35:e5:10:f4:00:97:d2:7a:de:6a:6e:
                    56:aa:93:7b:c7:7d:42:60:40:57:86:48:5a:e8:01:
                    80:d9:55:d3:89:3a:52:60:ae:28:ae:37:07:88:da:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:04:F4:A7:C2:40:55:E0:A6:A7:DE:71:2A:E1:D0:D1:FC:05:D8:0C
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:68:21:7e:ed:17:12:44:ff:34:05:b3:82:9a:8f:a5:13:ef:
         32:ef:d7:5e:90:9e:96:68:69:42:87:2e:23:15:7a:9d:18:52:
         02:7a:83:aa:81:01:2e:d5:8f:76:e9:33:91:fe:b7:bd:fc:e5:
         d6:35:34:8d:21:5a:0d:5a:9e:1e:31:e7:14:45:67:ab:a9:56:
         87:63:65:06:0f:c3:64:26:0d:83:7b:3c:29:47:1e:fe:40:a9:
         16:01:c5:65:5e:27:d8:3a:8a:51:c8:1d:04:aa:78:3b:18:e2:
         81:01:5a:da:a3:2c:13:73:05:e5:37:6a:a2:b5:41:10:63:57:
         94:26:d6:58:c7:a0:f1:fa:4c:6f:e0:f5:9a:80:5a:13:5c:f1:
         86:ea:2c:e1:a1:d8:6e:14:1d:36:42:11:ce:26:20:54:ea:61:
         9b:89:9e:71:e5:0e:78:fc:ff:57:8b:bc:d5:20:ae:58:26:a7:
         1b:74:00:d2:b3:4d:a6:4d:4d:ea:4a:e9:cf:c6:41:f8:1d:60:
         0a:01:45:98:d5:49:bc:52:b2:98:89:bb:a9:f4:50:5c:85:1c:
         61:94:f2:87:ea:34:c5:e8:17:d8:08:1d:46:02:71:c2:de:68:
         94:26:e4:82:a6:cd:e2:ff:2f:86:4f:6f:51:b7:cb:ab:6f:8a:
         b8:a4:d7:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJBNDcxMTAvBgNVBAUTKEE4NkU1RDQwQUExNTI5RDRGRjIyQjMyQzRFOTMwMDZE
MEZBMkNBNzQwHhcNMjYwNzIxMDcxMzA4WhcNMjYwNzI4MDcxMzA4WjAYMRYwFAYD
VQQDEw02YTVmMWMwNS0yOWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3CoaiI4y9KUgij8RkN/dBabZYeQogDS9s2LgE3BhsMZ6JpkE6hfO03/AFeMN
1s1jpfF51NRCf30qkspzsSaEaUz+2ppRKoXEH3P9qyrBNw24Apdvm3YL+AAD8h2U
7U4XiiLzELw0D0PboYNTbDlGa4b2QPg1OcugYxosR8b+NdqL34ynBe9p8FgqSymX
Ti/T1KNchcRdVOq8DaJfgiNhqwAuzwIW0CotoGlCbWhX6SJp2vmE1vumJq+UVu6F
vzcHMvxCaoHN0ESQ6b0hR+9tO7wJN4ZDNeUQ9ACX0nream5WqpN7x31CYEBXhkha
6AGA2VXTiTpSYK4orjcHiNr+mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAE9KfC
QFXgpqfecSrh0NH8BdgMMB8GA1UdIwQYMBaAFKhuXUCqFSnU/yKzLE6TAG0Posp0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny9FRUI5NEQ3MkI4
MjAxMUVGQUFFNkY1NjdDNEY5QUUwMi9xRzVkUUtvVktkVF9Jck1zVHBNQWJRLWl5
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FHNWRRS29WS2RUX0lyTXNUcE1BYlEtaXluUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkE0Ny9FRUI5NEQ3MkI4MjAxMUVGQUFFNkY1NjdDNEY5QUUwMi9xRzVkUUtvVktk
VF9Jck1zVHBNQWJRLWl5blEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUWghfu0XEkT/NAWzgpqPpRPvMu/XXpCelmhpQocuIxV6nRhSAnqDqoEBLtWP
dukzkf63vfzl1jU0jSFaDVqeHjHnFEVnq6lWh2NlBg/DZCYNg3s8KUce/kCpFgHF
ZV4n2DqKUcgdBKp4OxjigQFa2qMsE3MF5TdqorVBEGNXlCbWWMeg8fpMb+D1moBa
E1zxhuos4aHYbhQdNkIRziYgVOphm4meceUOePz/V4u81SCuWCanG3QA0rNNpk1N
6krpz8ZB+B1gCgFFmNVJvFKymIm7qfRQXIUcYZTyh+o0xegX2AgdRgJxwt5olCbk
gqbN4v8vhk9vUbfLq2+KuKTX+Q==
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:42 2026 by rpki-client