Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
File:                     1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json)
Hash identifier:          servAD0VKyuPz++OHc2PybQJofX+sJ4w3ON+OZcV9FQ=
Subject key identifier:   93:AD:4B:5E:6F:E4:BC:AD:26:7B:F7:30:11:29:01:60:20:5A:81:D3
Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
Certificate issuer:       /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Certificate serial:       1183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
Manifest number:          1161
Signing time:             Tue 18 Aug 2026 17:24:23 +0000
Manifest this update:     Tue 18 Aug 2026 17:24:22 +0000
Manifest next update:     Tue 25 Aug 2026 17:24:22 +0000
Files and hashes:         1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: wAns50yixHrleaXkBjWKw5jTwZ3k+m7IH2KPK9FGlxQ=)
                          2: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: zaS5mzK/IyBJHAKDC1c+q1bnUd4SwxYZrRdM7KycEiU=)
                          3: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: u8MY1OzKY8z4qKXeNf9qa8cd339LC15MI2p8BZS61RI=)
                          4: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: YkgZVrV5vjIQhVdrVUxXczN4RAkHyGEMn+Q/a9az7v4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
                          rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4483 (0x1183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
        Validity
            Not Before: Aug 18 17:24:22 2026 GMT
            Not After : Aug 25 17:24:22 2026 GMT
        Subject: CN=6a849547-6b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:a9:53:2a:59:4c:26:3d:2c:a8:3b:a5:33:
                    15:31:69:87:84:f6:2d:79:bb:29:15:6a:7f:97:59:
                    83:6c:1c:e5:f1:5a:5d:39:a0:71:90:d2:33:9f:8b:
                    bc:df:3c:1c:2c:00:97:ac:77:95:ac:1d:99:c3:ff:
                    43:82:37:b6:33:ae:38:4d:2a:b9:ab:f7:e9:36:2a:
                    31:d6:0b:48:1d:1b:ec:71:ed:eb:2b:f6:c6:16:04:
                    71:7b:20:4d:db:8a:97:db:09:88:83:c4:96:f6:67:
                    58:03:dd:b3:6e:bf:b9:1e:e5:19:2c:a8:5a:88:7b:
                    52:0e:b1:2a:12:fe:24:36:e4:e6:72:7c:aa:22:6c:
                    ca:39:a9:8a:e8:fc:a9:e8:db:e9:7b:36:ad:47:9d:
                    b6:41:16:92:58:ab:f1:3c:70:0c:55:15:ff:02:be:
                    16:cc:ce:7b:6a:c7:e8:a2:dc:b5:52:e2:4f:93:8a:
                    6d:3d:52:f3:68:ba:7a:8f:46:5d:40:d5:98:70:a1:
                    5c:57:c6:fa:14:61:52:b2:6f:99:b0:4e:eb:75:78:
                    f8:0e:59:80:41:0b:0b:94:18:7a:52:96:84:e8:99:
                    41:7e:8e:d5:a6:35:35:de:48:91:a6:88:c2:4b:e4:
                    4f:f8:b1:75:90:b9:99:c6:00:d5:8a:cf:fb:63:4c:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AD:4B:5E:6F:E4:BC:AD:26:7B:F7:30:11:29:01:60:20:5A:81:D3
            X509v3 Authority Key Identifier:
                keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1b:ab:0a:60:1f:81:ef:f9:10:d0:bf:15:97:eb:13:0a:6f:
         0b:e2:39:53:f2:e1:44:dd:42:3e:dc:dd:57:ed:f1:26:78:fc:
         c5:47:24:83:2e:0c:6c:11:b4:18:10:da:9f:9f:16:67:28:0f:
         73:54:8d:5d:e5:f5:cf:dd:af:f3:5a:3c:70:bd:64:2e:48:be:
         3f:b0:52:85:df:d9:c0:3b:fc:b4:5e:35:21:fe:27:7c:25:2b:
         67:ac:58:7e:4a:0e:ef:d5:9f:7d:4e:77:87:0a:eb:c4:8c:da:
         13:f4:79:72:76:a6:71:b6:1d:9f:b8:fd:91:d4:e7:d6:56:8c:
         68:a0:17:bd:ea:e7:8e:d4:02:ae:b5:a9:ef:52:5a:12:74:82:
         ef:6b:6e:6c:4f:a4:00:8b:14:95:9e:22:f4:1d:d2:75:ef:a0:
         04:90:03:fb:cd:83:c5:d1:44:8f:b4:c8:b3:0e:19:fe:b3:d3:
         0e:c7:c6:97:e0:af:d7:48:4a:8a:92:fb:d7:a2:bd:f5:9e:bc:
         cb:19:42:49:d1:73:be:8c:79:14:1a:b5:71:1e:e4:fa:2b:15:
         dd:96:5f:5b:5e:1a:83:80:6e:1f:42:44:75:9c:c0:07:a9:1a:
         80:52:e5:72:7a:41:f9:a8:75:3f:1f:36:49:d3:ad:87:29:87:
         79:f5:bd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:23 2026 by rpki-client