Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier:          MMCMei01lKEtz9ixsvBrJgsV96X5/YJUD58YssluiMw=
Subject key identifier:   F0:5A:70:08:6C:67:2B:6F:51:96:4E:31:73:02:8A:04:A0:04:33:9E
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1C6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number:          1C51
Signing time:             Mon 06 Jul 2026 16:16:56 +0000
Manifest this update:     Mon 06 Jul 2026 16:16:55 +0000
Manifest next update:     Mon 13 Jul 2026 16:16:55 +0000
Files and hashes:         1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: skKbbK3P3WPnW8R+pP+WQam11w/OXWL/gtkT1t27Xq4=)
                          2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=)
                          3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: Bq4dDyNuryVKgCHn3kt6G7S6oGEDro1j46GJUBDoNaA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 16:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7278 (0x1c6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Jul  6 16:16:55 2026 GMT
            Not After : Jul 13 16:16:55 2026 GMT
        Subject: CN=6a4bd4f8-f5d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:d1:40:2b:e3:54:88:02:e4:3e:0e:38:2a:
                    19:f6:25:8e:d6:6d:2a:8a:7e:0f:7d:99:12:ea:18:
                    da:96:b3:cc:2e:8a:f5:97:1b:de:2f:b5:e7:3d:6d:
                    e8:fb:d4:04:49:8b:53:b3:22:10:89:57:ac:f9:44:
                    5b:a4:09:1d:7e:3a:68:f9:c4:2e:38:22:4b:6e:a6:
                    ad:c0:ca:57:c4:b3:32:8b:5b:78:1d:8b:ff:74:b5:
                    f1:2a:e9:72:fa:95:79:20:d8:ae:44:0e:35:95:be:
                    86:6b:ea:39:9d:db:9f:18:f0:82:63:af:5d:33:47:
                    4a:f7:4d:05:72:78:f7:b2:c1:64:99:91:bb:32:13:
                    d2:ec:77:a8:61:1d:92:94:7b:17:f2:4d:e0:6b:8b:
                    e5:7f:d1:14:ba:18:6c:f1:e2:e8:5f:2d:1b:25:54:
                    27:74:97:73:47:ec:7e:9b:cf:b2:a1:5e:b7:99:bc:
                    08:59:c9:d2:15:03:2a:da:6a:3f:77:17:44:0a:25:
                    8c:c0:4a:b0:de:5b:61:47:45:24:32:6e:67:de:c0:
                    d0:af:49:25:0f:12:1c:bc:90:f2:88:f5:34:94:6f:
                    6d:43:b3:35:f4:2c:04:32:bd:8c:ab:a4:79:50:d3:
                    4c:44:50:23:75:41:c2:05:88:d5:55:d1:48:67:79:
                    a2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5A:70:08:6C:67:2B:6F:51:96:4E:31:73:02:8A:04:A0:04:33:9E
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:70:67:04:c7:0e:a7:82:cd:18:0c:15:f7:57:e1:4e:02:68:
         ca:92:73:f6:1e:54:37:03:aa:89:53:45:da:bd:d6:90:ec:84:
         04:ad:4f:03:4b:b6:8b:37:6f:40:90:e3:a4:c0:df:36:6c:6e:
         76:72:f2:06:61:51:34:73:e2:ee:e0:c1:25:b7:42:f4:19:0d:
         69:fd:c4:49:a8:a5:ed:da:f0:d8:fe:04:62:97:48:f5:a1:f8:
         24:76:b3:2d:b2:ac:27:62:b9:4d:5c:69:0f:f4:f7:69:6b:c7:
         4d:db:1e:c2:e2:6b:78:94:89:a5:ba:1d:a8:c4:7d:5c:59:34:
         d7:f2:44:b3:20:5c:79:c5:b5:98:d1:37:ca:05:73:0a:1e:2a:
         5b:fa:05:de:21:90:1d:a7:f1:29:ce:ae:33:68:51:06:56:78:
         96:7a:1b:6f:f6:72:69:35:d8:95:d3:ea:cf:81:d1:04:1c:55:
         c7:fc:0c:ed:61:03:a6:2e:0d:5b:a5:ec:25:84:82:57:32:bc:
         b9:80:9e:c5:f2:a9:d0:b3:c1:37:63:aa:1d:ab:62:57:3d:7c:
         0b:22:17:55:76:66:2f:e9:19:6b:b1:fb:e9:73:fa:b6:a2:fe:
         6a:d4:e9:63:80:f1:f4:20:79:c9:da:78:16:3c:2c:bf:da:f2:
         d5:c4:fd:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3
OUQzMDUyMzQwHhcNMjYwNzA2MTYxNjU1WhcNMjYwNzEzMTYxNjU1WjAYMRYwFAYD
VQQDEw02YTRiZDRmOC1mNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9TRQCvjVIgC5D4OOCoZ9iWO1m0qin4PfZkS6hjalrPMLor1lxveL7XnPW3o
+9QESYtTsyIQiVes+URbpAkdfjpo+cQuOCJLbqatwMpXxLMyi1t4HYv/dLXxKuly
+pV5INiuRA41lb6Ga+o5ndufGPCCY69dM0dK900Fcnj3ssFkmZG7MhPS7HeoYR2S
lHsX8k3ga4vlf9EUuhhs8eLoXy0bJVQndJdzR+x+m8+yoV63mbwIWcnSFQMq2mo/
dxdECiWMwEqw3lthR0UkMm5n3sDQr0klDxIcvJDyiPU0lG9tQ7M19CwEMr2Mq6R5
UNNMRFAjdUHCBYjVVdFIZ3miywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBacAhs
ZytvUZZOMXMCigSgBDOeMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5
ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX
ckZQRU03bGxoRzk1MHdValEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhnBnBMcOp4LNGAwV91fhTgJoypJz9h5UNwOqiVNF2r3WkOyEBK1PA0u2izdv
QJDjpMDfNmxudnLyBmFRNHPi7uDBJbdC9BkNaf3ESail7drw2P4EYpdI9aH4JHaz
LbKsJ2K5TVxpD/T3aWvHTdsewuJreJSJpbodqMR9XFk01/JEsyBcecW1mNE3ygVz
Ch4qW/oF3iGQHafxKc6uM2hRBlZ4lnobb/ZyaTXYldPqz4HRBBxVx/wM7WEDpi4N
W6XsJYSCVzK8uYCexfKp0LPBN2OqHatiVz18CyIXVXZmL+kZa7H76XP6tqL+atTp
Y4Dx9CB5ydp4Fjwsv9ry1cT9SA==
-----END CERTIFICATE-----
Generated at Wed Jul 8 13:18:56 2026 by rpki-client