Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
File:                     1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json)
Hash identifier:          mDmbylJJumVQ1SnOocMVfKkd7eSXX1ITssJQETHF+94=
Subject key identifier:   98:5F:50:1B:51:59:D3:FC:30:0F:58:A2:27:15:69:E3:B0:31:DD:50
Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17
Certificate issuer:       /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
Certificate serial:       0C1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
Manifest number:          0C07
Signing time:             Fri 04 Sep 2026 18:48:14 +0000
Manifest this update:     Fri 04 Sep 2026 18:48:14 +0000
Manifest next update:     Fri 11 Sep 2026 18:48:14 +0000
Files and hashes:         1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: akGwijLVjUjLIYMOqsL5HVfXtanppz0LixkCbt52iVw=)
                          2: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: BbFVl72vJe1WyfGWNNCXlRQgo33o4IIXdFPTkYW2Jg0=)
                          3: 74CA44AA049F11F087661234C4F9AE02.roa (hash: rIJLG/8SjOwLF9FVD1K6pR7ghzCI3KLic0aZugbbIUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl
                          rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3099 (0xc1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617
        Validity
            Not Before: Sep  4 18:48:14 2026 GMT
            Not After : Sep 11 18:48:14 2026 GMT
        Subject: CN=6a9b126e-405b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:9b:4a:c2:a8:87:d1:34:9d:36:0c:2f:43:
                    b7:bc:5c:84:5e:bc:b5:61:86:b0:a9:e5:2b:04:de:
                    8e:f4:84:28:18:50:09:25:b5:57:c0:41:79:ac:3c:
                    31:f0:f8:77:57:54:1c:ee:5b:0a:7a:ec:29:c3:b1:
                    80:ce:a4:e9:01:f5:be:fb:20:74:28:50:79:a2:e5:
                    3b:6d:74:23:0b:18:86:70:69:1a:30:7c:56:b3:a1:
                    fe:c1:78:22:2f:d2:24:aa:7a:99:9b:6c:16:12:7f:
                    89:d7:fc:b8:ce:f2:5d:1a:ec:74:40:a9:81:4f:73:
                    9a:79:25:88:d0:e4:84:68:a6:83:f7:f3:2e:49:ba:
                    52:e6:6a:b2:4e:44:f8:99:d6:a2:42:cf:81:8a:7b:
                    4b:43:41:2b:7b:1d:03:23:e7:83:bd:41:be:d3:71:
                    47:da:a2:07:b1:5d:6d:8a:b3:97:cc:33:60:b5:b8:
                    40:74:b5:09:ab:4a:69:db:20:60:58:3c:a4:91:4c:
                    70:39:ec:68:6c:03:d0:0b:f5:8c:8d:0b:5b:64:97:
                    a4:49:f5:9f:f2:3a:c7:8b:19:02:77:7f:11:f0:4f:
                    9a:76:f2:cd:95:eb:42:9b:3c:c7:b8:a6:9f:a5:de:
                    3e:74:3f:15:0d:04:be:ae:2b:4f:4b:f7:55:e9:59:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5F:50:1B:51:59:D3:FC:30:0F:58:A2:27:15:69:E3:B0:31:DD:50
            X509v3 Authority Key Identifier:
                keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:1a:55:b0:ca:23:43:65:51:50:db:6e:b6:eb:83:b2:17:
         5c:cf:14:ff:b3:e4:e6:de:46:86:b3:8a:ab:66:a0:6c:9d:24:
         6e:5c:2e:49:22:30:aa:4f:65:14:8e:06:f1:55:a7:49:ae:74:
         63:d6:a7:e4:68:b8:07:30:82:ab:21:a4:18:74:b0:e7:70:06:
         ef:09:47:0d:51:61:0e:ca:97:c4:65:3e:01:e0:7e:f9:fb:cf:
         a4:ff:c4:5a:3d:45:88:50:82:72:80:12:bf:e6:9a:32:07:fb:
         e5:b8:51:38:18:74:ad:e6:d6:c5:21:62:a5:fb:36:53:7c:39:
         55:59:3b:14:fb:4a:03:d5:07:6e:d7:31:0f:c9:11:0a:f5:6f:
         6c:2f:89:2b:5b:5a:f6:f6:f3:df:89:0d:dc:c9:69:16:23:99:
         1d:62:fc:c0:8a:4f:b4:b8:6b:6d:c1:45:c0:61:d2:d0:58:f9:
         30:41:75:fa:e4:0d:e5:9d:3c:1b:fa:96:e8:01:f8:ba:6e:12:
         3e:f6:67:0f:f1:9d:91:98:11:2b:06:3b:40:09:fb:6b:ab:b9:
         13:0a:c6:46:15:79:aa:70:80:d3:c0:3f:f0:38:b4:fb:35:7f:
         28:1c:de:ed:59:12:27:f9:26:c8:bb:c1:24:df:b3:25:ac:e3:
         e1:05:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:04:58 2026 by rpki-client