Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
File:                     Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json)
Hash identifier:          +8Y1gvbUI2Dt8kNxnZyr+ekjrjJRK9WdCEAJq6Ak13s=
Subject key identifier:   AA:46:67:F8:90:05:36:7D:5A:41:DF:C6:B7:18:1B:9D:2F:D2:5A:E2
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Certificate issuer:       /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial:       0BC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
Manifest number:          0B00
Signing time:             Sun 26 Jul 2026 20:02:55 +0000
Manifest this update:     Sun 26 Jul 2026 20:02:55 +0000
Manifest next update:     Sun 02 Aug 2026 20:02:55 +0000
Files and hashes:         1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: FWWS5RALMSALo2MAjw7K/M9dozSfrE2L5LSdDhoUNFg=)
                          2: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: wpGRFC6+DwJQoD/Bm6hMgYO5Gr04EgHxiy8sbfP7iA8=)
                          3: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: LpUWhMMembbOWPh50IbGhsLcg7v+awk6J0ISPizwZwo=)
                          4: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: sw6eH1M5hEn6a0pc3B0uLVLZCRXvmEkQN01rQxgEvj0=)
                          5: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: SkOhlI1Sq/LIctQQV3ASYYQ+aRYJDMBcBGKvl4fYf/A=)
                          6: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: GKBnrOK5UbpE6Y1zn126/+tVLBVe3fXMAkHrduoxCcI=)
                          7: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: GhZxcNMvyQlSrFSWmku1+ahVlAxZoEGclnQbU2Qrymw=)
                          8: 553170245AC511EBA052F663C4F9AE02.roa (hash: NBDkJIuqHlF4I8cMlSivAAbBMzPvILaMaBqKjeLV/KQ=)
                          9: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: wZo18R1LnD+2k6h4J7pMIrHXFSVwyqxLJaqUcBl2koQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
                          rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3011 (0xbc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
        Validity
            Not Before: Jul 26 20:02:55 2026 GMT
            Not After : Aug  2 20:02:55 2026 GMT
        Subject: CN=6a6667ef-84b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:b5:e0:63:75:5d:99:45:fa:80:6a:26:71:
                    8a:b8:9a:3e:57:cb:30:0a:77:98:7a:f2:d0:06:13:
                    74:b3:74:2c:c2:3d:4e:96:a8:88:50:dc:4e:4d:9a:
                    9c:3d:63:e7:39:a7:37:32:79:da:cc:42:ad:6b:14:
                    13:38:fa:5c:4e:0d:dd:78:d8:60:73:d2:a6:8d:e9:
                    58:f3:b4:44:c3:3c:11:22:52:43:2a:19:b1:2b:6c:
                    ba:82:15:82:1e:c8:c0:c1:8f:e5:47:94:16:4f:12:
                    83:52:fe:ec:95:02:99:af:63:ca:47:98:a1:3f:46:
                    92:fb:e0:b2:66:69:d1:96:89:fc:82:0a:0e:a0:0b:
                    f9:6f:f3:10:18:30:e4:4b:9b:3b:a3:99:e6:7f:49:
                    69:e7:a5:0c:59:7d:a7:fe:53:1e:46:24:66:d7:49:
                    8d:e7:3b:a4:5d:93:12:53:a4:8c:72:a5:a6:49:e7:
                    6c:f5:57:37:c8:c9:61:a6:75:62:7a:7f:17:a0:e0:
                    7a:a2:b8:01:48:8e:ea:43:7f:1d:47:0b:31:8b:6c:
                    a2:2f:df:95:a8:0e:21:ee:fa:6c:da:0d:aa:d3:6d:
                    88:4f:41:59:7b:85:39:c4:0e:4f:6f:62:cf:3d:02:
                    a7:ed:e3:5a:8f:50:39:8e:35:31:58:af:25:32:d4:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:46:67:F8:90:05:36:7D:5A:41:DF:C6:B7:18:1B:9D:2F:D2:5A:E2
            X509v3 Authority Key Identifier:
                keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:63:56:80:ce:0e:db:c2:70:9f:b8:4e:27:ac:d2:69:28:81:
         51:af:3c:c9:98:3f:38:0d:c7:26:c6:b3:4b:6c:78:e5:aa:5b:
         2c:19:32:e5:72:c7:8c:ee:46:c3:20:e7:e8:b6:5a:6e:45:2c:
         99:1f:d2:ed:fa:04:5c:9f:89:3d:b2:4b:79:81:0e:de:c6:0f:
         57:0b:d3:73:a5:eb:cc:5a:20:2e:7b:e0:44:a9:02:4a:90:04:
         01:fb:8d:18:95:e5:67:27:ab:0f:c2:30:c8:eb:f5:c3:f4:53:
         74:2e:9d:d1:e3:e6:e3:72:d5:45:9e:65:7c:63:b7:ae:0b:b6:
         c9:1e:48:1d:64:28:fd:4c:06:cf:a3:d3:3d:53:ff:73:8e:f0:
         f6:ab:6e:4d:e0:f4:46:24:ba:e7:59:5a:18:50:5b:db:db:30:
         e4:8a:31:51:5b:67:9a:bd:1b:47:ae:71:2a:e8:e5:ac:29:1f:
         3d:e4:07:bc:0c:f3:26:89:4c:24:9b:cd:6d:69:4a:d4:c6:00:
         7f:fb:df:6f:fe:59:8e:b4:03:f6:13:93:80:d3:ff:24:cd:88:
         2b:66:6b:14:70:3f:ab:fd:e5:38:07:fc:17:7c:e5:d5:8d:5d:
         80:f1:15:b3:7f:ce:b0:63:25:81:82:03:55:0a:95:2f:7d:de:
         2e:70:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:35 2026 by rpki-client