Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File:                     Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier:          FhzHuA0E8z0926Dhye4JxwSngH+DnQn0f4sw2UVBKEY=
Subject key identifier:   E2:3D:52:08:2F:65:F9:CE:28:25:D2:37:72:0C:34:CA:C6:9C:7A:49
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer:       /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial:       0A25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number:          0A01
Signing time:             Tue 28 Jul 2026 20:10:25 +0000
Manifest this update:     Tue 28 Jul 2026 20:10:25 +0000
Manifest next update:     Tue 04 Aug 2026 20:10:25 +0000
Files and hashes:         1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: 3U8K02QrOlBaVKO5Ryc57T4vEDKkdOIYxNzcfk7BfMw=)
                          2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: G8tEalgIYlF459jNjIZOJNDqLr5DDsJR+CWVbE3khX8=)
                          3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: 61z0KuT36nUVuAoy7v3bsXZ/PxDyaJ+n/vqrzGvGZYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
                          rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2597 (0xa25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
        Validity
            Not Before: Jul 28 20:10:25 2026 GMT
            Not After : Aug  4 20:10:25 2026 GMT
        Subject: CN=6a690cb1-38f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:ef:35:09:90:e5:40:78:9d:8c:95:de:7a:
                    e6:38:f2:87:70:48:01:f9:72:17:6b:97:3c:c8:9b:
                    5d:70:2d:7a:91:76:b2:4b:bc:c3:b6:ba:59:df:71:
                    72:0a:fd:19:12:36:27:f1:dc:bb:c6:01:f1:4f:fe:
                    18:57:c7:d1:cd:6b:3c:58:f1:67:73:f2:73:05:c2:
                    a3:43:91:45:0b:ff:aa:4a:3b:35:f5:43:01:25:d6:
                    1a:2e:69:87:7e:69:87:5d:a6:14:20:26:81:51:ce:
                    02:59:ed:fd:93:27:69:71:e7:96:1f:52:62:e3:87:
                    37:97:e0:d8:83:79:e8:1a:50:79:b7:e2:3b:0f:44:
                    85:80:c1:e7:e5:fd:70:e5:3a:4d:cd:e4:e8:fe:05:
                    27:fd:67:ea:7b:b4:0e:1a:bb:8b:b7:66:94:b2:83:
                    32:a5:36:f0:05:33:d2:68:9f:e7:86:a2:89:c8:98:
                    6d:41:a6:59:74:af:9e:7d:74:ea:40:44:d4:7f:b4:
                    e0:a3:80:e4:71:b9:35:51:6d:67:16:09:be:f7:48:
                    96:34:69:2c:bf:6b:8a:db:e5:e4:10:52:75:c2:1b:
                    ff:93:8c:a9:4b:c5:c0:e3:59:63:c7:5f:c8:85:af:
                    2b:2c:eb:7d:4b:5f:46:71:0f:c9:95:68:99:d1:d8:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3D:52:08:2F:65:F9:CE:28:25:D2:37:72:0C:34:CA:C6:9C:7A:49
            X509v3 Authority Key Identifier:
                keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e0:7c:8e:49:ba:3f:fb:e2:2a:f0:e9:cd:5a:0f:c2:3b:11:
         6b:f8:17:a6:a9:a3:16:0f:6e:a5:aa:94:08:32:1b:bc:e9:dc:
         64:f7:1f:88:17:22:59:ac:73:cd:13:d8:0a:72:02:f5:b4:89:
         82:9a:80:57:63:4b:cf:ee:d9:27:2b:00:55:73:8b:5a:32:94:
         58:e0:fc:6a:01:a9:14:30:ee:18:ac:25:d0:e7:41:dc:eb:03:
         e9:f8:d0:c8:0a:c1:08:5c:99:82:dc:3d:04:cc:8a:3b:dd:7f:
         e7:90:6f:45:45:98:24:e4:94:6b:19:05:5b:95:de:2e:38:02:
         62:d0:4b:c8:55:ad:85:ca:1f:1e:ef:a3:18:93:e7:94:f7:df:
         f2:77:8a:d1:ae:73:34:f2:73:e3:5e:b9:a0:1e:d0:60:bb:96:
         46:6e:eb:77:0e:26:d6:47:bf:38:4c:b7:2f:34:97:4a:68:2c:
         b9:cd:b2:c7:6b:d4:ec:02:80:0b:ce:00:05:15:cc:d9:a7:33:
         2f:d7:a2:63:28:0b:9a:a6:f3:80:30:7f:a3:9a:46:c4:00:68:
         0a:6c:98:e7:8f:b2:37:d7:09:a8:41:3a:8f:0c:04:9d:11:4d:
         49:81:98:41:13:c8:3c:cd:40:43:86:e0:90:45:80:7b:a5:5f:
         99:43:e8:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG
QkI0NkI4OEMwHhcNMjYwNzI4MjAxMDI1WhcNMjYwODA0MjAxMDI1WjAYMRYwFAYD
VQQDEw02YTY5MGNiMS0zOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApzTvNQmQ5UB4nYyV3nrmOPKHcEgB+XIXa5c8yJtdcC16kXayS7zDtrpZ33Fy
Cv0ZEjYn8dy7xgHxT/4YV8fRzWs8WPFnc/JzBcKjQ5FFC/+qSjs19UMBJdYaLmmH
fmmHXaYUICaBUc4CWe39kydpceeWH1Ji44c3l+DYg3noGlB5t+I7D0SFgMHn5f1w
5TpNzeTo/gUn/Wfqe7QOGruLt2aUsoMypTbwBTPSaJ/nhqKJyJhtQaZZdK+efXTq
QETUf7Tgo4Dkcbk1UW1nFgm+90iWNGksv2uK2+XkEFJ1whv/k4ypS8XA41ljx1/I
ha8rLOt9S19GcQ/JlWiZ0diS5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOI9Uggv
ZfnOKCXSN3IMNMrGnHpJMB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2
NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1
SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI
MVBqa3o3ZWotRFA3dEd1SXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQuB8jkm6P/viKvDpzVoPwjsRa/gXpqmjFg9upaqUCDIbvOncZPcfiBciWaxz
zRPYCnIC9bSJgpqAV2NLz+7ZJysAVXOLWjKUWOD8agGpFDDuGKwl0OdB3OsD6fjQ
yArBCFyZgtw9BMyKO91/55BvRUWYJOSUaxkFW5XeLjgCYtBLyFWthcofHu+jGJPn
lPff8neK0a5zNPJz4165oB7QYLuWRm7rdw4m1ke/OEy3LzSXSmgsuc2yx2vU7AKA
C84ABRXM2aczL9eiYygLmqbzgDB/o5pGxABoCmyY54+yN9cJqEE6jwwEnRFNSYGY
QRPIPM1AQ4bgkEWAe6VfmUPoDA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:45:14 2026 by rpki-client