Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File:                     9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier:          9YebgyH8+AQX/F4nQhof0bf6DxetZuXofpOjrJz6Mlw=
Subject key identifier:   4F:BD:42:8E:CB:48:B7:26:18:DB:A9:F5:FF:0A:C8:34:5D:7B:E3:EB
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       087B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number:          085A
Signing time:             Sun 26 Jul 2026 21:48:28 +0000
Manifest this update:     Sun 26 Jul 2026 21:48:28 +0000
Manifest next update:     Sun 02 Aug 2026 21:48:28 +0000
Files and hashes:         1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: L51vu7TsNZXeFLmCxIayDlEwC3/CFuPYZEpR8LdWZDM=)
                          2: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: s0JtQjaquy1haDTdVO3sJ1UiTrHlMay3DOPS02FW8WQ=)
                          3: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: 1KjRG3v8pkaGSW0/hInFx/2rpIZZ7GFqFAtwvgwsN4M=)
                          4: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: HkzCk2HljndiEq4GBL2zGsRRu25qjHkzwRnuz6BJbuM=)
                          5: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: Mq0l/N1vCUMtxfQV/uhAAkIAGBUYqoCXgKbxS8XYpMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
                          rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
        Validity
            Not Before: Jul 26 21:48:28 2026 GMT
            Not After : Aug  2 21:48:28 2026 GMT
        Subject: CN=6a6680ac-11aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:33:9d:b1:7f:88:56:73:62:f2:4d:b0:53:
                    ae:88:07:b8:18:0d:d2:93:6b:f9:e1:20:93:c6:eb:
                    55:1c:79:36:86:ed:cc:74:97:dd:a9:ff:99:30:8b:
                    e1:7a:29:6d:42:ec:d8:08:74:eb:99:55:33:37:07:
                    ec:2a:ac:eb:ad:4f:73:81:68:c8:db:03:b1:4b:69:
                    5b:bb:88:ba:27:7e:44:4b:5b:8b:51:3f:e0:19:35:
                    f9:64:de:20:df:f0:69:77:87:0f:24:ad:e7:fb:e1:
                    d3:49:e1:d4:e5:fc:59:cd:58:e2:c8:4a:b8:05:40:
                    04:c6:66:bd:c4:0d:2c:5e:2d:42:a0:34:ab:be:7a:
                    59:55:37:a6:f6:a0:c7:56:19:9f:51:14:9e:95:72:
                    b1:b5:02:22:d9:eb:0e:37:1f:99:09:b8:a3:ee:ad:
                    9d:62:22:e5:4b:15:22:4d:a6:be:98:81:13:3c:c7:
                    61:98:4b:0d:b1:f5:ee:a0:3e:1e:0f:51:67:ad:c8:
                    b2:fb:be:90:f7:e2:ee:7d:27:5f:b9:6a:ac:e0:cf:
                    ee:bf:be:36:76:60:bc:0d:51:d2:76:91:07:dc:3a:
                    d8:0e:8e:16:f9:77:de:6b:9d:76:cf:39:b5:48:bc:
                    f3:c6:3a:1a:56:dc:5f:f1:bf:f2:f5:19:21:23:74:
                    d9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BD:42:8E:CB:48:B7:26:18:DB:A9:F5:FF:0A:C8:34:5D:7B:E3:EB
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:f2:3d:de:38:ca:44:22:a1:11:85:ac:f1:c1:99:ac:eb:
         5e:f8:d0:66:d5:3b:89:52:da:28:d9:2f:fb:3f:f6:25:9c:b1:
         cb:25:5a:f4:1b:c9:8d:ab:68:4e:65:31:0f:c9:ff:2f:02:b4:
         a3:14:ee:ab:a8:99:59:39:e5:5e:61:01:dc:51:13:5a:46:d4:
         fe:85:16:7c:d6:0d:d1:22:9d:1c:34:1f:14:09:25:9d:a9:e1:
         58:41:d7:5e:fa:85:ff:9d:be:cd:82:b7:bb:e6:d0:8f:bd:40:
         71:f4:d7:7f:64:e2:57:d5:02:2c:32:1f:28:e1:79:da:97:7f:
         02:10:5f:e8:8a:b6:6a:52:80:ab:41:5b:f2:42:58:76:b7:7a:
         d3:29:b0:91:ce:a1:86:72:b8:8d:8a:b4:80:de:1d:9d:a3:5e:
         3a:e3:1e:83:07:10:22:ae:79:dd:ac:64:4b:78:05:e0:75:b3:
         5a:9b:8d:35:7d:d1:ee:fe:5d:ab:6e:24:5f:f1:9f:f6:4e:72:
         4d:39:51:0b:6a:80:1e:50:c0:29:b7:0e:e4:bd:85:0a:5a:f2:
         57:18:ce:7f:4e:5c:5c:4f:8b:df:75:c4:ca:a6:04:e1:95:b6:
         18:e8:57:2b:b7:e9:19:93:ab:e7:ac:41:a3:59:54:d1:ef:50:
         55:ad:42:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc5MTcxMTAvBgNVBAUTKEY0NTQxRkI3Nzk2NURFMTRBNTlGOUVGMjMzREUxOUY5
MjA1RjVGOTgwHhcNMjYwNzI2MjE0ODI4WhcNMjYwODAyMjE0ODI4WjAYMRYwFAYD
VQQDEw02YTY2ODBhYy0xMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlg0znbF/iFZzYvJNsFOuiAe4GA3Sk2v54SCTxutVHHk2hu3MdJfdqf+ZMIvh
eiltQuzYCHTrmVUzNwfsKqzrrU9zgWjI2wOxS2lbu4i6J35ES1uLUT/gGTX5ZN4g
3/Bpd4cPJK3n++HTSeHU5fxZzVjiyEq4BUAExma9xA0sXi1CoDSrvnpZVTem9qDH
VhmfURSelXKxtQIi2esONx+ZCbij7q2dYiLlSxUiTaa+mIETPMdhmEsNsfXuoD4e
D1Fnrciy+76Q9+LufSdfuWqs4M/uv742dmC8DVHSdpEH3DrYDo4W+Xfea512zzm1
SLzzxjoaVtxf8b/y9RkhI3TZCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+9Qo7L
SLcmGNup9f8KyDRde+PrMB8GA1UdIwQYMBaAFPRUH7d5Zd4UpZ+e8jPeGfkgX1+Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxNy80OTJBQjU5NDJB
MDMxMUVCQTY5REREMkRDNEY5QUUwMi85RlFmdDNsbDNoU2xuNTd5TTk0Wi1TQmZY
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGUWZ0M2xsM2hTbG41N3lNOTRaLVNCZlg1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzkxNy80OTJBQjU5NDJBMDMxMUVCQTY5REREMkRDNEY5QUUwMi85RlFmdDNsbDNo
U2xuNTd5TTk0Wi1TQmZYNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcLjyPd44ykQioRGFrPHBmazrXvjQZtU7iVLaKNkv+z/2JZyxyyVa9BvJjato
TmUxD8n/LwK0oxTuq6iZWTnlXmEB3FETWkbU/oUWfNYN0SKdHDQfFAklnanhWEHX
XvqF/52+zYK3u+bQj71AcfTXf2TiV9UCLDIfKOF52pd/AhBf6Iq2alKAq0Fb8kJY
drd60ymwkc6hhnK4jYq0gN4dnaNeOuMegwcQIq553axkS3gF4HWzWpuNNX3R7v5d
q24kX/Gf9k5yTTlRC2qAHlDAKbcO5L2FClryVxjOf05cXE+L33XEyqYE4ZW2GOhX
K7fpGZOr56xBo1lU0e9QVa1CzQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:07:19 2026 by rpki-client