Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
File:                     q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json)
Hash identifier:          5SH0YS7zsc1oSPMTvnuJKiursogyrF3sZm20xuEKATo=
Subject key identifier:   74:39:EB:B1:E9:72:05:82:8B:D6:BC:D2:CC:1A:7C:B0:BD:4D:59:E3
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Certificate issuer:       /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial:       0B99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
Manifest number:          0B87
Signing time:             Sun 26 Jul 2026 19:35:15 +0000
Manifest this update:     Sun 26 Jul 2026 19:35:15 +0000
Manifest next update:     Sun 02 Aug 2026 19:35:15 +0000
Files and hashes:         1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: g4AK9tXA3Aua9ma4l7kP6GmGxfe0FLjuKP40OJTS7NI=)
                          2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: o6fRayD/nqN2dEBUcuypm1nutFG8wp7LbMA0ZmrlfaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
                          rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2969 (0xb99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
        Validity
            Not Before: Jul 26 19:35:15 2026 GMT
            Not After : Aug  2 19:35:15 2026 GMT
        Subject: CN=6a666173-5150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:b0:47:43:e7:ae:75:08:7f:d9:d8:46:10:
                    06:e3:31:c7:ab:e0:6a:15:98:ac:7a:cd:4e:7e:42:
                    a0:f9:7d:61:c3:73:84:3d:09:a0:9e:77:40:b3:46:
                    d1:95:05:fb:6e:05:d9:1f:60:bc:b1:32:5f:7c:71:
                    cd:23:8e:2c:21:af:77:f1:de:15:49:66:d1:3a:11:
                    14:f5:00:66:d8:bb:7f:6a:1e:6d:08:15:0b:b7:58:
                    52:9e:34:1e:56:a1:28:60:11:fa:9a:5e:2a:ce:f6:
                    12:f8:9f:8a:4d:3a:4a:82:ff:c9:0c:57:cc:9e:6a:
                    9b:17:29:11:b9:ef:e1:43:fc:54:3c:33:ee:ed:6a:
                    03:fa:33:9e:6b:a9:0b:9a:43:f6:ae:cc:bf:3b:6c:
                    5b:6b:61:da:bb:4e:91:d6:1f:81:6d:c7:d2:d4:d3:
                    af:12:5f:77:02:ce:30:d4:9b:0d:f5:45:d1:04:f0:
                    d7:13:2b:4e:ff:54:8d:dc:d1:bc:93:3f:b4:35:7f:
                    a0:bb:97:d8:4e:3c:b7:e8:b7:03:7e:04:a4:09:20:
                    d9:9f:03:94:ee:42:34:e9:0b:20:fc:9c:7b:19:ef:
                    c1:bc:20:86:58:41:77:a9:07:3a:47:79:85:39:3e:
                    51:c5:7b:0a:8d:07:d4:82:f7:eb:3a:84:0e:58:e0:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:39:EB:B1:E9:72:05:82:8B:D6:BC:D2:CC:1A:7C:B0:BD:4D:59:E3
            X509v3 Authority Key Identifier:
                keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:20:d9:d0:c5:78:c9:de:98:d4:ad:54:e7:39:b2:84:77:99:
         ae:31:ed:59:0d:84:c3:dd:5a:29:99:7d:ad:3c:d2:e5:b3:e6:
         8c:2c:8e:96:fc:c4:b4:74:db:30:4e:17:9f:a8:13:c4:16:ed:
         b1:2c:49:71:d8:9d:2c:07:9e:16:a8:4e:42:df:66:c7:b1:28:
         cc:03:b5:f1:81:3c:40:4e:70:0d:e2:8b:92:f5:af:3f:47:80:
         09:88:05:9d:89:6f:5c:28:95:dd:cd:00:7f:22:70:20:c3:8e:
         81:c3:a0:66:cf:c9:de:c8:fb:88:e5:18:2d:e4:1e:01:a6:1e:
         b4:01:98:a0:6a:10:a8:5f:15:0d:09:a9:fb:71:1c:e3:58:6f:
         a4:24:2f:37:f6:2d:12:68:d7:fd:ed:e7:bc:14:5e:92:af:75:
         02:a1:6b:9a:8e:e3:62:48:b8:34:17:6a:56:e5:09:40:5d:ba:
         4c:12:81:05:19:79:5f:85:87:eb:eb:d6:43:55:b1:fa:3a:e3:
         78:12:f2:57:21:a5:a2:76:f3:e3:cd:a9:ad:ea:4f:f3:7f:d2:
         b5:83:23:d8:76:12:30:fd:ad:65:f8:43:a8:ce:ec:10:c9:cd:
         91:5b:9a:03:4a:0c:a0:1b:76:64:73:12:4e:b9:2a:5e:8d:67:
         57:26:b6:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2
QTQyMjBGRDAwHhcNMjYwNzI2MTkzNTE1WhcNMjYwODAyMTkzNTE1WjAYMRYwFAYD
VQQDEw02YTY2NjE3My01MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmOKwR0PnrnUIf9nYRhAG4zHHq+BqFZises1OfkKg+X1hw3OEPQmgnndAs0bR
lQX7bgXZH2C8sTJffHHNI44sIa938d4VSWbROhEU9QBm2Lt/ah5tCBULt1hSnjQe
VqEoYBH6ml4qzvYS+J+KTTpKgv/JDFfMnmqbFykRue/hQ/xUPDPu7WoD+jOea6kL
mkP2rsy/O2xba2Hau06R1h+BbcfS1NOvEl93As4w1JsN9UXRBPDXEytO/1SN3NG8
kz+0NX+gu5fYTjy36LcDfgSkCSDZnwOU7kI06Qsg/Jx7Ge/BvCCGWEF3qQc6R3mF
OT5RxXsKjQfUgvfrOoQOWODJQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQ567Hp
cgWCi9a80swafLC9TVnjMB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3
QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1My85NUM4QTNFNDU3QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZi
VzZOWXlrQnUyV0pxUWlEOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEiDZ0MV4yd6Y1K1U5zmyhHeZrjHtWQ2Ew91aKZl9rTzS5bPmjCyOlvzEtHTb
ME4Xn6gTxBbtsSxJcdidLAeeFqhOQt9mx7EozAO18YE8QE5wDeKLkvWvP0eACYgF
nYlvXCiV3c0AfyJwIMOOgcOgZs/J3sj7iOUYLeQeAaYetAGYoGoQqF8VDQmp+3Ec
41hvpCQvN/YtEmjX/e3nvBRekq91AqFrmo7jYki4NBdqVuUJQF26TBKBBRl5X4WH
6+vWQ1Wx+jrjeBLyVyGlonbz482prepP83/StYMj2HYSMP2tZfhDqM7sEMnNkVua
A0oMoBt2ZHMSTrkqXo1nVya24g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:42 2026 by rpki-client