Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
File:                     MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json)
Hash identifier:          s7kfDVteYHo0Wh4EJ0os8dkQkQrfIHvL2OTFtj0JDsM=
Subject key identifier:   8D:E0:D4:B8:0D:96:EB:87:EE:54:AE:F5:F4:AC:12:8A:1A:95:50:54
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Certificate issuer:       /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial:       1A5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
Manifest number:          1A36
Signing time:             Tue 28 Jul 2026 16:26:48 +0000
Manifest this update:     Tue 28 Jul 2026 16:26:48 +0000
Manifest next update:     Tue 04 Aug 2026 16:26:48 +0000
Files and hashes:         1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: JRxu8LI6QpfU0dXOF97jnHITMDqH51sxgHR1pUCb9kc=)
                          2: 187A04506A4811F196588EF18047A888.roa (hash: 9Vl60CRqTbNKjmwUBuv8hbLXU5x8RNm9UnwDK+OnXww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
                          rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6751 (0x1a5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
        Validity
            Not Before: Jul 28 16:26:48 2026 GMT
            Not After : Aug  4 16:26:48 2026 GMT
        Subject: CN=6a68d848-85ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:ee:d5:e0:68:02:ad:fc:e7:61:46:c3:0b:
                    52:94:e1:52:73:18:36:bd:2e:b3:e7:5a:cb:81:44:
                    d8:9c:4f:e6:22:40:04:fb:7c:38:0b:7c:02:fc:3a:
                    a3:f3:5e:66:cb:6e:11:78:47:6d:5f:0c:99:c7:09:
                    15:a0:77:0e:40:ab:aa:ca:fd:e0:ce:c2:21:37:b7:
                    f4:28:54:61:e8:e1:d2:d2:68:a9:23:6a:64:16:41:
                    09:d5:f4:45:46:cd:64:29:26:2f:bf:67:2e:56:eb:
                    0a:1a:2d:1f:1d:a8:48:e8:81:ff:58:34:42:22:85:
                    a2:97:1d:48:18:4f:ff:e4:38:f0:30:f6:01:a1:e5:
                    98:10:a7:da:9f:3d:eb:f9:d0:7e:04:e3:79:3c:a6:
                    54:97:02:85:ef:8d:51:8f:db:df:dd:30:69:04:59:
                    2f:ad:58:c1:d7:9a:ba:b2:4f:cc:61:47:d2:17:d5:
                    22:3f:41:4f:bb:93:ae:be:e5:e6:5a:0f:e6:d9:0f:
                    a0:02:aa:ac:da:d9:c1:ad:dd:03:83:6c:7e:69:0a:
                    b7:d1:5d:00:03:f0:a8:b3:81:85:f6:30:37:15:4e:
                    11:30:5b:a8:e8:03:3c:67:1f:f6:aa:0c:02:98:f0:
                    f6:3c:19:6e:41:b1:05:e4:b2:78:68:37:8b:c8:4a:
                    a0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E0:D4:B8:0D:96:EB:87:EE:54:AE:F5:F4:AC:12:8A:1A:95:50:54
            X509v3 Authority Key Identifier:
                keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:94:7a:ca:66:b8:71:67:17:50:45:6b:ef:52:a0:81:b8:e8:
         e7:85:b5:63:24:e8:b9:a8:78:23:a7:05:18:ca:0d:d0:59:93:
         9a:0c:35:01:c7:6d:5d:84:7a:93:7a:d7:46:c4:91:e5:7c:cb:
         e0:ad:46:f3:aa:9f:85:7f:c2:c8:82:ae:43:0f:13:92:32:5d:
         0b:d3:2f:e6:ff:7d:8e:28:5d:77:cd:94:47:4f:16:4b:b1:e0:
         85:d7:08:63:68:35:7d:0a:ed:34:60:fe:d1:4d:06:b8:d9:92:
         eb:e4:46:61:1d:19:ef:55:d4:30:a3:4e:54:fa:33:4c:b2:12:
         9c:b7:b4:b8:08:e6:92:7e:db:0e:20:8e:d8:f4:dd:be:bc:64:
         ca:14:ab:25:e2:3f:88:34:d3:de:2c:dc:af:7f:f5:28:c7:2f:
         a9:09:12:2e:9d:5b:b7:f5:54:70:73:36:07:2f:ac:d1:38:8d:
         97:61:b4:88:bc:54:8c:f4:09:53:0c:a4:8b:b1:49:23:96:95:
         3b:c2:3b:3c:74:f1:0e:17:e6:bc:eb:c6:c7:1c:b2:2f:5c:2c:
         b8:7f:fd:2e:2e:ba:00:d0:0e:9c:e9:b2:e1:bb:39:60:bb:0b:
         69:46:82:be:3d:52:e8:96:8a:5d:00:65:26:b7:59:94:af:b0:
         0f:a2:b4:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZCN0YxMTAvBgNVBAUTKDMyQzQyMDQ1RUEwQjUxNjU1MTIyNEQ4MDhGMEQ1NTUw
QTA0NzNCNDMwHhcNMjYwNzI4MTYyNjQ4WhcNMjYwODA0MTYyNjQ4WjAYMRYwFAYD
VQQDEw02YTY4ZDg0OC04NWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqK7u1eBoAq3852FGwwtSlOFScxg2vS6z51rLgUTYnE/mIkAE+3w4C3wC/Dqj
815my24ReEdtXwyZxwkVoHcOQKuqyv3gzsIhN7f0KFRh6OHS0mipI2pkFkEJ1fRF
Rs1kKSYvv2cuVusKGi0fHahI6IH/WDRCIoWilx1IGE//5DjwMPYBoeWYEKfanz3r
+dB+BON5PKZUlwKF741Rj9vf3TBpBFkvrVjB15q6sk/MYUfSF9UiP0FPu5OuvuXm
Wg/m2Q+gAqqs2tnBrd0Dg2x+aQq30V0AA/Cos4GF9jA3FU4RMFuo6AM8Zx/2qgwC
mPD2PBluQbEF5LJ4aDeLyEqgjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3g1LgN
luuH7lSu9fSsEooalVBUMB8GA1UdIwQYMBaAFDLEIEXqC1FlUSJNgI8NVVCgRztD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkI3Ri8xQkFFMjY1NDdD
QzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVXVlJJazJBancxVlVLQkhP
ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01zUWdSZW9MVVdWUklrMkFqdzFWVUtCSE8wTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkI3Ri8xQkFFMjY1NDdDQzkxMUU3OTJDQkE5NDRDNEY5QUUwMi9Nc1FnUmVvTFVX
VlJJazJBancxVlVLQkhPME0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg5R6yma4cWcXUEVr71Kggbjo54W1YyTouah4I6cFGMoN0FmTmgw1AcdtXYR6
k3rXRsSR5XzL4K1G86qfhX/CyIKuQw8TkjJdC9Mv5v99jihdd82UR08WS7HghdcI
Y2g1fQrtNGD+0U0GuNmS6+RGYR0Z71XUMKNOVPozTLISnLe0uAjmkn7bDiCO2PTd
vrxkyhSrJeI/iDTT3izcr3/1KMcvqQkSLp1bt/VUcHM2By+s0TiNl2G0iLxUjPQJ
Uwyki7FJI5aVO8I7PHTxDhfmvOvGxxyyL1wsuH/9Li66ANAOnOmy4bs5YLsLaUaC
vj1S6JaKXQBlJrdZlK+wD6K0Zg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:59 2026 by rpki-client