Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
File:                     tGadMNIQ5JB80oiL50uJpt08tsg.mft (raw, json)
Hash identifier:          FdXgWbLo8oW8O36Dm7JcpRiLHLF9Ly2NRG4vAo1YmF8=
Subject key identifier:   BB:48:C4:3C:0E:99:E9:80:8C:A0:48:EE:2C:47:52:B8:D1:D5:87:2D
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Certificate issuer:       /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial:       0A0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
Manifest number:          09F2
Signing time:             Tue 28 Jul 2026 20:11:08 +0000
Manifest this update:     Tue 28 Jul 2026 20:11:07 +0000
Manifest next update:     Tue 04 Aug 2026 20:11:07 +0000
Files and hashes:         1: tGadMNIQ5JB80oiL50uJpt08tsg.crl (hash: cTax5x4V+zpbNvii4ohK9qNLKCCJ2KhpnPxexzLdaPE=)
                          2: 4AA9F8CC75B511F18A3D446262A30FBC.roa (hash: a8REmHCWm+jSLUiYkfwW5npJYFrJiobn6pD3SgbZbKk=)
                          3: 6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (hash: wBIj83x+5tbUquS7FIlQQAMIzPRLzq+ZJDvfE+mcXhY=)
                          4: B350B67E964611EDA10D8777C4F9AE02.roa (hash: aMRVpWtmZnwUR1mTSqb8jU7v8RNHSZIpMkATgGb8rEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
                          rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575 (0xa0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
        Validity
            Not Before: Jul 28 20:11:07 2026 GMT
            Not After : Aug  4 20:11:07 2026 GMT
        Subject: CN=6a690cdc-6009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:15:cc:49:f5:ba:cb:87:fe:97:b1:80:1f:
                    26:f9:8f:0d:24:09:aa:49:43:8d:4c:72:4c:f6:46:
                    3e:b5:a8:b6:1b:cd:d7:b7:ec:21:e3:ff:46:ea:51:
                    ad:a2:9a:0c:60:7c:56:f5:70:7d:99:f7:9c:81:4a:
                    fa:e5:be:ee:db:3c:76:5f:41:ca:44:40:b5:a6:e1:
                    eb:61:54:be:0f:27:48:a9:59:55:ee:4e:fe:26:db:
                    db:7a:3c:39:f8:3d:76:e3:bf:3e:25:fa:0e:73:69:
                    19:30:c0:bd:12:5b:2a:61:eb:13:3b:78:80:59:52:
                    24:13:30:47:b1:56:b8:47:67:58:a2:49:40:e7:ba:
                    83:c3:1a:6a:64:ac:67:ab:83:4c:e1:57:75:63:29:
                    ac:b4:21:2b:b7:b8:c2:9c:96:fa:73:1b:5f:0a:6a:
                    a0:fe:c1:2c:7d:95:06:87:23:a7:8d:c2:3f:b3:f5:
                    cb:63:56:78:cc:7f:ed:b4:0e:66:3d:c0:d2:4b:1c:
                    a2:4d:d7:b5:bb:80:b0:d0:2f:e3:a2:0e:f8:d5:10:
                    27:4e:89:7e:c5:47:21:c3:9e:22:69:b0:ea:38:89:
                    ce:85:99:a6:d0:f6:1a:d2:22:5c:e4:72:f1:49:b6:
                    d9:55:13:a4:f7:ca:f0:bd:13:86:95:75:59:9a:e1:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:48:C4:3C:0E:99:E9:80:8C:A0:48:EE:2C:47:52:B8:D1:D5:87:2D
            X509v3 Authority Key Identifier:
                keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d8:26:3f:df:fa:c6:8c:19:8e:4d:13:78:35:62:f5:af:61:
         da:93:ad:7e:be:0c:bc:92:98:b6:98:3d:05:e5:66:44:05:7d:
         50:0f:b4:8e:45:bb:85:a1:e4:34:fc:1f:9e:b0:da:51:41:52:
         23:2a:2d:17:8d:7a:8c:ea:48:67:d6:28:1b:48:49:58:40:8f:
         7e:c6:52:2f:41:fe:a7:fd:32:0a:32:be:1b:7c:da:c4:75:5a:
         34:4d:39:60:c7:3d:44:d1:c8:9a:bf:a1:f6:85:01:af:11:b8:
         32:17:0d:fc:7a:bb:f7:7a:62:66:1e:5c:c9:f6:30:67:c9:c6:
         24:13:a1:d5:7a:7f:b1:19:da:8b:5c:d3:77:0c:32:c9:1f:c3:
         48:f0:51:c2:fc:9f:9e:06:47:1c:0a:42:3c:3b:d0:46:16:b8:
         30:89:c8:73:70:b8:dc:aa:b8:09:c4:d2:8e:b0:db:b1:0f:2f:
         9a:ed:57:17:43:93:a4:c3:e7:cc:38:59:50:03:d9:22:9d:fd:
         04:c0:f3:78:dc:4e:28:b6:a7:d3:86:4e:3c:f9:21:c4:a9:68:
         77:87:63:99:2d:6f:19:fd:72:74:63:e7:4a:4e:a7:b2:fd:77:
         05:96:d1:d3:39:68:68:6c:ab:db:c5:8c:f2:e6:6c:ce:36:18:
         1f:6e:81:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2
REQzQ0I2QzgwHhcNMjYwNzI4MjAxMTA3WhcNMjYwODA0MjAxMTA3WjAYMRYwFAYD
VQQDEw02YTY5MGNkYy02MDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn0gVzEn1usuH/pexgB8m+Y8NJAmqSUONTHJM9kY+tai2G83Xt+wh4/9G6lGt
opoMYHxW9XB9mfecgUr65b7u2zx2X0HKREC1puHrYVS+DydIqVlV7k7+Jtvbejw5
+D12478+JfoOc2kZMMC9ElsqYesTO3iAWVIkEzBHsVa4R2dYoklA57qDwxpqZKxn
q4NM4Vd1YymstCErt7jCnJb6cxtfCmqg/sEsfZUGhyOnjcI/s/XLY1Z4zH/ttA5m
PcDSSxyiTde1u4Cw0C/jog741RAnTol+xUchw54iabDqOInOhZmm0PYa0iJc5HLx
SbbZVROk98rwvROGlXVZmuG9sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtIxDwO
memAjKBI7ixHUrjR1YctMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3
RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUE1OC9CMzg5MzA0RUE3RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVK
Qjgwb2lMNTB1SnB0MDh0c2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM9gmP9/6xowZjk0TeDVi9a9h2pOtfr4MvJKYtpg9BeVmRAV9UA+0jkW7haHk
NPwfnrDaUUFSIyotF416jOpIZ9YoG0hJWECPfsZSL0H+p/0yCjK+G3zaxHVaNE05
YMc9RNHImr+h9oUBrxG4MhcN/Hq793piZh5cyfYwZ8nGJBOh1Xp/sRnai1zTdwwy
yR/DSPBRwvyfngZHHApCPDvQRha4MInIc3C43Kq4CcTSjrDbsQ8vmu1XF0OTpMPn
zDhZUAPZIp39BMDzeNxOKLan04ZOPPkhxKlod4djmS1vGf1ydGPnSk6nsv13BZbR
0zloaGyr28WM8uZszjYYH26BNw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:43 2026 by rpki-client