Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File:                     qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier:          7R31nt/da3tXlm58+Ek/qgO1KP0bj2npXW267U5gyYM=
Subject key identifier:   7C:11:37:27:D8:3F:41:2D:71:34:25:D5:FB:E4:0E:50:CC:68:13:B8
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer:       /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number:          0128
Signing time:             Sat 13 Jun 2026 05:37:48 +0000
Manifest this update:     Sat 13 Jun 2026 05:37:48 +0000
Manifest next update:     Sat 20 Jun 2026 05:37:48 +0000
Files and hashes:         1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: MLJnGzeVrkz+Mqnlo8+NB4pZ4dzrdgEeyeQyBJju9Ts=)
                          2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: jxhoNvhc+MHJtTBpxrrKXdZBqlL2SJCnjwyJaGHJC6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
        Validity
            Not Before: Jun 13 05:37:48 2026 GMT
            Not After : Jun 20 05:37:48 2026 GMT
        Subject: CN=6a2cecac-792f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d8:95:20:51:5e:b3:0b:55:83:ca:cb:7c:6f:
                    80:93:0c:3e:da:c8:c2:be:75:43:50:b0:59:73:2c:
                    f6:f5:2c:ad:86:40:7f:5a:7f:f4:52:7d:97:a2:c2:
                    88:30:76:78:4d:1c:f6:49:b3:97:0c:32:1b:0a:c1:
                    ce:22:2d:2b:8f:aa:69:80:95:0b:1c:48:61:41:dc:
                    2a:70:22:dd:6a:05:1c:0e:28:c9:f2:91:87:6f:15:
                    d7:a7:fe:90:59:4b:84:64:46:a5:20:26:64:20:d6:
                    c8:01:2f:9e:39:21:29:e5:54:f5:78:01:e5:cf:85:
                    de:a3:b9:01:ec:e3:32:97:4b:51:e7:02:7f:9b:02:
                    39:bf:3b:f1:24:57:c7:81:d1:71:57:10:2b:f0:ab:
                    34:e9:d8:3c:1d:da:e6:6c:6b:a8:2f:d5:79:6e:87:
                    3b:bd:00:02:2e:5c:e5:71:73:80:b5:c0:52:c2:2c:
                    02:f9:10:f9:e2:8c:f8:22:27:bc:09:ce:29:3b:10:
                    4d:75:ea:69:9e:10:bf:b6:65:10:b3:06:1d:0e:f4:
                    14:37:ae:0b:1f:39:0d:43:28:78:39:e4:27:cd:db:
                    a4:0f:ce:07:b5:32:ef:b5:dd:51:c1:f5:5d:9d:19:
                    4f:45:4b:30:c1:36:df:8a:9f:9d:d8:fa:0b:05:f6:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:11:37:27:D8:3F:41:2D:71:34:25:D5:FB:E4:0E:50:CC:68:13:B8
            X509v3 Authority Key Identifier:
                keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5c:4e:54:9f:fc:95:20:6d:81:63:0b:fe:1e:3b:2e:2b:c2:
         37:ae:1b:88:48:24:8d:5c:da:fb:dd:2b:d5:bc:a5:9b:8e:3a:
         21:83:bc:5a:e1:dc:fd:b2:ec:84:1c:dd:3e:27:6d:84:a7:65:
         f7:ae:ab:1e:f3:db:19:af:7c:60:3d:b9:f5:a1:2b:a8:e4:c9:
         39:9e:a9:b3:7e:88:48:1c:2e:d4:2d:cc:ee:d2:0a:25:69:d3:
         ff:5d:c0:23:3e:66:6f:cc:22:27:9d:a0:3a:36:9f:ea:6d:12:
         d7:97:49:cc:55:8a:8c:64:bc:84:e3:74:f8:ec:9d:38:a9:81:
         0b:54:9d:65:3e:d9:6b:a1:88:54:55:f3:bc:0d:e7:a4:e0:9e:
         09:b8:46:23:b1:bb:32:e5:58:11:2f:da:fd:8a:61:87:bd:ef:
         f7:6a:39:f6:c0:0b:c2:9b:b7:98:7f:c2:e6:74:15:52:53:0d:
         2b:ef:74:07:03:1d:0f:9e:1a:fa:35:f1:3a:61:63:dd:d4:3f:
         b9:56:af:1c:b0:94:5a:b0:f4:ef:1b:60:0a:f7:25:36:f7:2f:
         9a:29:07:d7:92:ca:4c:4e:11:d2:a2:a7:55:40:97:37:4a:c0:
         b6:be:f5:9f:86:e8:18:9a:9f:49:97:af:64:71:34:f1:a9:23:
         5b:88:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:02 2026 by rpki-client