Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
File:                     AQMtnfw2KpWHQ-htPI0GEaatsFs.mft (raw, json)
Hash identifier:          q2BaWnvKZnNWijMGnlk5p+Nwg6fIUHRog3K3W24sg34=
Subject key identifier:   F0:6F:38:F7:EF:28:D7:27:D0:FB:3C:69:5C:59:D6:A2:4A:9F:8E:B9
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Certificate issuer:       /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial:       0D2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
Manifest number:          0D0A
Signing time:             Tue 28 Jul 2026 18:31:24 +0000
Manifest this update:     Tue 28 Jul 2026 18:31:23 +0000
Manifest next update:     Tue 04 Aug 2026 18:31:23 +0000
Files and hashes:         1: AQMtnfw2KpWHQ-htPI0GEaatsFs.crl (hash: xLnYGryA6VMxBFwPLVDXfuVGtWZpuMPG0No03VR2Rds=)
                          2: 2BA0624C078511ED87041524C4F9AE02.roa (hash: 0jbGDYo7DDfv4MFk7YXPgz8jJvCIX6bzZUVL+H0jKpo=)
                          3: 20F1E6906B8C11F0A612561BC4F9AE02.roa (hash: ZU1zBpAfTGCrjm2xsGHreVQj4RFT5bNxMFoo9IRDAv0=)
                          4: 033EB676834D11F193DB325E60A30FBC.roa (hash: JeLY9INIwkxyYjsTV9pQhbhk/f5tgjUgFdxQQau5BR4=)
                          5: 3FF85EE88A6C11F18AC6DE993F11F970.roa (hash: DQXrNc95cxUGYQVQkKsxBmvCdcmn9YS5SIvwcsF7Ii4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
                          rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3375 (0xd2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
        Validity
            Not Before: Jul 28 18:31:23 2026 GMT
            Not After : Aug  4 18:31:23 2026 GMT
        Subject: CN=6a68f57c-fd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:62:83:cd:5a:50:3f:ca:79:b8:80:dd:8c:
                    fc:4f:ff:42:b5:8c:51:ca:9b:4a:e6:d8:74:27:25:
                    83:dc:f1:e4:83:bf:6e:3e:17:4a:61:ce:29:2b:05:
                    55:6c:0e:3b:79:f8:52:f0:2a:29:d5:56:4a:93:5d:
                    f1:9b:ab:b8:6e:ae:af:c1:04:5a:8b:9e:e4:71:d7:
                    72:99:ac:ee:84:9e:77:e4:fd:5d:3e:88:61:08:9c:
                    ad:d9:f1:94:0f:ed:20:3e:ac:b0:b6:1a:69:1a:89:
                    0b:22:21:6f:2a:74:39:13:e3:29:f9:b7:50:3f:f7:
                    c1:67:e1:d4:e4:87:d6:b1:77:8b:4e:bc:ac:f4:65:
                    d0:66:10:9f:b7:5f:09:c9:2b:3f:13:00:82:5c:21:
                    00:12:e2:f2:b5:0a:4e:ad:8c:de:f5:e5:17:61:3b:
                    f2:2a:4e:60:ba:ab:93:10:16:2f:b8:29:70:92:4a:
                    d7:5d:51:7f:4e:9a:32:31:7e:6b:9a:2b:fc:0b:38:
                    48:da:ee:01:ca:b2:fb:8c:af:d8:59:d6:4c:62:fb:
                    e2:43:40:9b:7d:20:ba:b2:3a:aa:b5:c9:19:e3:09:
                    ce:23:99:9f:7a:17:17:d2:ae:1c:7d:46:49:b9:6c:
                    7b:3a:a0:bc:eb:6e:1a:74:06:4c:36:70:43:8f:a5:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:38:F7:EF:28:D7:27:D0:FB:3C:69:5C:59:D6:A2:4A:9F:8E:B9
            X509v3 Authority Key Identifier:
                keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:52:1c:ff:7d:66:58:93:70:40:06:23:cd:aa:2c:37:a7:3f:
         6b:64:fe:09:9e:fd:2e:a2:08:df:ea:ab:06:5b:18:b5:46:b8:
         62:0d:d9:96:71:75:c8:2c:21:57:47:d0:8f:14:73:ff:5a:63:
         96:c8:67:dd:03:45:8a:cf:45:f6:f6:41:d5:d8:08:7c:0d:d8:
         cd:14:24:f8:43:50:88:60:67:7d:9c:5c:ea:94:7c:0a:b3:72:
         fb:e3:7e:c1:ca:0f:1b:74:08:dd:9e:72:2d:c0:2a:27:92:0a:
         0c:77:b3:dc:6d:89:fe:86:54:e6:a9:e6:48:cb:7d:5a:1c:4f:
         cf:86:17:c3:80:d8:ff:29:66:7f:d8:b9:f4:1c:52:36:6a:27:
         17:e5:ce:27:5f:c7:b4:39:7d:08:3a:bf:18:60:f5:23:6c:5c:
         1e:a8:db:b6:6d:90:ca:cd:d2:f6:e6:81:dd:f8:49:f0:cb:cf:
         e9:6e:e1:eb:61:06:aa:3c:f0:0c:68:47:63:9b:19:b9:5f:fa:
         34:6b:c5:50:e4:f3:bd:37:29:84:8f:fa:81:f2:7a:8c:c0:e0:
         f4:3a:41:9c:0c:5d:54:c4:51:f3:23:73:a7:0f:2c:f1:a2:f0:
         a1:fe:7b:b2:21:49:a3:c1:e2:ca:08:ab:ac:3e:d3:da:f0:9d:
         12:4b:ac:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx
QTZBREIwNUIwHhcNMjYwNzI4MTgzMTIzWhcNMjYwODA0MTgzMTIzWjAYMRYwFAYD
VQQDEw02YTY4ZjU3Yy1mZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApgpig81aUD/KebiA3Yz8T/9CtYxRyptK5th0JyWD3PHkg79uPhdKYc4pKwVV
bA47efhS8Cop1VZKk13xm6u4bq6vwQRai57kcddymazuhJ535P1dPohhCJyt2fGU
D+0gPqywthppGokLIiFvKnQ5E+Mp+bdQP/fBZ+HU5IfWsXeLTrys9GXQZhCft18J
ySs/EwCCXCEAEuLytQpOrYze9eUXYTvyKk5guquTEBYvuClwkkrXXVF/TpoyMX5r
miv8CzhI2u4ByrL7jK/YWdZMYvviQ0CbfSC6sjqqtckZ4wnOI5mfehcX0q4cfUZJ
uWx7OqC8624adAZMNnBDj6VVsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBvOPfv
KNcn0Ps8aVxZ1qJKn465MB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD
MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NkUyQi8yN0U3Q0FBNjBDMkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3Mktw
V0hRLWh0UEkwR0VhYXRzRnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEVIc/31mWJNwQAYjzaosN6c/a2T+CZ79LqII3+qrBlsYtUa4Yg3ZlnF1yCwh
V0fQjxRz/1pjlshn3QNFis9F9vZB1dgIfA3YzRQk+ENQiGBnfZxc6pR8CrNy++N+
wcoPG3QI3Z5yLcAqJ5IKDHez3G2J/oZU5qnmSMt9WhxPz4YXw4DY/ylmf9i59BxS
NmonF+XOJ1/HtDl9CDq/GGD1I2xcHqjbtm2Qys3S9uaB3fhJ8MvP6W7h62EGqjzw
DGhHY5sZuV/6NGvFUOTzvTcphI/6gfJ6jMDg9DpBnAxdVMRR8yNzpw8s8aLwof57
siFJo8HiygirrD7T2vCdEkusTw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:32 2026 by rpki-client