Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
File:                     QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json)
Hash identifier:          8UF2V1w9htbGEAzlzvDPEgcOyGNgdLpgJhyAHY2r5nk=
Subject key identifier:   65:44:06:DE:3A:59:06:B1:D9:59:10:DC:41:F6:0A:75:4D:46:52:16
Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB
Certificate issuer:       /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
Manifest number:          0292
Signing time:             Mon 27 Jul 2026 03:07:07 +0000
Manifest this update:     Mon 27 Jul 2026 03:07:06 +0000
Manifest next update:     Mon 03 Aug 2026 03:07:06 +0000
Files and hashes:         1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: AqaiQXIgYsvBIhVhP7I0/A+cPOdKoN2wdCyhdnxB0WQ=)
                          2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: a1ihaW44y7pPngH9tloHWvGy8yxGeQDZAFa7vmcwPNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl
                          rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
        Validity
            Not Before: Jul 27 03:07:06 2026 GMT
            Not After : Aug  3 03:07:06 2026 GMT
        Subject: CN=6a66cb5b-79a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a3:8c:60:00:86:41:a8:f0:f9:3f:0e:22:11:
                    d4:0e:ac:e4:bf:63:e2:d2:ac:66:f0:ee:6c:d5:fc:
                    35:8c:eb:6a:13:cc:30:d3:dd:6d:5e:60:f6:b4:1b:
                    5d:5f:97:ab:ca:86:e0:8d:56:e2:cf:d5:71:b9:24:
                    e6:dd:e1:82:cf:24:6b:fe:03:ab:72:49:99:82:fe:
                    93:b3:ec:9d:60:f9:0c:4d:d5:3e:be:0f:53:29:16:
                    8d:35:da:19:57:77:4e:fe:13:79:e6:3a:79:06:c0:
                    04:8c:80:df:a6:86:44:7d:10:1c:8c:27:87:23:44:
                    f7:68:42:7d:95:7f:b4:e0:96:85:81:88:88:09:72:
                    45:b9:2f:95:47:a1:4b:3b:c8:fc:49:11:17:8c:a5:
                    5d:c2:cc:51:95:2a:65:14:5f:68:80:08:9d:b2:3f:
                    95:eb:f0:39:69:d2:99:26:22:19:d4:8f:a0:af:d5:
                    18:46:d3:0a:53:34:22:43:6c:dc:2a:03:f7:93:a6:
                    2c:9b:51:87:ad:d3:bd:3e:03:40:05:43:23:0f:65:
                    0f:29:4b:20:3d:9b:af:c5:f1:8e:0f:2d:6a:54:af:
                    de:f5:d8:9d:d3:dc:f5:5a:f6:2e:83:41:75:e9:16:
                    4f:51:8a:02:16:36:1b:1b:38:9e:33:fd:72:74:c5:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:44:06:DE:3A:59:06:B1:D9:59:10:DC:41:F6:0A:75:4D:46:52:16
            X509v3 Authority Key Identifier:
                keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8b:b2:f4:11:e1:ea:de:c1:49:6e:ed:3a:79:6b:fa:77:5c:
         24:2a:1c:15:b9:47:b9:41:30:f9:42:61:df:f6:5b:20:7c:60:
         93:ad:03:b3:fe:72:b8:08:3a:86:07:57:af:31:a2:38:ca:e4:
         27:d3:b7:cd:4c:92:69:67:ee:52:d3:96:4c:fa:fa:c3:a6:43:
         8f:77:e5:29:77:e7:2f:e8:3f:f1:20:60:f2:f3:ea:43:37:3d:
         ab:25:58:4e:de:55:73:d0:01:27:cb:e2:9e:6b:e6:19:77:18:
         d2:54:b8:28:27:d2:5c:b5:28:93:31:49:82:44:cc:12:96:9f:
         05:37:97:78:8c:46:d1:b4:4b:9f:0f:f8:fb:6b:00:bc:d5:bc:
         95:47:be:ae:8b:0e:4d:a8:33:ab:07:11:bd:ba:bb:d3:fc:11:
         b4:50:94:76:5a:bb:8a:3d:74:64:fc:3f:a0:49:37:b5:1c:c4:
         04:3f:97:c3:25:25:a7:c4:ce:39:c6:ba:5c:f0:43:b6:42:ca:
         65:f2:57:a5:a0:8f:83:13:4c:18:1d:32:1d:8f:a6:f1:8e:2d:
         0d:f1:47:2c:64:db:2c:1b:6a:d8:9b:50:3a:78:ba:c9:5d:03:
         80:23:a9:2d:4a:f8:bf:31:8f:ad:14:2b:a9:d3:62:45:64:2e:
         12:52:de:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhDN0ExMTAvBgNVBAUTKDQwREJBRTJDODMxOThCQzZGQUQyNTgyOTk4ODIzNDU2
QTM3NzYzQUIwHhcNMjYwNzI3MDMwNzA2WhcNMjYwODAzMDMwNzA2WjAYMRYwFAYD
VQQDEw02YTY2Y2I1Yi03OWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA76OMYACGQajw+T8OIhHUDqzkv2Pi0qxm8O5s1fw1jOtqE8ww091tXmD2tBtd
X5eryobgjVbiz9VxuSTm3eGCzyRr/gOrckmZgv6Ts+ydYPkMTdU+vg9TKRaNNdoZ
V3dO/hN55jp5BsAEjIDfpoZEfRAcjCeHI0T3aEJ9lX+04JaFgYiICXJFuS+VR6FL
O8j8SREXjKVdwsxRlSplFF9ogAidsj+V6/A5adKZJiIZ1I+gr9UYRtMKUzQiQ2zc
KgP3k6Ysm1GHrdO9PgNABUMjD2UPKUsgPZuvxfGODy1qVK/e9did09z1WvYug0F1
6RZPUYoCFjYbGzieM/1ydMXlLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVEBt46
WQax2VkQ3EH2CnVNRlIWMB8GA1UdIwQYMBaAFEDbriyDGYvG+tJYKZiCNFajd2Or
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEM3QS9BQzQ1OTYyRTlD
NDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4YjYwbGdwbUlJMFZxTjNZ
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FOdXVMSU1aaThiNjBsZ3BtSUkwVnFOM1k2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEM3QS9BQzQ1OTYyRTlDNDAxMUVEOTcwMDg0NzBDNEY5QUUwMi9RTnV1TElNWmk4
YjYwbGdwbUlJMFZxTjNZNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL4uy9BHh6t7BSW7tOnlr+ndcJCocFblHuUEw+UJh3/ZbIHxgk60Ds/5yuAg6
hgdXrzGiOMrkJ9O3zUySaWfuUtOWTPr6w6ZDj3flKXfnL+g/8SBg8vPqQzc9qyVY
Tt5Vc9ABJ8vinmvmGXcY0lS4KCfSXLUokzFJgkTMEpafBTeXeIxG0bRLnw/4+2sA
vNW8lUe+rosOTagzqwcRvbq70/wRtFCUdlq7ij10ZPw/oEk3tRzEBD+XwyUlp8TO
Oca6XPBDtkLKZfJXpaCPgxNMGB0yHY+m8Y4tDfFHLGTbLBtq2JtQOni6yV0DgCOp
LUr4vzGPrRQrqdNiRWQuElLewA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:51 2026 by rpki-client