Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
File:                     Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json)
Hash identifier:          NCt4y1NJoLeF8h/loOsbimb27Ws6cBAlQdXzJL6CE4M=
Subject key identifier:   2A:28:D1:DE:90:D3:87:22:62:C2:19:DF:F0:F8:D1:26:F3:0B:BE:7E
Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4
Certificate issuer:       /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4
Certificate serial:       0E2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
Manifest number:          0E21
Signing time:             Tue 28 Jul 2026 17:55:56 +0000
Manifest this update:     Tue 28 Jul 2026 17:55:55 +0000
Manifest next update:     Tue 04 Aug 2026 17:55:55 +0000
Files and hashes:         1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: 96YtFRiJRIEmtEnCYE2S9PWcMDLePfSX+KgAjv6JGmw=)
                          2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: RQcnUY2ghoOnBxEoKgojycXvIPQWfacqz6Xk8jibV5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl
                          rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3629 (0xe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180484, serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4
        Validity
            Not Before: Jul 28 17:55:55 2026 GMT
            Not After : Aug  4 17:55:55 2026 GMT
        Subject: CN=6a68ed2c-4fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:3b:1e:df:d7:36:4c:8a:79:19:10:d0:f7:
                    e1:99:46:f6:0e:a5:8e:e3:a3:f6:99:fa:ab:cb:aa:
                    f7:32:54:b6:3b:ce:70:34:23:a9:8a:bb:c8:21:3c:
                    c0:d1:f1:6c:f0:a0:c6:85:4b:c0:58:48:5a:62:73:
                    08:e0:83:1b:2e:ed:ba:41:01:ed:37:78:23:5b:42:
                    9c:c6:d7:45:5e:f0:d8:3f:db:fb:58:06:8e:e7:f6:
                    a3:b0:8e:c9:9b:18:2f:48:9b:67:60:54:62:68:c8:
                    d4:ec:47:b3:ff:12:4a:d9:c8:71:14:b8:de:d4:37:
                    5c:c0:c8:94:8a:09:2b:90:49:53:b1:38:b3:77:10:
                    64:9a:f2:84:f9:6b:4e:8b:4a:2a:c2:f7:22:89:2f:
                    ef:b3:64:50:9c:4f:ad:ac:2c:97:a3:e5:6d:0b:19:
                    15:e5:29:56:d6:0d:3f:0e:28:4f:f5:6d:b8:6d:ab:
                    ec:ba:40:4b:53:3f:3c:90:7d:17:01:1b:2e:6d:44:
                    cc:16:b8:7b:96:ad:5b:ff:ee:0b:33:83:78:8b:c1:
                    0e:da:86:5c:c3:2e:22:81:b7:d2:de:07:a3:22:04:
                    45:ca:77:1d:51:4c:c1:a6:cc:0a:6f:f3:09:c0:4d:
                    2c:b2:27:ef:48:97:2f:81:87:ee:9a:02:37:b1:58:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:28:D1:DE:90:D3:87:22:62:C2:19:DF:F0:F8:D1:26:F3:0B:BE:7E
            X509v3 Authority Key Identifier:
                keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:fd:0a:7b:66:8a:75:97:98:69:a4:32:c9:f7:97:30:e3:d5:
         67:7b:0a:8a:ac:26:06:62:74:cc:bd:35:c9:e7:e8:02:73:ea:
         64:8b:04:ad:22:df:b8:d6:5b:86:3e:11:6d:11:c5:8f:d5:89:
         7b:fa:1d:e1:51:2d:0f:6b:76:b4:59:db:c0:85:f9:25:8d:d5:
         a9:98:6e:0a:a7:7d:47:7b:0a:b6:40:5c:5c:98:67:7b:20:16:
         50:a0:f2:92:0d:8e:3a:0a:6c:43:60:f3:7f:c4:41:ff:50:ad:
         65:78:f4:2e:26:6e:4f:bf:7d:01:45:d8:7a:09:65:36:d4:b6:
         df:03:ac:3f:4e:91:97:8f:ba:12:e1:14:0d:eb:ba:f8:bb:d5:
         14:d2:08:13:45:01:f6:95:f1:ad:28:c5:14:4f:55:fa:ff:bc:
         0c:d2:69:4e:ce:ef:75:01:10:d4:58:07:f7:19:9e:0a:ae:ea:
         88:7e:49:bd:fe:2b:a6:51:97:b6:14:d3:d4:d2:a0:2b:8a:de:
         b4:8d:0e:ec:c4:e5:b3:eb:50:4d:31:bd:38:17:ba:a3:ec:b3:
         b8:2a:8f:b5:a0:43:c1:d8:3a:af:f5:b4:7c:9a:fe:2f:92:0d:
         53:37:fe:d3:8e:00:33:a5:18:83:99:43:06:ad:71:8f:a5:3e:
         69:e4:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:49:27 2026 by rpki-client