Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File:                     qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier:          EOv0X5DGXMUDwcpHCIeWfpCqWHmChj8wXiSVWZ3Tqjs=
Subject key identifier:   13:78:5B:52:52:70:03:CB:E0:11:1E:66:68:16:70:48:C9:8D:8E:47
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer:       /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial:       05E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number:          05D7
Signing time:             Tue 28 Jul 2026 23:40:16 +0000
Manifest this update:     Tue 28 Jul 2026 23:40:16 +0000
Manifest next update:     Tue 04 Aug 2026 23:40:16 +0000
Files and hashes:         1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: DJf1cyhX2vpuS+aSGdY1bRjQ8RQnuTlzBBp73OvlvJ8=)
                          2: 2DA2253A4E1211F1BF860394CD833773.roa (hash: OQC3+KRN4hsjI0V7STttKspjEkoDxGfQu0IpJxAelaI=)
                          3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=)
                          4: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1512 (0x5e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
        Validity
            Not Before: Jul 28 23:40:16 2026 GMT
            Not After : Aug  4 23:40:16 2026 GMT
        Subject: CN=6a693de0-2618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:21:82:b0:8b:e4:53:c4:59:30:bb:66:43:ed:
                    2b:d0:84:ae:6b:59:dc:bd:29:aa:9c:d0:5e:96:31:
                    02:3d:16:3d:1a:83:dc:70:02:5f:07:16:5f:bd:a5:
                    f4:c2:69:56:75:7e:10:3d:fa:bc:5e:78:95:1c:c3:
                    93:30:2c:cf:1a:c4:63:4a:2d:80:13:4e:ad:4b:77:
                    07:9f:93:da:e4:71:7a:dc:63:56:53:bb:63:07:3e:
                    6b:b1:68:43:cb:dc:c9:3d:e7:a2:6c:79:ef:c2:7d:
                    9c:db:45:d3:a8:36:18:c8:3e:36:a2:05:76:6e:ef:
                    44:ff:18:aa:f0:e3:ab:12:52:92:c2:7c:77:f4:00:
                    18:f6:97:e9:f5:a2:47:cf:36:1e:22:d2:62:30:b7:
                    85:62:43:61:85:5a:e6:b0:25:8a:c6:83:19:89:ea:
                    d5:57:b8:d0:83:61:9c:64:b3:39:18:49:85:97:ab:
                    1a:36:c9:20:13:58:86:8a:30:89:2c:ce:1f:86:88:
                    1a:5c:4a:44:17:5f:f1:18:c1:1f:0e:ef:c0:2b:47:
                    d8:9a:36:b3:5f:dc:ba:f7:40:db:d1:b6:7d:93:e4:
                    ef:92:e4:5e:f2:47:23:ea:0c:82:7f:ec:c0:3d:e3:
                    c5:df:15:2b:9a:ee:eb:5c:4f:70:48:25:d8:44:33:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:78:5B:52:52:70:03:CB:E0:11:1E:66:68:16:70:48:C9:8D:8E:47
            X509v3 Authority Key Identifier:
                keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7c:16:e3:09:d4:68:80:7c:c3:34:6a:f1:1f:79:e8:f3:a5:
         04:79:41:54:67:fb:c6:58:3a:a6:b9:a9:6f:29:bc:f0:04:2b:
         43:16:73:6b:18:7c:d1:08:93:0a:20:c1:58:cb:54:7b:ca:a5:
         15:3d:e0:f9:00:87:cb:ef:a0:c0:0d:36:6b:c4:1a:cb:59:b6:
         f2:f0:f9:31:6e:29:45:d5:36:78:cc:95:d0:e8:b2:8c:a0:d6:
         3f:31:37:d1:7b:c1:42:8f:94:e8:5a:fb:4f:fb:ca:62:71:e9:
         f0:38:d5:01:ea:77:f7:64:ab:a2:10:f0:73:65:05:c2:4a:17:
         14:11:b5:e4:c5:2c:65:c6:fd:d4:f3:f4:8f:b2:0b:30:78:89:
         13:fd:28:75:03:13:a0:a2:e7:d3:a1:02:b0:3c:fe:77:bd:18:
         0a:eb:d4:c6:da:94:7f:61:4e:f6:42:03:b2:0a:c0:8e:2f:09:
         55:1d:05:43:89:83:33:b7:52:a2:bf:2f:10:ec:69:49:5d:16:
         e7:22:50:12:8d:8b:4e:65:77:64:8c:88:df:da:17:dc:74:6b:
         34:e9:05:3a:c4:4c:86:73:7d:2f:85:ed:98:43:37:1b:2a:96:
         60:5d:5c:5d:72:01:4a:cf:ff:46:89:64:5d:0a:c3:0f:3b:7c:
         f4:c9:b5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:46 2026 by rpki-client