Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
File:                     Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json)
Hash identifier:          +E9OaZpHjJ0QXG9QysLJ+2q3GIt1PtU+WVQzLzlYAP4=
Subject key identifier:   05:47:5A:D9:E7:58:A8:C5:42:AE:5A:1F:10:E9:3E:2F:AE:52:2F:08
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Certificate issuer:       /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
Manifest number:          018E
Signing time:             Mon 27 Jul 2026 06:11:43 +0000
Manifest this update:     Mon 27 Jul 2026 06:11:43 +0000
Manifest next update:     Mon 03 Aug 2026 06:11:43 +0000
Files and hashes:         1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: v0afAJJVe7+FsYU0zJnpHPs/1bLDv2i6Qtl1FO2RlU8=)
                          2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: /XTyxqSYUJyaevZitv5Zo/nsUreDwOBj39YjFuaF4Dg=)
                          3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vL9CnB4VhNfvCGfjKTpVpyZ3hX+MBOGWCdcUnoltMFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
        Validity
            Not Before: Jul 27 06:11:43 2026 GMT
            Not After : Aug  3 06:11:43 2026 GMT
        Subject: CN=6a66f69f-bc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:dd:91:db:0c:55:50:49:4e:a8:0e:a6:6b:
                    73:da:f9:0e:15:e2:b7:c5:75:67:57:d5:76:1e:46:
                    a7:2b:a1:76:50:a8:d7:0b:0a:ea:64:70:b6:29:37:
                    72:05:2d:7a:ba:45:3a:c4:b1:25:78:bd:b6:eb:55:
                    9d:ee:e6:1d:49:d4:0c:34:fe:36:80:41:7e:6c:86:
                    3f:bd:6e:de:4a:c6:8f:19:49:7b:ea:4d:4c:46:68:
                    09:11:61:98:37:69:98:e5:86:38:82:42:4b:f3:c4:
                    8b:b8:2d:fd:45:87:2e:62:51:f2:60:18:fb:84:25:
                    e0:ca:d4:45:e4:93:ff:e5:c8:ed:16:59:ea:22:62:
                    43:50:03:d7:31:59:1b:c4:3a:20:1d:4a:c7:3a:b2:
                    d8:8a:d6:ec:1e:f0:98:d1:62:c1:f9:b1:75:5d:a4:
                    b6:35:54:42:0e:a3:9e:40:46:a2:8d:52:9f:5d:a0:
                    7a:21:8b:d5:f1:f8:48:51:b1:69:b1:81:19:79:f7:
                    a4:78:d6:ee:10:99:f8:27:6c:e5:3c:a1:fa:94:89:
                    f3:60:4b:8c:42:5c:70:13:cb:49:a6:32:5a:46:e3:
                    23:fb:d6:a9:72:3d:de:3a:27:55:6c:85:8b:7f:a3:
                    6a:f4:6b:a2:33:c0:45:2b:a6:15:ae:6d:79:bc:01:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:47:5A:D9:E7:58:A8:C5:42:AE:5A:1F:10:E9:3E:2F:AE:52:2F:08
            X509v3 Authority Key Identifier:
                keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:43:3d:3c:26:25:ef:a1:bd:2a:54:25:3a:c2:96:dd:77:47:
         25:f6:53:62:c3:33:69:98:f2:80:be:64:5d:32:2e:fa:7a:57:
         7f:4a:dd:8a:c4:1e:42:52:ea:ed:bc:66:c6:05:e2:72:d4:fc:
         c3:4f:53:20:c6:05:e6:06:fd:c1:15:61:3c:ee:9f:98:ed:08:
         1b:14:24:2a:91:21:c8:0e:34:10:87:18:1d:65:b3:b0:c5:48:
         6a:c0:6c:15:30:03:91:c0:01:53:09:30:41:ef:42:04:8a:ed:
         02:af:dc:4e:b8:2c:fb:63:17:22:d7:1a:b6:f7:a7:54:b4:68:
         ae:43:a2:58:cf:fe:70:79:d7:94:e8:b0:38:f2:ae:e5:a7:e5:
         48:bf:81:37:61:d1:bc:6a:8d:9b:7e:60:87:d0:3b:0e:17:81:
         60:8e:4c:b7:e1:a9:1c:f6:54:9d:70:1c:d3:b2:7f:b0:22:89:
         b6:39:2c:11:99:59:83:f1:e2:4e:01:98:fc:f9:94:34:4f:19:
         c6:4a:e7:4a:c4:41:dc:4c:68:76:c5:38:10:c2:74:99:0b:10:
         79:89:27:d0:6e:81:fe:a3:55:79:c6:e1:6f:14:36:5d:58:9a:
         5b:5d:9a:0c:d5:74:17:ea:d7:1b:f0:a5:ee:70:f3:db:9d:a1:
         77:2d:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:47 2026 by rpki-client