Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
File:                     K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json)
Hash identifier:          x2ef7kubC0d9ru1XBvDeApuH/QhMs3cCffFQd01I0fc=
Subject key identifier:   4B:45:E9:56:23:9E:44:09:9C:BF:1E:52:66:F1:30:03:79:5B:20:64
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Certificate issuer:       /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial:       04AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
Manifest number:          04A8
Signing time:             Wed 29 Jul 2026 00:37:52 +0000
Manifest this update:     Wed 29 Jul 2026 00:37:52 +0000
Manifest next update:     Wed 05 Aug 2026 00:37:52 +0000
Files and hashes:         1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: nTzojELS0rvKghzP2O/VfylUubboR87mUfg5/RNF9jA=)
                          2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: 9GkSsGabC4YIge7KqJ4TFMFRkrykr6bw7a+2s3Vjy28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
                          rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
        Validity
            Not Before: Jul 29 00:37:52 2026 GMT
            Not After : Aug  5 00:37:52 2026 GMT
        Subject: CN=6a694b60-390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:a6:8d:0c:d3:6c:22:e0:e0:4d:44:c9:ec:
                    e8:85:fe:d7:06:24:12:9d:14:1f:24:7c:ff:dd:9e:
                    74:b2:a2:f9:a5:30:23:8e:e9:ee:10:b7:87:3e:33:
                    b1:d8:ce:fa:25:1d:3b:61:d8:92:e5:d4:8c:0d:78:
                    8e:95:11:b3:6e:29:5e:54:98:3f:c9:a5:d6:41:ff:
                    37:70:1b:d0:c0:f1:fd:ac:d0:79:f6:b5:6e:7a:ae:
                    e3:cf:28:f7:36:dd:18:83:c6:38:01:ac:91:2e:72:
                    b1:94:c3:65:b2:60:7f:85:35:4c:98:a7:30:ea:23:
                    3d:2e:3d:71:4b:c0:26:98:be:30:e8:ff:a7:17:f6:
                    c0:bd:3a:08:41:c4:47:a7:31:81:a0:23:a6:c8:de:
                    21:6b:56:8b:ab:e5:31:e6:12:f0:85:96:37:85:1d:
                    b2:83:ee:f0:13:82:34:57:7c:48:11:36:d4:f8:a7:
                    59:aa:4f:f0:a3:a6:b0:2d:a2:b8:85:90:c5:49:30:
                    05:58:4d:0c:54:b4:a4:e8:1f:f4:af:a5:49:e7:9e:
                    34:be:b7:ec:df:1f:62:05:5d:49:57:38:a3:a6:de:
                    de:18:a0:b1:8d:7a:68:b0:35:de:71:4e:9d:88:08:
                    95:cf:d3:df:bc:ae:e7:53:3d:6a:90:3b:60:97:ed:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:45:E9:56:23:9E:44:09:9C:BF:1E:52:66:F1:30:03:79:5B:20:64
            X509v3 Authority Key Identifier:
                keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:31:08:03:1c:0a:4d:45:82:32:d2:c6:10:ba:c5:8b:ee:32:
         e6:a2:e5:08:f6:a2:3e:82:f2:31:56:ce:ad:d0:27:72:e1:84:
         64:0f:27:80:6e:9e:10:55:57:e5:47:c2:99:39:fb:f0:ef:27:
         e0:76:b7:3e:c0:16:ed:0e:24:9e:0a:6d:4f:64:c1:07:27:72:
         b3:68:23:5c:28:e0:c6:50:f9:d0:02:64:f9:d9:0d:f2:8d:9b:
         bb:16:8a:c3:8b:49:3b:75:28:d7:df:0f:26:1a:1b:93:4e:8e:
         75:70:73:2d:60:b4:85:95:e8:85:ae:6b:70:5b:65:dc:97:e2:
         b0:8a:ae:ca:97:92:a7:30:c9:d6:f2:a8:98:9a:b3:6f:84:7b:
         1a:98:06:63:cf:7c:18:fa:e0:02:aa:ac:b2:cf:d5:c9:e8:44:
         f7:91:1d:02:04:89:b1:92:25:a7:1f:fd:cb:fc:9c:b4:ca:8a:
         16:c7:17:9c:5f:63:b7:69:64:01:92:9d:85:f4:f1:62:d8:33:
         ce:41:57:cf:14:b8:52:63:6c:a4:e1:c3:4e:25:85:9d:21:a9:
         6d:98:6b:9e:79:a1:af:83:ff:c0:de:04:b1:90:56:3f:c2:94:
         59:63:b3:68:86:41:fc:17:b8:b1:14:3a:ca:5c:76:ad:c4:29:
         cb:a3:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:48 2026 by rpki-client