Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
File:                     QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json)
Hash identifier:          b7i/ygJqko6wNlhGwuoUoLVpkCM58Io4RtXC+4BSzjA=
Subject key identifier:   A5:0E:E0:95:C1:9A:C3:0A:D6:A9:44:67:01:76:C9:24:75:62:B7:44
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Certificate issuer:       /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial:       0D50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
Manifest number:          0D25
Signing time:             Tue 28 Jul 2026 18:32:12 +0000
Manifest this update:     Tue 28 Jul 2026 18:32:11 +0000
Manifest next update:     Tue 04 Aug 2026 18:32:11 +0000
Files and hashes:         1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: U4tnYyTaKkIOpXmzRyBpzVdB8QYKu/r1lvkvTPQGBCI=)
                          2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: fs8vNdHPTeEjIkaHFCo8i9QI5xttWL2wCiA1UOJja1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
                          rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3408 (0xd50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
        Validity
            Not Before: Jul 28 18:32:11 2026 GMT
            Not After : Aug  4 18:32:11 2026 GMT
        Subject: CN=6a68f5ac-2bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:c4:d0:db:29:9d:70:5e:90:a7:f2:af:eb:
                    4e:e3:61:33:88:c2:c3:9f:29:40:fa:42:2d:04:5c:
                    76:7a:74:45:d8:43:0e:e2:76:26:e9:48:7e:9c:5b:
                    8c:47:7b:9d:55:de:f8:c5:0e:86:69:49:8d:0e:f3:
                    5f:c9:3e:47:1b:63:27:d3:18:ca:e8:f4:d4:bd:e0:
                    76:e3:7c:52:a8:54:99:b5:79:a1:3a:7d:39:02:e5:
                    d2:c6:28:b7:70:13:52:94:8e:3f:46:79:8f:5a:03:
                    20:9c:ce:81:9f:79:47:24:cb:cb:12:00:81:0d:fe:
                    2e:18:3c:a6:b2:ca:e1:7d:71:8f:88:ea:90:fa:44:
                    6e:60:80:a3:db:f0:c7:41:0b:b2:ee:b3:f9:d2:72:
                    0e:20:7c:3e:4a:f9:92:96:df:0c:28:17:40:dd:e8:
                    41:d5:03:91:0f:da:01:41:e2:56:38:4b:01:f9:74:
                    0a:4b:a9:8f:29:c8:17:60:e1:cf:75:cc:58:f1:76:
                    c1:b2:5d:cb:ae:7a:d8:4c:83:6a:71:c9:11:94:c7:
                    3c:c6:65:4a:f8:be:35:f6:d5:11:e0:02:3f:a7:db:
                    a0:b6:f2:8f:e0:f1:ea:39:9a:4b:3f:8f:cf:1e:87:
                    cc:76:fd:6c:ce:5a:08:45:d2:05:1b:87:d5:4a:9c:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0E:E0:95:C1:9A:C3:0A:D6:A9:44:67:01:76:C9:24:75:62:B7:44
            X509v3 Authority Key Identifier:
                keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e5:40:fe:b9:d9:d7:85:79:68:55:41:63:6c:f2:55:02:15:
         5f:3d:e0:05:88:3f:a2:c0:6e:76:95:e6:9a:a3:9f:f4:36:c3:
         8a:47:21:0b:19:10:b2:84:b2:17:ce:1b:1a:64:58:98:be:68:
         84:70:e1:05:23:89:38:69:80:a9:67:00:8b:80:4a:e4:48:d8:
         13:29:80:ae:6c:2d:dd:c5:c9:9c:5a:26:32:55:2a:05:27:40:
         26:37:e3:f1:6e:14:f5:be:2b:24:62:e2:aa:d9:83:bd:c5:48:
         d8:8b:15:71:9b:97:65:0e:19:c2:bb:51:f3:c7:04:2b:8d:c1:
         1b:89:75:2c:fe:6c:5b:85:20:9e:8e:77:c4:a6:47:05:37:6f:
         0d:80:bd:06:ca:e4:ae:05:21:79:04:4d:27:d3:e5:66:0b:ca:
         5a:68:7a:85:34:a0:c4:99:26:4a:66:1c:45:dc:24:90:7a:44:
         10:32:a6:e4:80:63:2b:5d:3c:c4:c7:64:26:76:e6:89:45:2b:
         24:af:9e:1e:91:b1:2f:08:a1:54:d4:a4:63:f1:b7:41:d4:04:
         1c:78:c7:0d:c6:6e:2c:07:e7:3e:29:ff:0b:e1:d5:30:54:4f:
         01:e7:73:86:a4:a2:87:ed:63:e4:1d:1f:a6:92:39:d9:d1:51:
         d9:f9:c9:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw
M0E1MDJDQ0MwHhcNMjYwNzI4MTgzMjExWhcNMjYwODA0MTgzMjExWjAYMRYwFAYD
VQQDEw02YTY4ZjVhYy0yYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0SzE0NspnXBekKfyr+tO42EziMLDnylA+kItBFx2enRF2EMO4nYm6Uh+nFuM
R3udVd74xQ6GaUmNDvNfyT5HG2Mn0xjK6PTUveB243xSqFSZtXmhOn05AuXSxii3
cBNSlI4/RnmPWgMgnM6Bn3lHJMvLEgCBDf4uGDymssrhfXGPiOqQ+kRuYICj2/DH
QQuy7rP50nIOIHw+SvmSlt8MKBdA3ehB1QORD9oBQeJWOEsB+XQKS6mPKcgXYOHP
dcxY8XbBsl3LrnrYTINqcckRlMc8xmVK+L419tUR4AI/p9ugtvKP4PHqOZpLP4/P
HofMdv1szloIRdIFG4fVSpxf5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUO4JXB
msMK1qlEZwF2ySR1YrdEMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD
RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp
d3E3dWstRHU1bmtEcFFMTXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARuVA/rnZ14V5aFVBY2zyVQIVXz3gBYg/osBudpXmmqOf9DbDikchCxkQsoSy
F84bGmRYmL5ohHDhBSOJOGmAqWcAi4BK5EjYEymArmwt3cXJnFomMlUqBSdAJjfj
8W4U9b4rJGLiqtmDvcVI2IsVcZuXZQ4ZwrtR88cEK43BG4l1LP5sW4Ugno53xKZH
BTdvDYC9BsrkrgUheQRNJ9PlZgvKWmh6hTSgxJkmSmYcRdwkkHpEEDKm5IBjK108
xMdkJnbmiUUrJK+eHpGxLwihVNSkY/G3QdQEHHjHDcZuLAfnPin/C+HVMFRPAedz
hqSih+1j5B0fppI52dFR2fnJPA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:49 2026 by rpki-client