Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
File:                     qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json)
Hash identifier:          6WQWv1yhRHUSnns91jrGj8vB+bfuCoFnuKlOx308JdA=
Subject key identifier:   66:AA:A3:70:00:F8:A7:68:10:DF:0E:B9:82:28:F4:35:9F:F1:1B:A2
Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
Certificate issuer:       /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Certificate serial:       06B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
Manifest number:          06AE
Signing time:             Fri 12 Jun 2026 22:25:16 +0000
Manifest this update:     Fri 12 Jun 2026 22:25:15 +0000
Manifest next update:     Fri 19 Jun 2026 22:25:15 +0000
Files and hashes:         1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: 0fSUC6mpA+K1wnODuFGFEnJ6eEoZMj3L52wfjlvhyZg=)
                          2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: fipC8fnuwGfyjeMJXsenerqMyqmtrvp5/f9MWaX5s6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
                          rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718 (0x6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
        Validity
            Not Before: Jun 12 22:25:15 2026 GMT
            Not After : Jun 19 22:25:15 2026 GMT
        Subject: CN=6a2c874c-56b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:d8:83:c3:47:cf:07:8b:03:71:c5:b6:d3:
                    7a:91:f0:6b:54:c1:c8:b9:2d:07:a7:42:89:db:c5:
                    fe:63:b3:f5:53:df:70:8c:ed:f6:3c:e8:e7:4d:41:
                    e0:85:32:50:ea:fa:cb:de:4d:b8:97:50:fc:46:bc:
                    25:97:5d:c3:84:63:be:f8:85:58:93:6a:4e:49:f9:
                    ef:e2:40:15:10:91:cb:25:df:da:62:bc:50:ee:11:
                    26:eb:94:00:9f:f2:c7:72:13:42:03:5b:bd:a1:1a:
                    17:d7:aa:53:ac:dd:b6:b1:dd:15:de:88:7f:4e:1f:
                    14:20:ea:79:55:b7:22:1c:e8:cd:71:a8:9b:cf:ff:
                    18:97:6f:09:fe:0d:e6:2d:ee:cc:ff:da:e8:17:50:
                    7a:21:59:7c:51:b1:c3:94:3b:54:36:66:9f:e2:46:
                    72:33:08:5d:ab:49:da:e3:33:12:44:25:15:a1:47:
                    85:bd:f2:d1:67:39:d1:9e:6f:fc:20:b1:08:d9:c0:
                    6c:02:c8:73:85:f9:e5:cb:5d:41:51:e4:95:76:99:
                    1e:0d:aa:dd:96:f2:19:a8:05:e6:2e:77:f8:0f:26:
                    21:91:95:58:f4:72:59:8a:cd:00:cc:3f:94:34:c8:
                    98:85:09:dd:2a:be:e3:7a:0b:8f:31:22:61:4b:bc:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AA:A3:70:00:F8:A7:68:10:DF:0E:B9:82:28:F4:35:9F:F1:1B:A2
            X509v3 Authority Key Identifier:
                keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5b:bf:b9:36:a5:d4:48:c2:6c:f0:37:7a:cd:11:0b:71:0e:
         2a:f6:fd:8b:6e:e8:b0:49:7a:40:7d:34:26:42:a9:2d:16:06:
         70:af:15:b8:73:10:e4:45:4b:43:aa:70:b8:69:a8:d6:72:88:
         3b:96:f6:0e:4b:81:54:4b:10:04:e7:3e:02:25:67:39:29:bc:
         6f:69:b0:df:f4:7a:13:e0:94:91:43:58:a9:04:94:56:6c:37:
         dc:e7:68:fb:93:b8:98:81:2f:25:ef:18:8e:79:f7:f9:21:a6:
         65:9a:56:ec:b7:c4:9c:8e:a0:84:c8:3b:2a:ed:e4:52:62:18:
         e8:e7:d4:20:7f:a9:2f:08:22:5c:5e:d8:69:9a:0b:6e:ef:2c:
         c9:c9:6d:ad:5d:85:aa:54:72:f6:29:e0:c8:52:86:9e:c8:a7:
         29:12:0a:16:2b:7a:91:43:27:51:e7:4e:17:36:00:db:29:a7:
         8b:4d:1d:06:c3:d9:76:a4:77:78:02:ce:c8:c0:4b:63:db:6c:
         05:1f:a7:2e:2e:f2:a7:56:54:08:66:7d:24:5c:50:b2:c1:12:
         c4:f6:77:99:6e:40:43:30:52:f6:df:1e:9b:6f:15:c1:8a:9a:
         e1:35:26:2b:d2:7a:1f:42:20:ae:5d:73:e9:fa:33:86:d3:bb:
         5b:f8:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:08 2026 by rpki-client