Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
File:                     QhQkhj78b5uyGjIfvVA2YeSoo_0.mft (raw, json)
Hash identifier:          A3p69+cOTgJcMbcvBq/6KC86ruj5fVsDnieZSN1ZIhI=
Subject key identifier:   91:29:43:1D:9B:9A:13:D8:CF:10:C3:26:EF:51:6E:5B:F6:24:33:49
Authority key identifier: 42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
Certificate issuer:       /CN=A9114ECC/serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
Manifest number:          37
Signing time:             Sat 13 Jun 2026 08:39:12 +0000
Manifest this update:     Sat 13 Jun 2026 08:39:12 +0000
Manifest next update:     Sat 20 Jun 2026 08:39:12 +0000
Files and hashes:         1: QhQkhj78b5uyGjIfvVA2YeSoo_0.crl (hash: NtbkeC6TOBS00f8PlVPMaL7pTrxg/cpEhSFH86h8MMw=)
                          2: 7E43D97816DD11F18A14954A343D8C67.roa (hash: GHvsDod4B4M4Fvy4vn3Fb5pNbSRAj6hWau5NZwFd4IY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
                          rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114ECC, serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
        Validity
            Not Before: Jun 13 08:39:12 2026 GMT
            Not After : Jun 20 08:39:12 2026 GMT
        Subject: CN=6a2d1730-2b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:51:95:ae:81:08:f2:fe:07:c6:ed:37:a3:
                    11:64:e9:c3:bc:75:38:b7:19:15:b0:82:f1:4f:20:
                    75:09:a0:26:20:1b:02:25:86:2f:39:42:25:77:3e:
                    fa:dd:a1:c7:21:a7:4e:52:ae:aa:41:9f:e6:49:1d:
                    0c:55:ba:46:08:15:56:3d:75:35:63:ad:75:b2:e7:
                    2d:32:52:51:db:bd:c9:41:e3:46:fc:60:da:5f:d3:
                    fd:b7:b4:9c:a3:ac:b7:99:90:61:f6:6f:35:42:e0:
                    d0:30:00:d8:f5:07:27:34:b5:0f:61:06:5a:bf:4a:
                    49:29:b4:a9:dd:e3:51:cd:57:62:64:1c:99:04:e0:
                    6d:8e:18:fc:33:70:e0:36:a1:36:39:ef:ae:4a:6d:
                    96:2a:55:ec:12:e2:87:d8:77:8b:bf:64:a6:06:eb:
                    c9:49:7c:8f:d0:c8:7b:01:59:06:1b:b7:5f:82:6b:
                    47:e3:5e:a9:75:b9:13:06:cd:19:11:11:1f:44:6f:
                    28:1f:37:b1:54:32:f9:98:47:1d:04:91:ef:0a:1e:
                    eb:5e:69:30:a0:fa:c4:71:15:79:ab:89:ad:2f:f4:
                    cc:ca:cb:7e:92:13:84:02:6d:40:82:05:b9:6d:57:
                    34:09:c6:a2:a3:37:fb:85:13:77:87:58:77:3c:1f:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:43:1D:9B:9A:13:D8:CF:10:C3:26:EF:51:6E:5B:F6:24:33:49
            X509v3 Authority Key Identifier:
                keyid:42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:37:f9:5f:ed:fa:c4:b2:fa:2c:e7:04:68:23:92:7d:24:
         90:3a:4d:b7:98:85:96:7d:d8:b4:d4:76:c7:f2:4b:76:b4:89:
         d5:55:51:77:68:42:90:db:c7:0c:98:88:7d:5a:ed:29:1c:de:
         15:66:47:25:41:6b:7e:15:be:b5:fe:3b:1d:6c:d5:2d:f1:b9:
         50:da:35:42:da:27:3e:c4:a3:66:8c:96:fb:8c:2a:96:0c:3a:
         35:96:64:9e:7b:e7:ff:3a:69:d4:9d:d3:28:45:d0:e7:56:e0:
         5a:c7:a5:d6:b8:1d:02:40:53:c4:2a:ea:79:8a:a0:bc:8d:ba:
         03:81:fe:cc:1b:4d:f8:ea:ea:8f:e2:8d:9c:90:25:d4:90:f7:
         d0:8a:a7:00:31:0f:24:38:81:b9:b7:be:6d:86:0d:34:d7:8f:
         c4:f4:47:ed:c2:ff:17:0b:24:a1:54:8a:22:e7:c3:da:bf:10:
         3e:2c:d3:e5:5e:37:89:ae:5d:5a:f5:b2:29:b9:a3:0d:74:56:
         7c:60:2b:85:32:f2:be:25:18:94:e4:d6:9e:01:10:7a:df:88:
         e7:4e:f9:05:76:9e:bb:b7:ba:3c:dd:48:ae:f8:e8:43:62:e2:
         88:79:9f:45:4c:d4:27:14:e7:76:42:1d:31:ea:83:a5:cd:c5:
         1c:22:4c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:59:37 2026 by rpki-client