Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
File:                     qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json)
Hash identifier:          jVOy6L4ERODxw5Jd2wCxPt9XpNDZvXb0kumbfIWSlxs=
Subject key identifier:   0E:A7:E0:1B:68:7F:D8:E8:7C:26:E5:D0:D8:E4:6B:C8:DE:66:51:AD
Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8
Certificate issuer:       /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8
Certificate serial:       0A68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
Manifest number:          0A23
Signing time:             Fri 12 Jun 2026 19:55:10 +0000
Manifest this update:     Fri 12 Jun 2026 19:55:09 +0000
Manifest next update:     Fri 19 Jun 2026 19:55:09 +0000
Files and hashes:         1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: dHqzkgY0ebWZ2IUP29DlAcr0lvhwLcsW2ThE2gAhx4s=)
                          2: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: 1IEjJ30lw69ZEHMKoLQ8EMNLbhqzITtfEQNas8rt+9s=)
                          3: 0FD0ED72DEDF11F085D204E3526F56BC.roa (hash: pTLqg59yg6AHQtWauJEh8VBOaMqkkf2a1JioyqursTM=)
                          4: C2A410D4ADA011F08E990C1DC4F9AE02.roa (hash: G0vU5JVbCZyLk1wSOWyQBhOy8mR2nS22Z/eltaU886M=)
                          5: 35E2088CDEDC11F09573FB8A516F56BC.roa (hash: Pkdcinjik27aP1313/FsgkfOJBBKQKn1ifEErEuk2l8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl
                          rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8
        Validity
            Not Before: Jun 12 19:55:09 2026 GMT
            Not After : Jun 19 19:55:09 2026 GMT
        Subject: CN=6a2c641d-824d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:0b:63:82:58:1a:2d:4b:4f:bf:e8:dc:12:
                    e6:93:a1:54:e2:14:58:7a:e8:96:6d:0d:2a:37:6c:
                    06:da:d1:9a:5a:3b:1f:5a:04:8a:83:3f:8b:7d:9b:
                    5b:a9:a5:af:cc:c8:69:91:fc:af:6c:da:9f:be:d6:
                    1f:ad:e1:12:cb:0c:75:9e:64:ea:b0:71:c3:03:e1:
                    40:15:b3:9a:ce:32:d4:1d:dc:3a:f3:4e:0c:ee:17:
                    f3:28:e9:ce:64:c3:07:fa:4f:67:ba:f2:35:22:2b:
                    22:f4:30:73:ed:08:fa:26:64:eb:5d:84:2e:34:f0:
                    7b:e9:54:8c:d2:d8:2c:89:48:81:ce:fd:a5:8f:09:
                    47:cf:af:a4:ba:bb:53:20:48:71:88:b0:7e:a0:db:
                    e6:4e:75:9f:33:13:8c:ab:a8:93:d6:d5:55:3e:7f:
                    a3:1b:53:9c:b3:96:96:db:32:41:fc:fb:51:4c:41:
                    6d:7f:b8:34:9d:84:fc:f2:f2:7b:fc:fb:05:c2:6e:
                    9c:3b:94:93:e4:95:a0:2e:40:58:a2:ee:27:e5:93:
                    13:49:ee:ac:d8:3d:de:d3:63:d4:5d:13:69:fd:d2:
                    e0:72:21:a4:58:0b:1b:ef:7a:e0:4f:d8:29:60:98:
                    26:52:b2:23:2d:f0:71:ca:8f:30:2e:ae:78:5e:62:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A7:E0:1B:68:7F:D8:E8:7C:26:E5:D0:D8:E4:6B:C8:DE:66:51:AD
            X509v3 Authority Key Identifier:
                keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f0:da:2f:aa:0d:e0:16:48:79:56:f9:0c:85:3f:fe:1a:12:
         73:a2:bd:94:4e:2b:44:34:2e:49:ed:e9:f1:12:75:4b:74:9b:
         a1:8c:1f:36:f0:ca:fc:22:3e:fa:c2:66:e9:24:54:61:bf:9e:
         30:b8:5d:eb:55:9b:8f:f6:80:0e:56:67:a4:2d:a9:b4:32:2e:
         63:d8:a4:be:f2:07:3b:f5:fb:e8:93:77:de:49:82:70:14:36:
         c8:61:d3:f7:20:99:f2:a0:dc:2d:cd:7a:07:9a:57:91:48:89:
         6f:0e:55:55:5a:78:27:2f:97:2c:88:b5:9c:16:2f:a6:4b:5f:
         ea:22:96:23:68:cb:13:d3:c2:40:8b:48:61:41:66:39:55:97:
         f8:0f:e5:ba:de:2e:7a:67:ea:92:af:67:b4:00:06:3d:dd:27:
         8b:05:d2:a9:6d:11:25:d1:35:8a:43:41:50:1d:e3:0f:c3:ae:
         cb:c0:9f:ce:f3:a4:e9:a9:f7:03:24:3d:34:e1:13:eb:b9:53:
         26:2f:cc:34:53:16:28:90:ff:92:19:ea:6e:a1:3d:c0:1e:9a:
         e3:1b:0d:39:a9:bc:58:70:fa:34:ec:a5:f3:20:ec:d8:b3:85:
         03:75:79:af:79:7d:12:68:a8:92:a2:43:ca:b4:85:32:22:15:
         bf:1c:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:13:53 2026 by rpki-client