Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File:                     qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier:          FvTIKSHTNM55Hgvd0b3cdyIVif6/6S/Bf4J795mo3gA=
Subject key identifier:   18:2E:0D:82:E6:92:C6:CC:B0:BA:9C:C1:2F:D2:C4:89:40:64:F3:BB
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer:       /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number:          026D
Signing time:             Sat 13 Jun 2026 02:11:55 +0000
Manifest this update:     Sat 13 Jun 2026 02:11:54 +0000
Manifest next update:     Sat 20 Jun 2026 02:11:54 +0000
Files and hashes:         1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: 70niu7A0uzb7Wq9lGOUUxpq5aHEmMGtwaY9e19G2lsg=)
                          2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: Q3iqUPNxpMUTGIgTwjjfM3K9Qqme00bVcKDIrn27a8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
                          rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
        Validity
            Not Before: Jun 13 02:11:54 2026 GMT
            Not After : Jun 20 02:11:54 2026 GMT
        Subject: CN=6a2cbc6a-c488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:c2:df:b9:ca:5d:b1:db:82:91:22:93:83:
                    64:9d:0c:86:96:c5:25:43:5b:bb:c7:23:60:53:93:
                    d3:34:87:d9:1f:42:b4:92:38:54:3c:9e:4c:83:99:
                    f2:e1:f3:29:d4:18:f5:0b:ec:19:c9:77:56:00:ad:
                    0c:4d:e7:d2:00:93:0c:86:cd:fb:84:09:35:0a:30:
                    d4:11:a7:53:f6:9a:11:a0:33:29:4c:91:15:47:24:
                    ae:1e:dd:3d:a5:07:a8:e6:12:74:0c:15:7f:10:06:
                    6b:41:db:46:11:7d:63:bc:fa:db:85:97:9b:29:17:
                    2b:a1:1f:c3:f6:57:01:3d:2d:4b:f3:bb:2c:a9:82:
                    7c:5f:d4:a4:d6:01:de:da:2b:7f:25:40:de:5f:52:
                    cc:a1:b7:60:aa:44:4e:4f:1d:53:33:57:e6:5b:54:
                    4a:49:08:4f:d9:31:a7:1a:02:fe:d0:e3:49:35:ea:
                    e2:57:c6:e3:47:1f:0f:db:89:17:fd:2c:54:07:e0:
                    ee:8b:90:67:f3:a5:09:22:44:09:e9:4a:b4:d5:0f:
                    3b:3b:96:37:79:79:9c:ff:1e:10:09:8a:12:7e:53:
                    91:38:86:19:a9:ab:cd:ae:16:dc:d1:39:bf:b2:b8:
                    c7:24:6c:29:b5:cb:e9:1f:d1:dd:8a:13:4f:c3:b2:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2E:0D:82:E6:92:C6:CC:B0:BA:9C:C1:2F:D2:C4:89:40:64:F3:BB
            X509v3 Authority Key Identifier:
                keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:64:7d:56:f7:98:8c:29:9c:4a:d1:ee:2d:d4:54:a1:d7:8d:
         70:8f:81:35:71:4e:6c:03:54:25:86:d7:5d:f2:b0:32:87:d2:
         50:62:5a:b7:92:49:b6:c9:aa:9a:80:f3:d3:a7:48:59:e9:de:
         6c:dd:93:95:5d:09:d3:1c:2b:0f:52:d0:72:4f:54:a0:b7:19:
         d2:cf:b8:59:d3:d2:25:cc:ef:75:7d:2e:d8:92:36:48:a5:40:
         d2:db:31:a5:81:ec:c8:9a:ac:1e:21:e5:d2:6c:18:d7:13:4b:
         e8:b5:47:28:00:19:57:42:49:0f:e0:2b:07:16:36:88:48:29:
         21:f0:af:4d:6b:38:9a:a3:0c:18:ae:10:fc:70:a2:d5:bf:3b:
         87:21:88:2d:73:8c:07:3a:79:55:28:99:e7:2d:b8:ed:c9:7e:
         8a:66:31:b7:67:3b:02:d4:bc:66:a2:af:08:2b:fd:03:a4:8d:
         26:17:05:b7:02:9f:f5:3f:1d:9b:5d:bb:04:65:85:ff:6d:70:
         43:e7:fa:10:cc:97:23:a5:2f:1a:56:04:35:5f:14:d9:7d:4d:
         56:68:9c:10:b1:52:1e:4e:01:2e:cc:98:ad:95:9f:a5:c1:b4:
         41:4f:f6:29:bb:18:4d:84:2a:6e:e6:5c:79:d4:e3:34:e2:45:
         44:88:6d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:45:43 2026 by rpki-client