Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
File:                     QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json)
Hash identifier:          olRAO99KcOE6lkKgeSv0V0EZ5lESkVo09QsG9EPFzFk=
Subject key identifier:   BD:E5:C9:19:47:B7:17:2E:46:4A:B9:47:94:21:37:2F:E9:72:30:EF
Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
Certificate issuer:       /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Certificate serial:       02FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
Manifest number:          02F4
Signing time:             Sat 13 Jun 2026 01:16:52 +0000
Manifest this update:     Sat 13 Jun 2026 01:16:52 +0000
Manifest next update:     Sat 20 Jun 2026 01:16:52 +0000
Files and hashes:         1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: Bj+DyWhgWiKekl8Fxp+IOkZmuSa8+kJdixGDnpf0Ma0=)
                          2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: /KIj4VbCDG5XB/rAb/Z+SKRxFKv9fYPAbyIf2+zzEmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
                          rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
        Validity
            Not Before: Jun 13 01:16:52 2026 GMT
            Not After : Jun 20 01:16:52 2026 GMT
        Subject: CN=6a2caf84-fba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:0b:00:48:56:1f:1e:b9:5f:2f:4a:5d:ee:
                    f7:39:a9:83:3a:35:08:53:5d:17:6d:78:3b:98:ac:
                    b3:f4:ed:d0:68:fc:6c:7a:00:50:45:33:1f:f5:a9:
                    0b:fb:fc:24:07:cd:b6:1f:fd:55:69:82:3c:2d:1b:
                    9d:ef:6c:5a:3c:ad:88:7b:80:18:db:a8:97:d1:64:
                    28:a4:35:8a:0f:43:39:51:cb:b0:12:13:11:46:6d:
                    ce:2a:a7:04:a1:5e:6c:dd:e4:b2:4d:9f:4d:b8:9a:
                    63:66:be:c1:3b:bf:f8:de:53:0f:49:86:3d:58:c9:
                    b6:b5:54:a3:e9:23:88:b5:28:af:84:c9:30:9e:c9:
                    b3:22:9e:f5:c6:26:35:7d:78:ae:a5:4a:f2:85:b9:
                    40:4b:46:e4:a2:9e:01:0b:41:3e:38:3f:30:00:d1:
                    56:7d:c5:b3:0b:a9:27:f0:19:47:a4:3e:47:5d:e5:
                    ab:7e:3c:98:48:25:f7:65:0b:e6:2f:1d:b9:21:12:
                    3a:25:7c:6b:1b:39:2a:88:d8:b4:7e:87:6a:f0:8b:
                    45:0b:10:1b:34:f8:21:09:c7:e7:ab:db:3c:c5:e5:
                    d6:17:86:0a:d3:44:ae:9a:db:66:7f:9f:02:bf:13:
                    03:e1:32:21:dd:ec:05:e4:28:17:cf:e2:31:a8:e0:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E5:C9:19:47:B7:17:2E:46:4A:B9:47:94:21:37:2F:E9:72:30:EF
            X509v3 Authority Key Identifier:
                keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b2:de:31:ba:e2:63:a8:96:66:25:72:a7:6d:72:8c:12:d1:
         0a:e6:e5:af:b8:70:30:c9:41:f3:fd:07:b9:fe:a6:eb:af:7b:
         fc:56:32:33:b9:4b:c2:82:2d:2a:2b:4f:71:6f:81:0e:cf:f3:
         5c:df:53:57:e0:6c:99:a1:89:b7:c7:40:c3:26:b0:ba:64:86:
         b9:56:a3:92:d2:bb:2c:fe:c9:0e:2a:09:ba:98:9a:e9:8c:41:
         1e:5e:24:9d:80:ed:b4:d0:03:47:60:1f:35:66:e6:25:d4:cb:
         fa:df:35:97:de:f3:20:84:85:a6:89:8f:c3:9b:9e:13:e2:c9:
         70:46:4b:5a:fb:10:09:0a:db:8c:e7:2c:41:09:98:e2:7b:2d:
         ee:e7:9a:6a:fe:18:6b:b6:29:65:77:de:75:98:78:8b:b7:b6:
         14:12:22:ad:e4:99:72:91:42:27:fc:67:0b:84:5a:89:64:32:
         33:df:4f:9b:ba:3a:ea:98:e2:70:86:f0:70:df:91:b6:da:9d:
         70:3d:b0:50:1e:32:74:97:97:54:55:e2:6f:d0:26:f5:43:25:
         ff:42:01:07:a7:fe:85:fd:f5:7f:d2:87:55:22:e9:5e:e5:ba:
         4d:db:31:0d:ff:d3:7c:c1:a7:03:c8:ef:25:7a:ac:93:63:fa:
         62:b7:ed:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:23 2026 by rpki-client