Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
File:                     Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json)
Hash identifier:          obIL5fIWQCnmNSefYMsNNmbclUieir/g9UXOOUKdrIg=
Subject key identifier:   1E:83:C0:74:1F:C7:79:6B:8A:F7:8A:BF:DB:7A:18:D5:7D:B2:E9:08
Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57
Certificate issuer:       /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
Certificate serial:       2E30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
Manifest number:          2E0E
Signing time:             Thu 16 Apr 2026 15:27:59 +0000
Manifest this update:     Thu 16 Apr 2026 15:27:59 +0000
Manifest next update:     Thu 23 Apr 2026 15:27:59 +0000
Files and hashes:         1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: Zgpqk/zjszl6tWGbidYHgcSQb9Lk0MKkX4qa9XozvFM=)
                          2: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: Wc0o48iov7rXKqvl8HBWTbUP09bv/Hb3Sn4CiAQcsog=)
                          3: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: RRtlZPLxNXoaDY5ECfLrXwJY6e1jfEEkw/UE23pwwM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl
                          rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11824 (0x2e30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
        Validity
            Not Before: Apr 16 15:27:59 2026 GMT
            Not After : Apr 23 15:27:59 2026 GMT
        Subject: CN=69e0ffff-3f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f8:46:5a:b4:52:ad:79:93:70:12:2f:9f:81:
                    f4:47:7c:f7:fb:11:24:69:d5:c7:11:e4:3d:8c:f7:
                    c0:e0:fa:5b:76:cf:6b:7b:28:9e:03:b0:1e:e9:e6:
                    11:5d:98:2a:28:9f:d4:17:16:90:f2:93:6e:49:51:
                    84:28:9e:c1:e3:58:02:64:25:fb:b4:ff:47:74:9c:
                    cb:22:af:0d:d8:57:70:23:f8:e5:99:75:9e:1e:cf:
                    03:2e:64:01:6a:77:8a:94:64:5f:b8:27:b1:c2:42:
                    cb:9a:8e:aa:0a:ab:cf:d9:96:01:a9:ec:ff:71:86:
                    bb:6e:98:21:03:1f:08:c9:ed:73:2f:86:55:d5:e4:
                    8f:86:39:b6:3a:f1:9a:d9:5e:25:9a:14:fb:2c:33:
                    b2:ea:25:81:e8:70:1f:73:23:ae:03:c7:df:7c:6e:
                    53:73:74:af:e0:8a:61:7f:04:f5:aa:8f:0a:0e:ad:
                    9d:ed:14:75:b0:e6:c8:de:20:27:4b:7e:3f:3d:8f:
                    47:76:95:6c:a9:14:ba:b8:5e:89:7e:6b:c0:c7:a1:
                    c0:f5:1b:77:61:f4:b9:21:19:2d:62:91:3c:33:e1:
                    4c:31:25:84:48:9e:41:a0:e0:ad:a2:96:c6:8c:77:
                    a7:0d:ad:96:dc:54:39:ce:29:53:f0:ed:c8:68:bb:
                    5b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:83:C0:74:1F:C7:79:6B:8A:F7:8A:BF:DB:7A:18:D5:7D:B2:E9:08
            X509v3 Authority Key Identifier:
                keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:42:98:f9:a4:2d:c9:2f:6c:8a:b9:50:05:f8:2e:d5:76:0a:
         52:44:ea:2f:24:30:30:cc:64:18:93:27:e8:b5:fc:a4:dd:4a:
         7e:0a:82:05:bb:7f:c8:60:4a:83:1a:e0:e5:f6:e2:5a:ee:61:
         f9:c8:2c:f6:9b:3c:61:b7:12:97:83:79:75:29:02:26:a4:d5:
         28:64:72:79:c3:e6:bc:d0:65:39:76:0f:97:69:f9:49:16:b1:
         06:87:0d:c1:bd:aa:4e:0f:72:cd:e4:b4:6e:84:c1:b1:d6:39:
         72:36:b1:08:07:4a:08:dc:4d:7e:11:a0:d8:fe:35:c8:1a:c4:
         4d:cb:78:01:85:00:e0:06:04:bb:5c:2f:ff:5d:3d:bc:70:2f:
         61:b5:a5:1f:bc:89:97:86:5c:cf:c6:21:01:48:b5:d9:18:d1:
         70:07:e5:11:20:84:f5:34:6c:0f:fc:3a:6c:fd:fe:d0:be:34:
         29:5a:e6:32:5a:4e:22:c2:79:7e:b7:11:aa:1e:8e:f8:7c:c5:
         2a:ec:28:6c:c2:3d:91:ed:95:f6:58:87:73:42:0d:7e:d7:33:
         a9:3f:b4:fc:61:f0:90:6f:70:bb:c1:6d:ac:8e:37:9e:e4:97:
         86:c3:28:42:16:74:fc:c5:f5:58:a4:71:38:ea:a1:a6:76:01:
         95:44:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:07 2026 by rpki-client