Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
File:                     aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json)
Hash identifier:          d+1spCWBWu5XRtFMwxe66CiIGY/vQsvMC7N2BOWRNnA=
Subject key identifier:   D7:52:DF:6E:AC:5E:A6:28:25:5A:91:3A:33:4A:ED:D3:63:94:33:53
Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
Certificate issuer:       /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Certificate serial:       0498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
Manifest number:          048E
Signing time:             Sat 13 Jun 2026 00:05:08 +0000
Manifest this update:     Sat 13 Jun 2026 00:05:07 +0000
Manifest next update:     Sat 20 Jun 2026 00:05:07 +0000
Files and hashes:         1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: ZymfQQxkwHpesjcqAf2bm6cCMOKf4fyAC8m5xALMgh8=)
                          2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: fjG3+8ZC22UxCMS8177A/y6FTGhegxZaMx8Kk6yByAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
                          rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
        Validity
            Not Before: Jun 13 00:05:07 2026 GMT
            Not After : Jun 20 00:05:07 2026 GMT
        Subject: CN=6a2c9eb4-1397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:02:6f:b8:53:fc:f7:d5:fd:1d:fa:57:76:
                    52:d2:7e:a7:6f:9d:1b:95:30:80:1c:78:21:a0:b0:
                    e9:98:7b:2a:d5:02:4f:44:84:ee:51:1c:76:c3:99:
                    5b:fa:aa:2a:5c:87:b6:91:dc:95:07:8c:72:57:93:
                    40:8b:2c:e0:f6:81:ef:69:79:be:df:4d:bf:52:e1:
                    72:89:05:ac:e5:d8:d5:40:9c:f3:bc:f1:9e:53:33:
                    fb:94:38:51:f8:a5:5b:8f:d3:b1:01:c8:75:ff:a5:
                    a3:d4:73:8d:7e:3f:8e:3e:0c:5d:ef:ac:c7:c9:10:
                    73:82:de:f0:ef:40:87:f6:a5:c8:d5:3b:99:7b:ce:
                    bb:01:6a:2b:84:dd:07:b7:f7:69:a9:bc:fc:fc:2d:
                    c8:8f:3a:2e:2e:f5:74:f9:2c:e4:97:cc:e8:b9:7e:
                    f5:33:2e:0b:7d:95:fc:1c:be:b0:ad:86:fe:43:05:
                    09:62:a4:2f:a6:fc:c2:a6:3a:0d:54:ba:bc:3c:d0:
                    2e:9e:e2:54:0b:e5:e9:60:47:81:3b:72:10:3f:2b:
                    ed:9d:ad:42:08:3b:cd:8f:53:1d:2a:f0:7b:10:60:
                    73:2d:af:5d:21:af:dd:9c:56:da:60:d9:20:68:9d:
                    90:02:bf:eb:9a:de:0f:ec:7d:94:f4:61:df:30:9c:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:52:DF:6E:AC:5E:A6:28:25:5A:91:3A:33:4A:ED:D3:63:94:33:53
            X509v3 Authority Key Identifier:
                keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cf:27:e0:df:82:51:81:c3:9b:c6:6a:e1:aa:dc:cf:83:ce:
         6b:b4:c2:1b:bc:f4:7b:d9:01:fd:6b:48:e0:fc:fa:39:ac:9f:
         07:dc:d5:9e:4b:03:a6:b4:d9:a0:52:71:b4:c7:f2:db:64:65:
         03:15:df:09:59:e1:52:25:fd:94:33:6c:b7:1b:62:e4:d5:35:
         f2:ed:ee:e4:47:18:f5:d9:ac:43:77:c9:70:93:b9:66:84:5a:
         ba:53:b9:00:a3:cf:00:24:eb:7b:ee:16:47:1e:6f:7c:f3:27:
         05:4c:c6:0e:6c:1d:3d:a0:09:fa:cf:60:ac:1b:54:ce:35:dc:
         00:6a:92:9e:3b:b8:4b:04:b6:49:1a:71:40:e4:56:f3:08:a1:
         e8:a6:17:60:82:9e:f3:66:6b:63:ab:4f:bb:f3:46:92:66:ae:
         ae:8e:c9:ee:e7:24:22:8e:e6:ef:06:49:5b:86:c1:03:2d:70:
         67:62:52:f6:c6:33:31:39:af:0e:0b:71:66:d7:ef:89:ef:0c:
         59:43:26:65:6c:88:b1:38:9f:12:22:4f:c3:1d:a2:5e:5f:3a:
         4a:82:1c:95:20:02:be:f4:9b:a5:1d:91:12:fc:45:f2:98:2f:
         35:81:6a:f7:96:89:f8:70:ee:b3:46:a3:60:b0:73:2d:35:09:
         02:02:5f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:25 2026 by rpki-client