Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
File:                     QeHsF957pw-MEkF3aWN3AjclGd4.mft (raw, json)
Hash identifier:          zD4TPpG6o5ZZPcFlGo9KIGZmenksKSV+PpPT1wNvBtw=
Subject key identifier:   A3:EA:77:CF:CE:87:70:92:57:3B:3A:07:D6:56:AC:53:EE:03:E6:7B
Authority key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE
Certificate issuer:       /CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
Manifest number:          0179
Signing time:             Sat 13 Jun 2026 04:38:50 +0000
Manifest this update:     Sat 13 Jun 2026 04:38:50 +0000
Manifest next update:     Sat 20 Jun 2026 04:38:50 +0000
Files and hashes:         1: QeHsF957pw-MEkF3aWN3AjclGd4.crl (hash: LKOHsdUefC4BhOjTplCAzmqTbRA1sMdlgNc/L2qAZQU=)
                          2: 8CF832322C6C11EFB50AD22EC4F9AE02.roa (hash: xbXyHpLgHt9b+54jlb0N3LzfXI2w4v845p/L4pO7oxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl
                          rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE23, serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE
        Validity
            Not Before: Jun 13 04:38:50 2026 GMT
            Not After : Jun 20 04:38:50 2026 GMT
        Subject: CN=6a2cdeda-b6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:99:d8:08:1f:3b:10:a2:1d:e4:f7:bb:b6:
                    ee:be:b5:d2:86:ce:ab:48:6a:3e:ab:2c:01:63:ad:
                    a7:66:fc:fb:14:8c:7b:53:8f:38:d5:97:5b:08:db:
                    8a:49:34:c0:45:b3:dd:86:1f:63:0b:98:9b:e9:54:
                    6d:19:2c:fa:2b:e5:d4:08:f0:ef:8b:df:1f:0f:bb:
                    6a:6e:38:d4:c0:e3:a9:a4:00:84:76:90:b2:b6:6d:
                    a1:b0:17:e5:f4:9f:34:7e:15:79:d0:0f:6d:24:32:
                    53:21:f8:7c:69:58:9f:34:67:d7:43:b4:23:d1:89:
                    ec:d1:91:c1:00:f2:4e:8d:a3:43:a5:da:e0:d6:59:
                    f3:3c:25:d2:67:7f:ca:0d:d5:01:17:cf:72:1e:6d:
                    98:b0:12:94:9c:db:f2:57:59:c2:07:f7:0f:a9:4f:
                    06:b2:85:d8:8d:46:37:73:16:84:a5:34:15:60:99:
                    19:e3:5c:78:be:1b:f7:44:7a:0f:17:5a:f6:65:be:
                    60:4a:3e:63:31:37:ab:09:6b:0a:60:67:39:79:eb:
                    40:d8:ad:7b:ae:95:09:19:62:6e:4f:39:2c:b3:f0:
                    4d:8b:64:e4:2f:c9:a3:86:36:04:4a:1c:e6:a7:93:
                    0d:8c:b8:44:f3:88:40:0a:1d:84:f9:01:d5:e3:fb:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EA:77:CF:CE:87:70:92:57:3B:3A:07:D6:56:AC:53:EE:03:E6:7B
            X509v3 Authority Key Identifier:
                keyid:41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:a4:72:1a:d8:94:8d:72:86:90:01:b1:c0:c9:ca:f2:60:
         2a:ce:25:7d:0d:e1:c8:cc:2f:9b:8c:94:77:71:4f:5b:c5:c4:
         0c:80:ee:f7:f0:63:3d:af:3a:c3:41:38:4c:fb:dd:30:15:ff:
         1e:a4:f7:91:52:0a:ac:6b:9d:99:f2:ce:01:99:bf:e6:67:eb:
         a0:30:c7:e9:b6:75:27:f2:c5:90:f4:83:c0:eb:50:2d:3b:80:
         09:1f:55:c9:ee:eb:95:0d:0d:6f:67:b4:ce:97:46:3c:dc:29:
         cf:e9:43:e3:2c:21:8a:9e:ef:7a:9b:aa:6d:37:a6:dd:95:51:
         eb:58:18:c2:f1:06:64:8f:30:83:19:47:d6:90:ff:cf:78:58:
         61:37:6f:fc:47:bf:de:e2:8c:2f:81:f1:95:a0:a0:cb:79:4a:
         ca:5d:85:d7:24:26:96:d6:e6:1b:40:ae:fb:4a:f8:d6:85:9f:
         f1:b1:6d:c0:82:0d:0a:ab:1b:20:14:e9:9c:60:ee:95:20:7e:
         13:cd:0f:cb:cc:87:8a:c7:0a:ba:f1:13:dd:17:f3:fe:1a:65:
         64:51:a2:15:b4:bf:0e:61:11:cc:24:9c:9e:e5:c9:72:2d:96:
         da:c3:f8:53:e4:70:65:af:67:ab:3e:91:00:2e:59:d7:d5:95:
         f9:3b:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:09 2026 by rpki-client