Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
File:                     qkPN2PNDwbXd5ZFqct92iMqueoE.mft (raw, json)
Hash identifier:          u/NruyzFkNdPx6JYBAaNraAjMlZ16hjiFWL6rbq0JVU=
Subject key identifier:   9D:6F:3C:EA:4D:C9:65:0E:47:5F:E2:8A:C3:2F:09:41:DB:F1:D6:90
Authority key identifier: AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81
Certificate issuer:       /CN=A913F772/serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
Manifest number:          05
Signing time:             Mon 27 Jul 2026 11:37:32 +0000
Manifest this update:     Mon 27 Jul 2026 11:37:32 +0000
Manifest next update:     Mon 03 Aug 2026 11:37:32 +0000
Files and hashes:         1: qkPN2PNDwbXd5ZFqct92iMqueoE.crl (hash: hiKjvl3S1iNFBjC3OcBNeqKrtE7oxvo5GgyReJONO4Q=)
                          2: C1C00A1284DA11F1A36DC6415BA30FBC.roa (hash: Nmcq4UHe3DrUnvTS7pPr090KNaayVFKp/fB14Rol1gw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl
                          rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F772, serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81
        Validity
            Not Before: Jul 27 11:37:32 2026 GMT
            Not After : Aug  3 11:37:32 2026 GMT
        Subject: CN=6a6742fc-017a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:00:c0:63:28:06:39:f7:05:f9:f1:d2:b6:
                    cc:5f:6c:96:e8:da:7a:af:da:12:ad:71:db:cf:8e:
                    bc:9e:2f:5e:97:fb:1d:22:b1:fe:2e:df:2f:58:54:
                    db:65:21:29:c3:72:51:3e:6c:f6:a1:48:45:50:48:
                    91:9e:f5:61:4a:11:e7:57:fb:50:57:57:04:0e:ba:
                    ec:7c:c2:88:5a:6b:86:10:3e:c3:72:7d:f9:99:0f:
                    9e:e3:59:2a:73:aa:9d:60:46:de:47:ff:27:45:fc:
                    db:37:ee:f5:fd:f8:7e:01:1e:5d:d2:7b:4e:db:b9:
                    77:09:9a:fd:f8:5b:85:6a:01:20:31:36:ee:0b:d8:
                    12:1f:01:c9:9f:99:81:4d:6c:8f:d9:9f:27:b8:64:
                    bc:51:0c:3b:4e:51:5e:c4:06:5d:5c:da:1b:31:2c:
                    d5:ed:d3:e7:79:79:6c:88:86:46:79:fb:75:5a:ce:
                    40:aa:77:7c:30:3f:eb:a6:39:f5:f3:04:34:56:89:
                    ee:81:a7:08:90:58:6f:fb:2d:ca:8c:ab:86:68:32:
                    19:42:a9:94:e7:73:fe:61:7d:77:92:86:d6:10:17:
                    6a:ab:2c:6e:ad:06:c3:02:0a:52:0d:ba:7c:fe:65:
                    57:2d:b9:18:e3:d5:60:9b:98:d8:46:ee:68:a3:0e:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:3C:EA:4D:C9:65:0E:47:5F:E2:8A:C3:2F:09:41:DB:F1:D6:90
            X509v3 Authority Key Identifier:
                keyid:AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:aa:fa:15:68:a3:3e:c8:6c:72:26:d2:7d:ef:01:83:f0:
         bd:15:23:ce:b9:f2:18:bc:08:ad:dc:a1:99:87:d2:f1:39:ba:
         87:c3:17:eb:c2:24:f6:b2:c3:36:5c:20:20:db:43:4c:86:f5:
         91:e6:71:8d:25:96:f0:da:66:e9:8b:e6:9b:eb:42:3f:37:70:
         68:54:87:c8:bd:c0:5b:32:99:df:6e:70:77:34:39:ce:8d:9f:
         3e:a9:cd:b1:bf:8c:fa:dd:d2:8e:03:d0:58:bc:d6:3b:c7:13:
         80:c5:8f:b6:3e:ff:37:f7:2a:59:a2:82:57:07:85:36:26:39:
         a8:78:d6:5b:64:09:41:be:64:70:14:81:d2:69:c9:ce:83:89:
         fa:f1:f9:79:30:a2:a7:4d:c4:96:f4:43:3c:0a:1a:d0:b7:00:
         56:5c:7b:75:02:42:12:3b:98:3b:73:8a:58:6b:8a:3e:c7:f7:
         70:85:3e:79:f5:e3:e9:5f:a9:3d:2a:f2:92:51:bf:11:af:90:
         65:68:2f:d1:3f:69:b9:15:25:0c:88:d1:ae:50:bb:b3:fa:c7:
         13:f0:e7:8e:21:9d:2f:05:7f:82:a3:67:0a:27:d9:5e:87:bb:
         0d:31:a0:13:eb:f7:03:94:89:cf:dd:bb:87:20:87:ad:29:17:
         f9:5d:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:11 2026 by rpki-client