Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
File:                     QZ8npM_s9GHbgvb5BnZPttZfI88.mft (raw, json)
Hash identifier:          mPpPN3+ZIH4OJOPDBSFtgPb+9Rd45h782dC1CqTsxhc=
Subject key identifier:   7D:77:A7:B7:62:6E:68:D2:2C:89:0D:21:BB:57:27:8A:45:2C:D0:B7
Authority key identifier: 41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
Certificate issuer:       /CN=A9140BED/serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
Manifest number:          0182
Signing time:             Sat 13 Jun 2026 04:34:00 +0000
Manifest this update:     Sat 13 Jun 2026 04:33:59 +0000
Manifest next update:     Sat 20 Jun 2026 04:33:59 +0000
Files and hashes:         1: QZ8npM_s9GHbgvb5BnZPttZfI88.crl (hash: xGg5wFFWL5LmCxM1GapyoU6PCgsP3YYCeql0n6bHLEY=)
                          2: ED7C0BCC287211EFA1483A2FC4F9AE02.roa (hash: y+oCb7jxR3D55AFcUV4IpcRd8DG8LNASO4m3mEiRdoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl
                          rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BED, serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
        Validity
            Not Before: Jun 13 04:33:59 2026 GMT
            Not After : Jun 20 04:33:59 2026 GMT
        Subject: CN=6a2cddb7-1281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:41:5c:72:8b:95:23:ad:9d:b5:2c:c6:0a:be:
                    78:8d:30:b1:0a:01:34:db:79:97:97:04:5e:b1:d1:
                    21:f0:5e:91:e9:79:1b:b4:aa:41:eb:22:38:a4:48:
                    0a:05:6c:71:b4:6b:8e:a4:98:69:0d:d8:bb:3d:be:
                    57:8e:fc:b9:21:3d:43:3f:6f:e0:fd:97:f2:f4:dc:
                    18:2e:ab:d5:fb:51:5c:c4:f4:bb:fc:b6:4f:4b:5b:
                    ea:e0:3f:e5:9f:b6:28:db:86:2e:5d:a2:a4:91:39:
                    48:5b:e9:bd:49:b3:3b:06:b2:1f:c4:90:c1:63:93:
                    3d:27:c8:83:f0:fe:c5:87:96:a1:a0:f6:05:2e:21:
                    d2:76:67:52:68:f4:68:a9:57:22:0e:b1:90:ba:d1:
                    df:1c:95:96:00:88:c3:2e:c5:7a:70:4b:91:4a:fe:
                    1c:cb:38:fc:b8:97:05:08:c2:e2:4d:7c:22:57:73:
                    ec:89:51:9d:a8:14:b1:83:dc:29:24:ed:1e:51:74:
                    32:64:c6:ed:92:bb:40:0b:42:90:f8:99:6d:9e:39:
                    ea:f4:7a:4f:64:3d:b8:0a:a9:c7:1c:86:4b:ef:3c:
                    be:a1:93:75:ee:a2:40:55:c1:8b:91:55:4b:7d:3d:
                    cb:47:98:b4:7a:6e:c4:dd:4a:fe:a6:fe:70:b0:d7:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:77:A7:B7:62:6E:68:D2:2C:89:0D:21:BB:57:27:8A:45:2C:D0:B7
            X509v3 Authority Key Identifier:
                keyid:41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:08:e3:ac:27:46:b5:50:45:23:0a:58:b1:d4:88:f8:f1:
         cc:dc:f2:f7:cc:24:31:16:7c:25:8a:26:a2:71:68:84:d9:ee:
         04:03:84:1e:90:65:eb:55:0f:48:69:c2:fe:69:c7:67:d0:20:
         18:d4:6d:bc:8d:61:d0:af:ea:f2:77:e2:0f:9b:de:0f:92:31:
         5b:a5:32:f8:e0:3e:73:31:7b:21:25:c3:dd:04:c7:ed:a6:18:
         b8:85:cb:2a:c8:91:06:cb:08:4a:37:62:cb:1a:ff:9d:2c:fb:
         51:16:79:74:7b:2e:e7:cf:80:55:8c:7e:99:cb:bc:8b:23:ed:
         11:12:6d:42:88:cd:c0:47:e7:dd:5c:95:fe:6c:51:9d:11:e5:
         c1:3d:b4:34:bc:93:9d:2d:b9:5c:5f:65:97:65:9b:b3:7a:d3:
         cf:a3:97:35:12:8f:f8:ff:22:0c:fe:a0:f4:a1:ba:e2:da:88:
         b5:11:9f:06:20:e8:97:e1:c7:8d:5e:61:42:9a:2e:cc:c2:23:
         c9:b6:33:b1:6e:4b:91:1e:21:0f:89:0e:c8:20:18:11:3e:db:
         55:ab:b8:b0:06:33:fb:c7:3d:dd:65:02:6d:be:1c:8d:07:a0:
         74:b3:f3:e4:52:50:31:90:24:43:a6:e2:77:b5:7f:39:f3:84:
         52:bf:db:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:15 2026 by rpki-client