Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
File:                     QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json)
Hash identifier:          fGMvUT3Mt+jW4xEvGCB8Ksos8IwHTfnHrqf66AooxYM=
Subject key identifier:   91:6E:F7:26:8F:3C:62:68:50:63:5D:5E:15:57:C2:4C:71:19:55:86
Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
Certificate issuer:       /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
Manifest number:          35
Signing time:             Sat 13 Jun 2026 08:39:38 +0000
Manifest this update:     Sat 13 Jun 2026 08:39:37 +0000
Manifest next update:     Sat 20 Jun 2026 08:39:37 +0000
Files and hashes:         1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: zqr3qGUQ0X4tZxAWPcvE+xIZQ0eMxFq8oqsd03qGi6o=)
                          2: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=)
                          3: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl
                          rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
        Validity
            Not Before: Jun 13 08:39:37 2026 GMT
            Not After : Jun 20 08:39:37 2026 GMT
        Subject: CN=6a2d174a-5e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:55:e6:89:36:df:a5:97:06:89:7d:c7:90:
                    27:9b:e0:c2:92:2d:a9:a7:54:61:48:67:2f:a3:d8:
                    a5:b4:a1:3a:62:6a:2a:ab:71:da:2d:01:6b:7e:2b:
                    83:4f:2a:7f:7e:c2:cc:2f:71:d9:fd:5a:13:5f:71:
                    0e:06:db:87:cc:6d:16:ab:2e:fb:0d:a8:8f:ab:a5:
                    a3:df:62:ba:06:ec:a2:9d:c7:3a:9e:39:69:3f:9a:
                    c9:f8:72:d6:40:05:16:ab:88:cc:b0:3a:47:89:51:
                    52:00:98:8e:66:c9:f8:99:77:50:44:b6:2b:39:cc:
                    21:05:ad:de:97:63:63:0c:85:18:b8:39:41:6e:dc:
                    02:75:11:80:61:b4:e3:8a:57:6f:94:0b:9e:78:0b:
                    17:90:4d:a8:16:bd:5e:7a:b5:99:f6:ea:8b:cc:58:
                    f3:8d:7b:3f:79:81:c4:f1:21:86:7c:bf:bf:99:3e:
                    b3:6b:22:e5:a6:bd:81:2a:ee:e8:f0:bf:cf:35:2b:
                    64:ec:0d:34:4e:3d:10:47:a7:5c:2a:52:56:21:26:
                    c7:12:7a:20:71:28:7f:83:8b:41:a4:98:fd:79:e2:
                    c7:27:68:68:9d:62:85:7e:b2:44:cd:ca:cd:31:8d:
                    5b:93:2c:9b:b7:b3:a8:c6:f9:3d:06:58:97:0b:1e:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6E:F7:26:8F:3C:62:68:50:63:5D:5E:15:57:C2:4C:71:19:55:86
            X509v3 Authority Key Identifier:
                keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:c3:40:f1:02:4b:85:5a:db:47:54:31:78:fa:9f:4f:36:
         14:01:dd:78:d0:58:3b:a4:85:c5:e0:24:da:dc:0e:dc:4f:2d:
         09:7b:9f:d5:a8:4d:de:a5:55:39:ec:e4:78:00:d0:16:df:4b:
         d9:ea:db:4c:35:eb:36:c6:43:12:21:5f:29:99:05:61:71:df:
         64:72:20:26:98:57:4d:0b:80:74:b3:f0:da:71:55:8e:6f:13:
         74:b6:f9:d8:9b:3a:20:af:8a:d7:57:f8:c5:31:fc:35:1a:ac:
         23:21:9d:c6:f8:80:03:93:eb:b4:8c:63:04:18:92:f4:32:04:
         6d:f5:d9:10:d1:10:e5:2f:7a:c1:ee:6d:64:63:c5:db:b7:af:
         8b:4b:97:01:29:c9:77:e3:7c:c5:27:70:45:13:7f:c8:3a:0e:
         9d:6f:80:26:1a:a6:75:e0:06:0f:30:1c:0f:22:3f:42:5a:e4:
         5d:8b:1e:92:f1:df:b8:7e:98:77:24:d8:cf:94:06:cd:0b:5a:
         0a:28:1f:4e:0f:a6:e0:34:65:a5:01:8b:7d:03:9f:d7:db:94:
         52:d4:1f:ee:9f:1c:ad:9c:1a:4f:03:aa:9c:3b:26:da:15:02:
         bf:64:6a:38:ab:b7:b7:4e:40:86:cf:8d:62:81:d1:64:23:3a:
         2d:1b:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:46:24 2026 by rpki-client