Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
File:                     qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json)
Hash identifier:          PgIUg8yv3RL31wvH3x3IB7ibT+FBvhhIIIuJtiJADbw=
Subject key identifier:   29:B6:CD:EA:25:DA:CB:F1:1E:DD:2F:F1:21:A4:56:91:DF:50:64:5D
Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12
Certificate issuer:       /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
Certificate serial:       0D62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
Manifest number:          0D5E
Signing time:             Fri 12 Jun 2026 17:59:42 +0000
Manifest this update:     Fri 12 Jun 2026 17:59:42 +0000
Manifest next update:     Fri 19 Jun 2026 17:59:42 +0000
Files and hashes:         1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: +EEFOiNZDeSN7QvvPMbH4r5u91rN5PgPaCZGBVZ9sgI=)
                          2: 95693F483EFC11F19C051D00C6833773.roa (hash: M5SN5EGxc5NyHEJDLm2TcpSC8S8Y0BYtXOyoPOm7xl8=)
                          3: CEFC9F4C3EFD11F18502D769C6833773.roa (hash: FVKpYfCHPdPaELMYVb2ZrEZUKTclZWOqDrHvXakeCfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl
                          rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3426 (0xd62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
        Validity
            Not Before: Jun 12 17:59:42 2026 GMT
            Not After : Jun 19 17:59:42 2026 GMT
        Subject: CN=6a2c490e-fc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:bd:7d:92:5c:5c:f7:65:d0:65:77:a0:89:
                    88:07:49:39:3b:c4:c4:cc:83:b9:50:17:c0:6e:b3:
                    60:0f:11:77:c6:92:01:d4:a0:aa:4a:b0:f4:c0:b2:
                    96:44:09:e3:7c:1d:ac:0e:a9:15:e0:05:42:e1:14:
                    80:ab:cd:a8:43:9e:a0:7c:e5:24:d2:b6:1a:eb:18:
                    7e:2f:78:38:32:df:a7:9c:a3:54:8a:ba:44:3b:c5:
                    23:82:eb:14:7d:00:9c:d2:52:a0:eb:32:0a:cb:d9:
                    d7:7f:71:75:9c:df:df:7b:41:c5:45:4f:9d:a2:9c:
                    4e:b7:f8:94:39:69:cb:fc:5e:3a:2b:3d:86:ba:b7:
                    24:f6:66:96:a4:4b:86:66:12:f8:11:65:0b:4c:95:
                    23:c1:eb:b6:af:d1:c0:d6:c5:ac:a6:68:85:d9:1e:
                    e4:c0:09:f4:9b:d7:4a:77:23:29:f9:44:2a:ac:83:
                    3b:01:86:61:b3:a5:1a:a1:4d:84:bc:c4:e0:7d:ba:
                    9d:9b:ad:53:12:f5:7b:23:de:74:fb:b2:d9:d7:95:
                    89:d5:4a:55:1e:16:27:ad:13:f5:fb:b0:5b:89:92:
                    c0:64:d8:14:0b:f4:88:eb:d6:6d:aa:dd:ef:d2:9f:
                    11:1f:d6:df:65:f7:ef:74:1d:af:e0:8b:d8:99:89:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B6:CD:EA:25:DA:CB:F1:1E:DD:2F:F1:21:A4:56:91:DF:50:64:5D
            X509v3 Authority Key Identifier:
                keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:07:f9:f4:d2:86:00:5b:f9:1a:9d:61:d3:63:9a:49:48:19:
         0a:84:39:07:28:f4:07:f6:d6:21:30:1c:1c:bd:92:ff:8a:59:
         8e:75:de:81:07:11:7c:7b:3b:91:f5:59:1a:2f:82:f6:96:e4:
         06:ed:08:e3:4e:97:a4:e0:b6:96:65:0a:cf:80:3c:3b:f6:59:
         f2:d9:40:fa:04:04:9e:8c:1f:1a:d2:6b:e2:df:d7:52:66:e3:
         af:bd:79:1e:f3:6b:64:bb:8e:7f:0b:7b:18:06:ce:31:44:9e:
         07:6d:eb:9b:fa:4d:bc:95:92:30:8d:e1:23:cf:3e:45:af:f6:
         b4:85:d6:94:06:b6:41:2b:cc:c9:2e:8b:72:55:74:67:c2:b1:
         a6:47:62:7e:eb:b8:0e:e5:d7:fa:60:cc:f7:df:3b:dc:a6:8a:
         7f:b3:6a:5b:c6:6d:2e:6a:e7:52:fe:72:98:86:d5:eb:6c:a4:
         2a:a2:c5:99:ad:9c:9e:f4:c5:69:3e:81:f1:1f:ec:c3:89:b1:
         c9:39:fa:76:b4:49:f3:fe:63:20:d2:d2:2d:90:3c:7d:58:97:
         0a:f6:d9:00:f0:ca:ff:16:38:41:ce:f8:30:7f:75:9b:55:f8:
         88:03:02:35:58:d5:4e:26:f1:d9:b1:4c:a6:16:41:fc:ca:90:
         0f:36:a5:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy
ODcyNEU0MTIwHhcNMjYwNjEyMTc1OTQyWhcNMjYwNjE5MTc1OTQyWjAYMRYwFAYD
VQQDEw02YTJjNDkwZS1mYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTK9fZJcXPdl0GV3oImIB0k5O8TEzIO5UBfAbrNgDxF3xpIB1KCqSrD0wLKW
RAnjfB2sDqkV4AVC4RSAq82oQ56gfOUk0rYa6xh+L3g4Mt+nnKNUirpEO8UjgusU
fQCc0lKg6zIKy9nXf3F1nN/fe0HFRU+dopxOt/iUOWnL/F46Kz2Gurck9maWpEuG
ZhL4EWULTJUjweu2r9HA1sWspmiF2R7kwAn0m9dKdyMp+UQqrIM7AYZhs6UaoU2E
vMTgfbqdm61TEvV7I950+7LZ15WJ1UpVHhYnrRP1+7BbiZLAZNgUC/SI69Ztqt3v
0p8RH9bfZffvdB2v4IvYmYnaswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCm2zeol
2svxHt0v8SGkVpHfUGRdMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1
NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1
QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2
VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWwf59NKGAFv5Gp1h02OaSUgZCoQ5Byj0B/bWITAcHL2S/4pZjnXegQcRfHs7
kfVZGi+C9pbkBu0I406XpOC2lmUKz4A8O/ZZ8tlA+gQEnowfGtJr4t/XUmbjr715
HvNrZLuOfwt7GAbOMUSeB23rm/pNvJWSMI3hI88+Ra/2tIXWlAa2QSvMyS6LclV0
Z8Kxpkdifuu4DuXX+mDM99873KaKf7NqW8ZtLmrnUv5ymIbV62ykKqLFma2cnvTF
aT6B8R/sw4mxyTn6drRJ8/5jINLSLZA8fViXCvbZAPDK/xY4Qc74MH91m1X4iAMC
NVjVTibx2bFMphZB/MqQDzaleg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:01:08 2026 by rpki-client