Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File:                     qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier:          5TQT7X2MMOxaQuO4f1kfPsNMa3V7OroTjjhvUmyDtzw=
Subject key identifier:   7E:2D:E3:6E:9E:EC:19:F7:C4:48:58:F5:F3:2E:64:B3:96:2B:91:68
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       02C9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number:          02BC
Signing time:             Fri 12 Jun 2026 21:56:23 +0000
Manifest this update:     Fri 12 Jun 2026 21:56:23 +0000
Manifest next update:     Fri 19 Jun 2026 21:56:23 +0000
Files and hashes:         1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: aaHQaX022vyLU2OHhvxTKews5BIFwhMgwlx/wCS2hKg=)
                          2: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
                          3: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Jun 12 21:56:23 2026 GMT
            Not After : Jun 19 21:56:23 2026 GMT
        Subject: CN=6a2c8087-5afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:cd:f8:9e:af:55:4f:72:df:4d:59:fd:72:
                    bf:ed:cd:7a:0f:25:4c:e1:e8:fb:1d:a6:ec:d7:34:
                    07:d5:ec:4f:ee:d7:69:a3:b7:8d:16:51:14:ff:87:
                    96:f3:50:06:fa:83:26:0b:7b:1a:94:6b:b4:c6:58:
                    5f:6b:87:1a:58:96:d6:1f:23:db:be:ce:2f:04:f6:
                    be:b3:7e:b2:54:af:49:38:a2:f5:c6:85:c5:ca:7a:
                    2e:ed:fd:35:aa:2d:48:11:08:93:44:83:cf:3a:68:
                    b7:ec:b9:d5:ae:fd:37:12:57:b3:b3:9d:c9:56:a7:
                    e6:6b:d3:0d:a6:ca:e5:98:e0:03:46:5b:5f:d9:8f:
                    c5:be:9f:e5:69:17:b7:0b:00:86:77:c4:97:e0:6f:
                    35:e9:02:78:f5:6e:35:85:3e:60:db:9b:08:1b:b7:
                    4c:aa:35:6d:56:63:5a:b5:f3:2c:22:7c:87:71:d8:
                    fe:c8:38:90:03:31:e0:ea:2c:72:a6:d8:72:b8:1e:
                    58:29:6f:49:15:31:04:6d:e9:c3:de:47:98:65:6a:
                    83:ea:f2:be:ee:2d:f9:d3:59:7e:bd:93:0c:08:13:
                    c1:f6:25:6a:de:d4:08:97:7e:95:3e:ca:78:bc:d2:
                    77:89:19:b6:6a:21:6b:6f:d6:0e:72:bd:dd:cb:08:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2D:E3:6E:9E:EC:19:F7:C4:48:58:F5:F3:2E:64:B3:96:2B:91:68
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9c:99:2b:01:7e:b7:c7:a9:09:aa:84:ec:2a:7a:0d:89:01:
         c5:d0:bf:25:36:d0:b6:5c:87:81:b5:7c:3c:98:82:9d:7e:86:
         ed:dc:df:7a:d7:ea:f0:cd:cc:90:c3:cb:d6:36:ea:8f:0b:03:
         48:b7:a1:2c:ea:87:36:fe:08:fa:2d:8d:6c:f2:03:b2:bb:e4:
         82:5c:d2:1f:aa:86:a1:1a:33:1f:28:5e:70:c2:4b:6e:cd:b5:
         ae:1b:be:78:fe:e9:68:7a:b3:bd:f9:e2:c4:a9:5b:72:eb:3d:
         62:4a:39:f1:b2:c4:ec:f8:78:74:1d:1a:cd:f8:b9:93:dd:f4:
         a2:f8:2f:00:6f:b8:c6:43:46:1a:f4:d0:8d:ba:57:6d:39:46:
         1b:0e:0f:8c:47:d9:09:a7:20:66:4f:ca:5b:2b:81:e7:2a:d8:
         59:e2:92:2f:e1:97:e3:70:51:34:69:93:6d:48:07:58:c0:d5:
         de:f1:44:75:a1:00:11:68:3c:8e:45:5f:4a:c9:f3:de:cf:1e:
         e4:7f:f0:2c:99:0e:f5:5e:b3:7c:ec:92:46:75:4c:17:46:af:
         04:c5:64:9f:3e:ab:97:ce:e7:4c:5f:79:d6:fb:7f:dd:51:d5:
         3a:21:55:a7:44:bf:ca:ff:b5:29:93:95:98:0c:8e:3f:c4:fb:
         8c:2d:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:59:56 2026 by rpki-client