Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
File:                     CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json)
Hash identifier:          Mt8T7mcwiDhNCiGJO4WhU8aqDTi4RvBMnfOQFkB/S4M=
Subject key identifier:   9E:A4:7A:C7:69:59:B2:D4:10:61:52:4A:49:DB:8F:05:80:B5:FD:4B
Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
Certificate issuer:       /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
Manifest number:          F8
Signing time:             Sat 13 Jun 2026 06:27:51 +0000
Manifest this update:     Sat 13 Jun 2026 06:27:51 +0000
Manifest next update:     Sat 20 Jun 2026 06:27:51 +0000
Files and hashes:         1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: 3VYfx6Y2AieUxCFF7OgpNge608LrkfuYEI7haNePCI0=)
                          2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: ePNHL3+zNYvUmgPdDz3MoZljDtNnzgtR4bbu7ejcYBI=)
                          3: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: 8wOHUBPckpRaVf7NtYZ6kVI/FmX3CLqzSeCyG0ITFEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
                          rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
        Validity
            Not Before: Jun 13 06:27:51 2026 GMT
            Not After : Jun 20 06:27:51 2026 GMT
        Subject: CN=6a2cf867-eb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:81:1c:b1:3a:6b:25:00:7f:c3:26:f0:2c:35:
                    e6:7e:ff:22:84:2d:87:16:8a:93:59:c1:63:40:77:
                    9a:d4:89:23:e0:d2:99:03:2d:ae:35:94:1d:8d:2b:
                    92:c4:76:20:a2:b4:5e:69:4a:7c:86:4b:87:44:f1:
                    9d:b4:20:7a:39:7a:89:a4:ce:b1:92:13:21:29:49:
                    7e:36:0b:4c:ef:2f:29:02:a8:86:e8:cc:69:e3:3f:
                    65:9b:3a:0f:76:36:5b:a9:88:4b:67:f4:84:85:0c:
                    a6:b1:a6:a6:c4:e4:0d:0d:e6:bc:aa:9e:82:8b:8b:
                    2d:f5:fc:b7:79:39:86:ef:0a:a1:93:6a:ba:fb:03:
                    de:13:00:28:97:52:9d:cc:73:01:58:30:29:1b:a4:
                    7c:ae:be:46:23:46:ac:c7:c3:e0:50:1d:9d:1b:ae:
                    ce:05:97:48:6e:c4:bf:2d:4f:b5:86:72:d2:ee:25:
                    e6:ba:1f:30:cc:29:d4:9f:e3:9d:b0:1b:ec:31:8a:
                    ec:16:99:1a:8e:a2:d5:e2:68:f3:44:65:f2:76:42:
                    50:b1:fd:e6:3a:c3:46:ee:88:52:2c:b2:f9:2a:8a:
                    b0:ec:8e:bf:3e:0f:16:c8:7e:11:2f:f4:f8:b3:a6:
                    61:58:50:c4:3d:6c:a2:7a:0f:79:8e:14:42:e7:b7:
                    14:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A4:7A:C7:69:59:B2:D4:10:61:52:4A:49:DB:8F:05:80:B5:FD:4B
            X509v3 Authority Key Identifier:
                keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:2f:80:a3:4a:ef:ca:77:09:b5:a8:92:77:ca:70:15:39:10:
         63:a6:bd:4f:61:b5:5f:b5:1f:60:cb:01:1b:aa:6c:5f:ea:9d:
         7e:05:6e:77:35:4c:af:dc:78:70:af:34:f9:e7:9d:57:8e:74:
         4c:c8:8e:95:f9:e5:ce:67:d1:1d:65:cb:52:27:58:75:a6:13:
         45:12:c2:b0:df:6a:cd:43:45:0f:9a:b1:df:3b:73:74:ce:42:
         bf:04:e0:44:b3:f1:b7:12:a2:86:d2:d5:8f:dc:c7:cd:0a:a3:
         39:2b:3e:b1:be:05:9e:ec:ac:70:ee:8f:d2:21:f6:ff:1b:31:
         7a:f4:ab:0a:de:12:84:b5:4a:9b:36:6e:73:42:74:7d:c3:3e:
         c6:d2:0f:75:c5:cb:47:4e:01:21:17:77:ef:6a:ac:d2:bd:5d:
         16:f5:9e:60:fd:64:5f:c1:3b:e4:8e:26:cf:b6:73:44:9d:96:
         df:c0:e3:c8:4c:dd:a0:bc:a4:93:ad:67:54:49:77:68:9a:71:
         63:41:d3:e6:db:01:a7:27:7d:ce:c4:74:88:96:4e:78:d4:93:
         b1:20:a9:8e:25:92:c1:2d:40:b1:d6:13:b4:96:71:38:ba:b8:
         4a:76:d0:79:b4:6e:4f:b1:dc:25:2e:65:9f:7a:b6:10:ba:43:
         94:6d:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:30 2026 by rpki-client