Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
File:                     Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json)
Hash identifier:          sFBFmlmAMfVtueB3RTj9KCBkSgq+eMUoqm0xCJu8HP8=
Subject key identifier:   F1:D8:11:C4:5D:36:BD:18:06:82:E3:43:3B:48:B1:D3:54:0E:7C:78
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Certificate issuer:       /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
Manifest number:          0165
Signing time:             Sat 13 Jun 2026 04:55:12 +0000
Manifest this update:     Sat 13 Jun 2026 04:55:12 +0000
Manifest next update:     Sat 20 Jun 2026 04:55:12 +0000
Files and hashes:         1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: ACjnEcLREBy0X8obLFng4aQuQdawqu7ekgHcgRVZ1LU=)
                          2: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: NoRAYMKDz7ruenjU4EI/k6TTzNlrpDAvnAEzcechXd0=)
                          3: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: POI2gtWNO02fmkeuPIBgEnMpIQB9HpbIZTb9ltFjGKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
        Validity
            Not Before: Jun 13 04:55:12 2026 GMT
            Not After : Jun 20 04:55:12 2026 GMT
        Subject: CN=6a2ce2b0-4da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:c3:66:ee:52:25:df:29:1b:7f:92:d1:ef:
                    70:92:91:d0:1e:6e:d4:3a:4e:01:66:78:f0:ce:33:
                    fa:5a:ad:0f:ac:72:79:12:fc:90:a6:cf:9e:ae:51:
                    8c:f5:ed:a0:a8:23:e9:1d:26:07:9f:fb:bf:d9:72:
                    0f:56:ae:c3:3e:c6:fa:e7:52:40:5a:8b:96:71:fd:
                    d4:30:1b:6b:cf:73:c2:0b:e7:8d:ac:7e:2d:21:57:
                    b7:41:e7:30:34:88:1c:c2:9b:76:d8:3b:09:4b:29:
                    ee:74:e9:5a:5e:51:a4:b5:51:d4:c3:3b:e5:fc:ee:
                    a1:51:ef:87:64:01:82:46:4e:c9:a0:5c:b5:c1:f1:
                    1a:bb:8c:b8:0a:f7:79:c5:5d:46:7e:65:cb:00:40:
                    94:16:b5:4b:98:6c:d7:36:30:82:bd:cc:89:d0:bf:
                    10:06:21:8d:ae:94:d7:33:20:b2:bc:f4:a2:54:b5:
                    e2:a4:e2:79:ed:e5:a5:bc:2b:89:e2:c8:f9:62:c2:
                    92:bb:4b:6a:27:c8:e7:88:a4:f4:09:7f:af:72:60:
                    de:1b:14:9a:8b:ea:1e:f0:35:0a:3d:9a:97:16:d3:
                    ea:93:3f:46:b4:11:9a:9d:e3:26:ea:6f:b3:6c:f8:
                    8e:ce:4e:2d:76:78:5a:58:af:32:af:83:78:df:43:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D8:11:C4:5D:36:BD:18:06:82:E3:43:3B:48:B1:D3:54:0E:7C:78
            X509v3 Authority Key Identifier:
                keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:c1:fa:bb:50:e2:69:08:43:80:97:b3:f3:65:90:83:ae:
         34:2a:84:e5:58:75:32:3a:a4:11:96:55:b8:b4:70:73:85:fa:
         9f:1b:34:5a:98:03:c1:ed:02:8c:0e:e5:42:d3:f4:7c:0b:51:
         e4:fc:a3:55:82:9a:72:61:e5:27:f7:76:26:36:aa:66:82:b9:
         26:93:0a:ad:39:7d:e4:cc:bf:8c:ca:e5:73:61:78:be:fc:80:
         90:c7:3b:c7:bf:a1:4a:58:d7:31:2d:e2:65:b9:de:cc:8b:65:
         7d:7c:ce:5a:fb:9b:d8:c9:fe:9b:e5:3a:0f:2d:ce:7e:57:90:
         bb:70:2d:66:b9:d9:89:36:71:eb:db:3d:96:a3:1b:a8:3e:8a:
         3c:cb:7d:6d:69:1b:e2:69:79:14:35:7e:af:80:93:38:ae:80:
         22:65:8b:f1:b9:13:88:87:9c:bb:6d:30:05:d6:a8:a2:c8:e1:
         ed:22:89:71:a3:39:6f:1c:02:01:ed:44:5b:0d:65:5a:1d:5d:
         13:c1:7d:18:50:53:32:ae:d5:12:1e:7d:a2:74:4e:13:20:b8:
         b9:22:d4:f4:73:ba:c9:6e:af:58:12:77:85:0e:c0:3b:ac:b0:
         19:16:a4:d1:6b:ae:53:5c:56:00:a0:a0:c1:ee:9d:ca:7d:4d:
         1f:b6:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:25:38 2026 by rpki-client