Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
File:                     DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json)
Hash identifier:          zlVCK3fP5g+EU5C9mWOgApmVKK0ycCK0zRgd1kCXm90=
Subject key identifier:   53:81:63:21:33:97:34:A0:CF:32:13:AA:BE:B8:BA:97:8A:1C:E4:CF
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Certificate issuer:       /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
Manifest number:          88
Signing time:             Sat 13 Jun 2026 07:37:28 +0000
Manifest this update:     Sat 13 Jun 2026 07:37:28 +0000
Manifest next update:     Sat 20 Jun 2026 07:37:28 +0000
Files and hashes:         1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: 5hrStA/0X6ua9EBEepZ3vUILiDKWXNL1uuWXFUzp4As=)
                          2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: tzLz5H3WHIRmkrmCQ6z99a4YcvXFYzKj7iQvz5s9xtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
        Validity
            Not Before: Jun 13 07:37:28 2026 GMT
            Not After : Jun 20 07:37:28 2026 GMT
        Subject: CN=6a2d08b8-4b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:f1:47:b1:8e:1a:f7:91:2b:b4:6b:83:fc:
                    97:fb:76:a6:75:f7:9e:39:a6:ae:69:4d:0c:83:0d:
                    d4:e4:d9:c3:2a:68:24:ae:5b:13:2b:2b:cd:4b:f4:
                    a9:41:c9:ec:10:e8:15:33:a6:af:75:a9:7d:fa:eb:
                    42:45:65:8c:58:fa:5c:c0:f7:89:0e:aa:49:7e:77:
                    77:b2:df:1f:8c:d9:b2:83:48:d2:13:22:25:93:59:
                    a1:31:a2:e4:5b:15:60:89:9d:45:d5:4a:2f:76:a5:
                    93:a3:f8:65:59:ff:b2:b4:98:84:d2:7d:da:6c:8c:
                    17:09:3f:56:6d:72:56:fe:c6:69:6f:52:d1:a8:60:
                    09:fe:ff:ab:4e:de:72:a1:ad:27:49:63:89:a6:b7:
                    8a:ea:78:b4:f6:1d:bd:da:78:d4:3e:aa:81:1c:68:
                    6f:9b:09:00:2b:6b:69:05:d7:ea:67:26:14:6a:e8:
                    11:81:43:00:55:45:10:5f:d8:7a:ca:36:d9:97:41:
                    be:24:d7:80:56:dd:ae:32:2f:b4:05:17:73:e0:ad:
                    08:5d:f8:2a:14:b4:1b:2d:a0:3c:4b:c8:86:04:75:
                    b9:e1:a7:11:76:8d:0f:3c:90:80:84:e4:97:96:f6:
                    b3:67:25:d7:15:14:72:fa:b1:85:91:2f:41:66:bd:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:81:63:21:33:97:34:A0:CF:32:13:AA:BE:B8:BA:97:8A:1C:E4:CF
            X509v3 Authority Key Identifier:
                keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:34:cc:1a:c8:5e:9c:89:ec:64:f4:13:3d:c8:39:07:a3:f1:
         ec:c6:8c:8e:45:e6:a0:55:50:28:73:43:23:5d:eb:d9:4b:e8:
         dd:db:08:43:e3:63:84:9e:e6:12:26:1a:54:a0:58:0b:77:ea:
         fe:8d:32:03:12:50:0b:6e:fe:d6:70:6d:31:54:f1:c3:dc:da:
         35:14:5d:d8:dd:d8:ac:df:28:7b:a3:46:4d:15:68:70:34:9b:
         22:c7:61:bd:ca:c8:22:e0:ca:0e:4c:14:24:6e:50:84:c2:3f:
         eb:d3:84:ea:a1:e0:f0:32:df:31:d7:73:6f:1b:9b:4f:ec:0c:
         fa:43:e3:2b:b8:87:0a:7e:20:73:10:fd:5f:28:8f:a2:4f:30:
         aa:73:2f:e7:18:39:ab:93:51:8d:1c:23:3c:4f:6b:ae:51:dc:
         17:86:e2:af:a0:49:0b:d5:0f:31:1c:3f:28:29:09:88:6e:9f:
         0a:05:a6:94:ef:f6:81:59:8e:6f:56:78:c1:f3:fc:a6:58:9c:
         72:98:c4:42:6c:3f:70:22:d0:f3:b7:02:92:c3:e3:38:2e:75:
         26:fd:45:0a:cc:0c:f8:07:26:fa:2e:c4:d4:f7:4e:2e:69:0f:
         fd:b1:bc:b5:f4:17:35:14:7f:16:fa:d8:8e:44:60:8c:f8:a7:
         83:55:14:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:09:52 2026 by rpki-client