Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
File:                     fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json)
Hash identifier:          pbf+470yPntU8tntmyv8KOUKGqqLTcgY6H7/JsJqTLU=
Subject key identifier:   F4:9D:8D:8C:7B:95:CF:67:00:FA:42:B4:C8:F1:02:00:74:16:D1:17
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Certificate issuer:       /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial:       0C4A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
Manifest number:          0C40
Signing time:             Fri 12 Jun 2026 15:10:53 +0000
Manifest this update:     Fri 12 Jun 2026 15:10:53 +0000
Manifest next update:     Fri 19 Jun 2026 15:10:53 +0000
Files and hashes:         1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: gSu9XPf3KK490u/QclEoqnXYRsSeM6rWPKoAKpErGSk=)
                          2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /lTemBonHucyHdLH99iEZJS0pkpWT8EtwFhDtf78iXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3146 (0xc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
        Validity
            Not Before: Jun 12 15:10:53 2026 GMT
            Not After : Jun 19 15:10:53 2026 GMT
        Subject: CN=6a2c217d-f1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:aa:f9:10:74:56:ec:aa:ea:97:cb:b2:1b:cc:
                    36:50:9b:23:30:e1:ce:0a:5d:e3:63:d9:ac:d4:58:
                    49:e8:8c:b0:77:7b:3b:9f:bd:78:95:c8:d2:f1:f6:
                    6e:e3:97:ea:98:c4:1c:73:64:e0:78:8b:57:40:3d:
                    b3:27:eb:03:3d:e5:00:b4:bf:17:d9:50:ba:78:52:
                    44:5a:23:64:5b:3c:00:59:61:c5:67:ee:66:0b:b3:
                    b2:c1:97:e8:96:16:6a:5c:b1:f7:76:c1:6c:93:7f:
                    4b:e6:eb:42:63:85:5d:8f:cd:8a:3d:02:ce:e0:73:
                    b6:41:5c:95:07:11:79:e7:7f:89:0b:06:46:4a:be:
                    b0:05:2e:22:16:d8:72:7a:73:55:07:e7:a1:18:45:
                    f0:0b:67:c1:7f:74:14:a1:e0:c2:e5:a2:17:47:e9:
                    1f:2a:01:03:02:63:52:73:4d:72:6e:ea:37:7b:0f:
                    22:fd:77:f6:fd:87:9d:20:a5:36:78:c5:e2:1f:b0:
                    6d:46:6a:ca:d8:6d:21:d2:4a:f2:99:69:b5:ce:a7:
                    91:5c:2a:33:b7:0d:5b:51:38:a9:3a:d7:ab:84:f5:
                    76:c1:d2:91:30:0a:c6:a4:93:6d:6f:79:76:0a:6b:
                    bf:11:7f:3f:ab:68:37:8f:dc:89:a2:66:fc:98:9f:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9D:8D:8C:7B:95:CF:67:00:FA:42:B4:C8:F1:02:00:74:16:D1:17
            X509v3 Authority Key Identifier:
                keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d9:ea:96:87:d0:db:b7:a4:39:20:81:1a:c4:a0:c5:3d:e9:
         4a:82:b9:5f:14:eb:91:b3:fe:4e:7f:41:2b:33:48:e9:9b:16:
         c3:62:26:02:e8:34:23:61:81:31:e8:90:d0:74:08:5b:f3:c1:
         2b:fa:ee:d7:0b:18:e5:4c:35:ca:4d:b7:53:81:48:55:47:f2:
         fa:dc:f7:69:97:21:ac:d9:1b:d6:91:6c:28:a8:a2:5d:d3:a2:
         d2:26:a5:4d:d6:6f:32:3a:e7:f3:42:9e:20:b7:38:c8:45:a7:
         7f:0e:97:20:15:50:fe:96:15:8a:f7:01:ce:9a:61:72:32:c3:
         a7:5f:76:c7:6c:4f:ea:7e:5e:85:54:ee:3b:be:1d:bc:0c:7b:
         11:2e:98:dc:4e:e7:b5:81:72:4e:c9:f9:e6:a8:0d:91:3c:16:
         53:f5:be:2a:12:03:47:65:8e:c5:7b:15:ad:17:e6:f6:4b:73:
         5e:3b:e5:25:0d:6a:17:f6:d7:f8:ec:df:98:98:09:92:a1:e1:
         89:f5:d7:50:b3:54:33:9a:b9:72:ca:e4:d6:89:26:21:12:27:
         ed:59:f5:9e:0d:a8:2f:d6:a5:ea:b0:76:0b:47:9f:1b:92:5f:
         77:c5:cb:f2:ba:a0:49:95:23:00:e0:37:a7:db:ae:56:99:3d:
         58:bf:f8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:40 2026 by rpki-client