Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
File:                     qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json)
Hash identifier:          XREIIXK5PBrMS8a4w3Pp51SQyCujp+cAHfkurhMcjCo=
Subject key identifier:   93:5B:C5:9E:B2:1B:C3:06:F7:D2:BB:53:6E:79:E0:7D:82:E0:72:E2
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Certificate issuer:       /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial:       0EB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
Manifest number:          0E8D
Signing time:             Tue 28 Jul 2026 17:52:20 +0000
Manifest this update:     Tue 28 Jul 2026 17:52:19 +0000
Manifest next update:     Tue 04 Aug 2026 17:52:19 +0000
Files and hashes:         1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: C39uUDera7HAsAOVkJIWISfmfWDlzLfSmfvzEaNXquU=)
                          2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: MrF9jFzo1gQmp52DvTXmMON/OH1U7O3zoCb/eA1OYLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
                          rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3761 (0xeb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
        Validity
            Not Before: Jul 28 17:52:19 2026 GMT
            Not After : Aug  4 17:52:19 2026 GMT
        Subject: CN=6a68ec53-664a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:19:47:7d:10:b5:bc:06:20:0f:f5:52:cf:
                    7a:73:73:03:19:2b:c8:e4:25:3a:4f:7d:09:72:64:
                    49:b0:a1:1c:40:a0:ec:10:20:52:af:cd:ee:1e:85:
                    82:e3:f6:f4:13:b3:96:20:74:b3:d3:2e:fa:3f:ed:
                    95:84:bf:d9:a5:ef:ed:6d:3c:8f:7f:05:ff:25:f3:
                    59:53:db:75:a9:18:98:79:61:97:fc:b8:c3:df:17:
                    1e:67:4b:c8:cb:0f:7f:bb:ee:c6:a8:08:a5:02:06:
                    f5:5f:08:24:b9:d9:6b:4c:40:37:9a:bb:00:d0:aa:
                    c6:47:0a:8c:32:17:84:6f:11:87:9a:c6:e9:7f:9b:
                    af:18:7e:08:66:92:97:73:43:1b:dc:bf:ea:22:26:
                    9c:21:be:f1:b7:d9:17:ee:89:e1:d1:51:50:d8:5f:
                    da:d0:21:41:7b:d8:8f:cd:57:ad:0d:b9:38:75:d0:
                    fa:70:07:7e:c4:bd:7d:ff:55:de:2f:88:1e:cd:65:
                    64:2c:d2:e6:2d:46:be:88:7c:3c:68:18:df:b3:1d:
                    25:39:47:d6:60:83:76:65:08:dc:30:cf:1f:dd:dc:
                    f3:88:74:9f:44:bb:fb:dc:30:ad:1a:96:00:c0:68:
                    69:30:60:25:81:c1:5c:51:44:50:81:0e:03:31:71:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5B:C5:9E:B2:1B:C3:06:F7:D2:BB:53:6E:79:E0:7D:82:E0:72:E2
            X509v3 Authority Key Identifier:
                keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:d2:db:e3:43:7d:40:e5:b7:62:08:fb:38:eb:83:c8:a7:
         ea:46:6e:01:b6:72:2e:79:a3:05:71:09:10:79:eb:e0:dd:2f:
         63:93:85:53:6b:5d:b3:b3:52:f0:77:df:b7:c9:93:08:39:d8:
         ee:71:93:4e:93:f4:cd:03:ce:98:42:ff:64:d3:96:fa:e6:a8:
         40:c4:a1:ea:ed:c4:0c:e7:59:fa:17:13:14:7f:27:08:88:aa:
         81:20:37:80:3b:4c:ba:df:f4:11:07:82:b3:93:ac:10:ba:53:
         b8:69:f4:78:f0:6e:0d:f9:db:f0:9d:51:2f:75:ff:9e:0b:76:
         fe:6b:93:0a:77:b6:82:44:13:2e:a8:3d:8a:81:c7:e7:2a:c4:
         0c:d3:5d:ee:20:fc:50:ed:70:98:23:19:b9:8f:5c:b9:bd:5a:
         dd:cf:50:ee:18:dd:6e:ab:bb:f6:b2:46:e1:d0:bb:0a:96:a9:
         00:51:61:36:ae:c6:81:e5:a9:55:0d:3d:cf:1b:bc:1c:5b:5e:
         7a:57:aa:6c:ba:c1:68:1b:49:b6:e9:71:74:fb:bc:64:01:40:
         70:0c:bd:42:ab:e8:47:af:cc:88:3b:b7:48:cc:c1:ff:10:57:
         64:a3:ca:51:ba:bc:23:62:49:97:0c:f7:cb:43:90:12:a7:e2:
         6e:ba:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:12 2026 by rpki-client