Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
File:                     QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json)
Hash identifier:          msb5g1OCCFrynoSTatv/EqFT57aPcesO0xtbAE7iYdA=
Subject key identifier:   BC:AE:41:A6:7A:7D:4B:E6:F2:BE:65:D5:2B:70:EC:A6:70:A5:32:11
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Certificate issuer:       /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
Manifest number:          0222
Signing time:             Sat 13 Jun 2026 02:47:11 +0000
Manifest this update:     Sat 13 Jun 2026 02:47:11 +0000
Manifest next update:     Sat 20 Jun 2026 02:47:11 +0000
Files and hashes:         1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: 2kDcsJj3RXf4/v33CwJtR7bEUlL0YY2iWx3OiQrzwbw=)
                          2: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: jsK4zEJyPdlVY78CXSdqb2JNhQ5rN5uWqnaH2jf5FtQ=)
                          3: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: FQVJmad1aRV/QbV4h3s9dvvJ6zDDRW7zBNhPPgrf9kM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
                          rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
        Validity
            Not Before: Jun 13 02:47:11 2026 GMT
            Not After : Jun 20 02:47:11 2026 GMT
        Subject: CN=6a2cc4af-3255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:6a:c2:fa:76:1b:f9:41:90:ed:50:43:00:
                    4e:cb:51:16:16:7c:52:53:d5:f0:92:80:83:1f:16:
                    ce:86:7b:f0:bf:da:dd:f7:52:77:b3:aa:16:44:0f:
                    cb:9a:23:1e:ed:72:0b:96:46:50:3d:ef:14:c0:67:
                    97:5e:41:01:11:d9:3b:9f:8f:99:35:02:cb:99:28:
                    99:6e:bf:66:15:b5:6d:d8:f7:c9:79:73:ba:b2:51:
                    75:69:42:b6:f7:75:c7:34:1a:87:e9:5f:bd:88:42:
                    64:c2:61:fa:d5:f0:40:71:46:51:e4:48:1e:45:5f:
                    2e:3c:ba:a7:de:cf:80:7d:c0:eb:d2:35:fd:d2:6b:
                    1b:05:db:23:3e:bd:6c:d5:fd:6f:a6:05:e9:50:93:
                    e2:0b:01:52:29:76:17:de:1a:07:51:8a:dd:f9:a9:
                    ef:a3:ca:93:cd:1d:35:90:4e:8f:2f:72:69:fb:80:
                    1b:55:88:8c:cb:92:07:fe:92:2f:7b:7d:54:66:0c:
                    df:7b:d7:c8:1d:3a:20:f5:fa:bc:6a:54:db:c6:fb:
                    03:c1:84:35:41:aa:52:71:b4:34:cf:db:7d:a0:d6:
                    61:d9:ef:4e:27:fc:80:5f:f3:e3:c2:aa:c8:ff:58:
                    9f:c2:0e:5a:f8:03:7a:45:ad:cc:bf:b1:e1:4d:61:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AE:41:A6:7A:7D:4B:E6:F2:BE:65:D5:2B:70:EC:A6:70:A5:32:11
            X509v3 Authority Key Identifier:
                keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:2e:1e:c1:15:d7:08:e9:2d:c6:c3:e2:b7:5f:30:ff:c6:f4:
         3f:77:97:20:88:51:30:5a:9a:56:c3:b6:ab:c7:8f:ba:0e:8c:
         46:58:b8:43:21:c4:cb:97:b9:1b:14:57:9e:80:19:54:36:de:
         b2:38:f6:f9:66:82:8e:79:af:43:b6:1f:a2:f3:35:bb:58:74:
         ad:38:d9:9c:92:c2:b4:40:a8:5b:6a:c6:a3:46:32:a7:40:45:
         53:76:87:ea:f2:50:77:31:31:fb:0b:31:91:c4:6c:b0:82:62:
         b3:21:fb:dd:a5:17:40:97:d0:fe:50:d6:d4:8a:40:cb:23:d6:
         1a:35:3f:ba:cf:5e:a4:47:9e:20:59:a6:2a:53:06:62:3f:74:
         fc:8a:81:0d:f1:84:80:80:7e:d8:ce:db:04:ea:c2:f3:e8:03:
         c5:27:2e:60:d9:74:ee:fd:5f:cf:ca:d0:c5:24:9f:7c:7d:05:
         a6:ad:79:c0:76:27:74:1e:48:c3:3f:87:bc:83:02:88:c5:6d:
         7d:3a:bb:da:0a:de:89:cd:ad:e1:16:a5:3a:b8:f9:95:5d:79:
         6f:bb:7b:1c:3a:23:83:74:9b:07:c3:c0:37:b5:f4:1e:d6:46:
         09:12:56:cd:c2:13:c9:23:16:28:d6:50:2a:cf:0d:29:96:d4:
         41:56:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:37 2026 by rpki-client