Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
File:                     QVaOgAk79NEF6TJNX4ISRTGsQT8.mft (raw, json)
Hash identifier:          Sq9EdOE4vn6QyuP6h+NwClmd4QbVSrEpvn6+4vVjsm4=
Subject key identifier:   11:2F:C6:96:DB:DE:14:33:34:74:D0:44:16:E1:76:B5:94:B7:BD:54
Authority key identifier: 41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F
Certificate issuer:       /CN=A91B6A04/serialNumber=41568E80093BF4D105E9324D5F82124531AC413F
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
Manifest number:          6B
Signing time:             Sat 13 Jun 2026 08:01:36 +0000
Manifest this update:     Sat 13 Jun 2026 08:01:35 +0000
Manifest next update:     Sat 20 Jun 2026 08:01:35 +0000
Files and hashes:         1: QVaOgAk79NEF6TJNX4ISRTGsQT8.crl (hash: k73Q6G6p/xAuh+SWvittpPNjOBZkuFlYDhTgZrdYw4o=)
                          2: CC22B2AA26A411F18AD5785BC0833773.roa (hash: ONSQA97L2ArdKzlTZtF0u83bufLlLinNTHkHJvb1UuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl
                          rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6A04, serialNumber=41568E80093BF4D105E9324D5F82124531AC413F
        Validity
            Not Before: Jun 13 08:01:35 2026 GMT
            Not After : Jun 20 08:01:35 2026 GMT
        Subject: CN=6a2d0e5f-3c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:54:06:1d:06:00:6c:70:cf:a4:d7:26:73:
                    dd:9c:bd:03:22:bf:08:95:7f:d0:d7:a0:3d:1a:6d:
                    1a:da:12:ca:4e:8e:dd:76:f0:e3:3d:54:eb:4d:47:
                    dd:fc:8d:4e:d2:7b:52:1e:4d:7b:17:76:13:4d:f0:
                    ff:e3:e6:02:d5:fe:97:8e:47:24:30:eb:f3:bf:ed:
                    e2:48:47:76:db:53:f6:50:65:79:0c:29:7d:be:09:
                    a3:0c:c7:de:97:12:46:58:28:10:06:c6:ce:01:02:
                    ae:01:0a:ee:b6:02:63:c4:98:ec:fd:ec:74:11:48:
                    52:d2:23:dc:5c:a4:24:c3:19:44:74:97:3a:58:a6:
                    90:0c:1e:1d:67:98:67:b1:99:ec:7d:65:f8:0e:4f:
                    07:99:70:07:c6:2b:eb:b5:7f:55:14:db:aa:28:2c:
                    91:c8:dd:ee:ee:26:67:ad:02:29:71:f1:16:8c:10:
                    c4:57:ea:7a:90:fa:8e:1b:78:d3:e9:a2:f6:5f:16:
                    cd:e4:8f:02:06:82:31:e8:cd:ff:c2:08:3a:8b:89:
                    48:19:1d:f3:4e:fe:21:4c:46:ed:47:6a:70:90:cf:
                    94:2b:7e:90:80:1b:3e:90:8b:0d:d4:83:31:68:e3:
                    f0:36:3b:f5:f3:0d:ef:9a:d8:1d:d8:20:f0:fb:e0:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2F:C6:96:DB:DE:14:33:34:74:D0:44:16:E1:76:B5:94:B7:BD:54
            X509v3 Authority Key Identifier:
                keyid:41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:94:1d:19:08:8d:81:93:fa:0a:c2:34:80:0a:80:55:72:73:
         be:98:f3:37:11:06:89:0c:90:5f:71:84:aa:c9:42:c3:6c:20:
         5e:ce:dc:23:25:e2:8d:3f:13:5c:b0:81:d6:c2:9c:f2:b6:a9:
         50:95:e4:3b:d3:b1:1c:6f:a4:d8:be:7e:c7:6a:83:88:89:08:
         dc:36:c9:4a:d1:ba:13:d6:e8:c8:dc:77:fd:3f:86:26:fa:db:
         1b:cf:c1:31:38:ff:bd:ba:f7:73:ce:1f:c8:b8:b7:71:09:39:
         36:db:ec:99:d4:c8:1c:f8:a5:53:f7:10:d4:87:3c:a1:d8:4b:
         62:00:82:bc:ca:a0:52:af:1e:79:95:56:58:cc:dd:10:0e:97:
         22:ec:c3:5d:60:c7:e8:b8:e5:79:4e:07:7c:5e:0e:65:3e:12:
         90:5e:e9:d4:22:6d:32:4f:6d:17:4b:9b:a9:59:e6:2a:1a:c3:
         5f:e0:f8:96:e7:33:6a:ab:e8:12:70:6d:c8:13:47:43:e1:a8:
         8c:64:54:ff:bf:a5:24:f9:4e:89:a2:b9:7a:df:fe:03:85:7a:
         0a:e3:f3:9b:04:f2:10:9e:ae:16:ba:e8:f8:91:97:49:b6:9f:
         9f:c6:5a:b5:6a:06:04:80:d7:80:0f:34:ca:1f:d2:3f:ed:27:
         85:aa:c7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:26 2026 by rpki-client