Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File:                     qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier:          nCqNroZFBFvJLCJLY+VSetL7X/Tjxa5R9JKUxRCPbXA=
Subject key identifier:   53:CA:2B:75:B1:A1:1A:E2:D3:67:BD:5B:51:52:76:43:A4:57:2B:AE
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer:       /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial:       0A76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number:          0A64
Signing time:             Fri 12 Jun 2026 19:41:29 +0000
Manifest this update:     Fri 12 Jun 2026 19:41:29 +0000
Manifest next update:     Fri 19 Jun 2026 19:41:29 +0000
Files and hashes:         1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: vtZ3/oma7UJmsC05x1/EMRPUMXiedS4iLFWiqAJv5mo=)
                          2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: mpij4Re6bXjGBWFyLXPJmKPd1UHVx7aiX6dvj4qN29k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
                          rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2678 (0xa76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
        Validity
            Not Before: Jun 12 19:41:29 2026 GMT
            Not After : Jun 19 19:41:29 2026 GMT
        Subject: CN=6a2c60e9-5dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:47:de:5d:60:16:7b:db:c3:df:2d:b3:48:
                    62:05:66:d9:ef:55:37:35:86:87:80:b8:22:0e:ba:
                    d2:2d:2d:7c:f2:b6:3c:ac:a9:42:c7:a5:d2:f0:7b:
                    cd:68:a0:89:1f:86:e4:6a:33:b0:12:e8:4d:1b:28:
                    30:af:ff:a3:b0:4c:25:6b:3d:bf:6d:dd:af:60:40:
                    66:ee:03:14:de:6e:de:ac:e4:a3:0f:f4:b7:45:19:
                    cc:be:4e:b3:72:1a:13:36:6f:73:c3:d8:ea:6e:97:
                    08:4b:00:9d:31:71:1b:f8:8e:0e:de:ae:cd:ef:f7:
                    ac:c0:bc:c1:d8:03:5c:79:7e:33:64:6f:1f:3e:07:
                    e2:33:04:21:cf:fc:9d:25:a8:6d:60:f2:84:60:5d:
                    79:62:b9:59:9b:2d:1e:9e:a1:bb:2f:3f:b4:63:ee:
                    ec:86:8e:cb:48:db:23:01:59:6f:b0:47:83:c7:b1:
                    0d:f2:91:03:89:32:78:a1:21:ff:b1:3c:21:6d:a0:
                    09:89:78:32:02:23:92:34:43:8c:af:ad:84:96:77:
                    b1:be:88:dd:4d:32:59:e6:40:6f:b3:46:e5:6c:4f:
                    56:23:f4:6b:f1:c3:22:75:e4:77:8b:d5:af:85:48:
                    b2:0d:7f:db:74:cb:5a:03:e8:27:91:e7:79:ef:9b:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:2B:75:B1:A1:1A:E2:D3:67:BD:5B:51:52:76:43:A4:57:2B:AE
            X509v3 Authority Key Identifier:
                keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:29:98:71:c1:aa:13:4c:e8:75:5d:21:55:ca:3d:3c:51:
         2a:99:f7:2c:5d:23:7a:a0:67:cf:fa:30:05:ed:09:89:5f:31:
         4d:68:35:aa:bb:80:9d:45:05:5f:30:89:63:92:df:2b:c5:56:
         45:93:2d:f7:ff:81:29:27:83:ee:a7:1b:33:a6:b0:bd:24:1a:
         d2:e5:b2:36:1b:73:5a:78:5a:a4:a8:60:16:58:6f:18:b1:8c:
         e4:24:2b:84:fb:aa:ec:e5:62:f0:6a:9a:27:70:d8:1d:a5:e3:
         ea:67:6f:43:0f:dd:7a:8a:70:bc:83:9e:e6:80:fd:75:94:c2:
         5e:2e:e7:d6:b3:e8:7a:15:0c:0b:37:e5:5a:33:61:5f:2e:3c:
         ba:5c:9b:26:5e:1b:17:b6:9b:4b:74:39:fb:9f:e2:ea:0f:68:
         10:01:f1:43:cd:08:2c:71:2c:b0:74:b7:29:37:06:8d:60:76:
         fa:c2:ff:41:f0:57:b3:48:ea:1f:5c:bd:7f:04:6c:e6:60:14:
         bd:b0:57:72:8f:70:8a:a8:4e:a1:4c:b5:25:5b:80:83:33:20:
         2b:83:5c:0e:e7:24:56:0e:35:be:10:09:77:bf:9f:27:6b:0e:
         8b:9d:48:d2:7c:c6:81:61:b1:36:07:36:b3:5a:fe:a4:c0:ac:
         41:ef:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:49:52 2026 by rpki-client