Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
File:                     q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json)
Hash identifier:          1VDYKS2joj8d3CDP7zXdgArQEb/K2Z75aWED9mDgsY0=
Subject key identifier:   64:EF:74:E6:5E:C0:4D:BB:A8:66:C5:5B:51:EA:8F:C2:69:2E:C1:C9
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Certificate issuer:       /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial:       36E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
Manifest number:          35F5
Signing time:             Fri 12 Jun 2026 14:29:08 +0000
Manifest this update:     Fri 12 Jun 2026 14:29:07 +0000
Manifest next update:     Fri 19 Jun 2026 14:29:07 +0000
Files and hashes:         1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: hi0O/s20iU1Ot0HjsMrKB+SpuGUDljE3sySeKDjLeBE=)
                          2: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=)
                          3: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=)
                          4: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=)
                          5: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=)
                          6: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=)
                          7: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=)
                          8: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: Vuo+8i5V4Znap+Qs1dOcHdE1nAFejMLQYP5EDIvQcjU=)
                          9: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=)
                          10: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=)
                          11: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=)
                          12: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14051 (0x36e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
        Validity
            Not Before: Jun 12 14:29:07 2026 GMT
            Not After : Jun 19 14:29:07 2026 GMT
        Subject: CN=6a2c17b4-da70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:47:f2:f1:2e:86:1b:9e:b6:c2:ec:70:ad:
                    3f:eb:9c:76:87:09:ab:71:6f:b9:74:31:ff:93:ea:
                    44:5e:d8:8b:41:d6:0b:05:a2:cb:c4:1a:cc:cb:92:
                    d2:b1:f1:97:03:81:53:55:99:37:27:53:16:1b:f4:
                    23:a8:8d:72:be:cb:eb:d3:ae:f9:12:d4:77:f3:c8:
                    95:e4:d1:68:d8:6f:5c:ec:2b:37:22:c0:67:df:df:
                    6b:12:af:46:5f:32:2a:fb:39:bf:cc:86:d7:08:81:
                    0d:c2:d3:47:98:14:e2:c2:92:6a:80:2e:00:d1:53:
                    69:5a:59:2f:d3:39:6e:a0:62:f0:46:4b:d5:6a:89:
                    65:5e:5b:75:a1:7c:5b:33:2a:86:54:bf:11:63:5b:
                    b1:d5:39:c5:ef:6c:30:d7:fa:06:e7:5e:62:6a:47:
                    21:99:d5:7c:ae:7c:e8:37:82:6e:d9:ad:d2:dd:b9:
                    04:2c:5f:7b:1c:57:c1:67:20:8e:66:3e:5f:7f:b2:
                    82:29:5c:f6:1c:44:85:89:1c:0b:75:3d:e3:b9:5b:
                    a9:b2:a8:82:58:db:4c:49:9c:98:9b:f7:0c:45:8e:
                    25:bb:47:4b:29:cb:96:ca:b7:5e:18:7d:fd:b4:5e:
                    61:7e:c4:dc:ef:97:2f:7c:80:68:a8:f7:8e:71:98:
                    b1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EF:74:E6:5E:C0:4D:BB:A8:66:C5:5B:51:EA:8F:C2:69:2E:C1:C9
            X509v3 Authority Key Identifier:
                keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e1:83:0f:1a:d9:29:4b:72:9a:39:14:ff:f0:eb:9c:e7:b0:
         d7:db:fe:89:52:39:ab:e2:e0:4b:1b:24:1a:6f:f5:0c:e9:81:
         15:ae:4c:59:1a:14:a0:c4:c3:d5:ed:55:d0:d5:d5:6a:c4:00:
         9e:aa:b1:2a:23:a4:09:6e:60:b3:0e:f1:d6:e6:59:f5:0a:c4:
         29:c3:eb:0c:8a:b3:ce:f0:ea:e2:0f:40:09:4e:97:76:b2:54:
         70:74:58:1a:f6:7d:30:4d:49:4e:cc:96:8a:dc:a7:1e:44:d3:
         6d:b3:fb:cd:1a:75:f8:f6:14:69:ac:dd:4d:c1:df:19:87:49:
         4b:de:d7:cd:8a:30:b8:3b:0f:f4:b2:d9:5b:60:fc:2c:3b:b2:
         08:65:1f:60:45:86:bf:00:93:61:c7:21:6d:fb:6e:4d:50:12:
         5d:f8:35:37:24:c4:3b:5a:35:24:ce:ff:ec:b1:00:9d:40:94:
         6c:01:52:75:ed:31:23:7d:71:9e:36:6b:c7:93:b5:12:3a:12:
         95:a8:e3:0e:20:7f:cd:9a:ac:8e:b5:8c:c8:b2:54:c6:5a:49:
         13:21:73:5b:96:17:2a:5d:24:a9:96:d4:bd:26:8d:ca:a8:ca:
         ba:ff:36:59:5b:df:95:8b:20:7b:4b:de:e1:ff:9d:54:87:28:
         b9:89:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:17 2026 by rpki-client