Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File:                     qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier:          I1MyRjOVzmd1IAmyYPHxEEd+ZNBzV7HVoOaQVvhG3Z0=
Subject key identifier:   28:44:21:0D:F1:7E:A5:B8:6D:97:DC:4F:0D:1E:5A:0C:56:B5:5B:1D
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer:       /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number:          01C9
Signing time:             Mon 27 Jul 2026 05:31:57 +0000
Manifest this update:     Mon 27 Jul 2026 05:31:57 +0000
Manifest next update:     Mon 03 Aug 2026 05:31:57 +0000
Files and hashes:         1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: I6QjtuSqK17mAD18RRBkgzh4czSF9z+/85Zxi6xhVDU=)
                          2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: FMQ4cQsw3VD3QYGrAPTdPSBgnIKTRxDIrjgjXzARTlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
        Validity
            Not Before: Jul 27 05:31:57 2026 GMT
            Not After : Aug  3 05:31:57 2026 GMT
        Subject: CN=6a66ed4d-c2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:dd:f0:21:f9:62:d6:83:84:61:b6:9e:4a:
                    93:fd:ed:ed:83:d8:0b:d0:b5:c3:97:19:43:68:c0:
                    00:0f:57:69:3d:46:7a:22:a7:ce:98:98:ad:3b:b1:
                    c1:2b:32:74:7d:cf:d5:91:59:28:9b:f5:4a:a3:f0:
                    92:27:2f:b5:27:22:ab:4f:be:b4:2c:e0:d8:ba:a5:
                    6b:5c:72:ec:1f:ae:99:9b:a4:91:40:17:f0:f1:50:
                    4a:ac:61:6b:37:39:a4:8f:8c:63:4e:2c:5c:c7:8b:
                    e0:99:b0:4b:29:83:a9:19:c1:c9:5a:84:64:10:f0:
                    bf:90:0b:c8:a3:1f:7a:28:6f:74:b7:2d:a4:4e:e5:
                    45:87:7e:d1:ee:cb:94:e3:13:7b:9a:54:fd:b9:3d:
                    d7:e1:3e:c6:9c:dc:b0:fa:ba:74:45:71:8d:a1:e4:
                    e0:36:99:91:c8:31:a0:c0:97:82:17:ae:4d:f9:a1:
                    21:1f:90:35:7e:7d:f1:3c:35:33:ba:04:93:c4:3b:
                    db:d4:79:83:40:cd:f3:31:82:af:ec:64:66:7f:16:
                    a1:f8:94:2e:02:68:55:1c:6f:5f:cf:3c:20:36:53:
                    1e:87:c4:b2:be:ce:5a:c2:bf:72:fa:71:78:5b:01:
                    b0:33:62:88:fd:26:39:d2:db:98:48:f3:86:b0:04:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:44:21:0D:F1:7E:A5:B8:6D:97:DC:4F:0D:1E:5A:0C:56:B5:5B:1D
            X509v3 Authority Key Identifier:
                keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:c2:f4:18:6b:4e:b4:b2:fb:e3:39:ad:53:be:e1:5e:0c:64:
         35:2a:4f:cf:c9:6e:87:38:6f:eb:48:61:ac:a7:f0:a8:8a:d8:
         3e:47:b4:0d:71:c5:fd:ec:1d:c6:80:93:aa:8d:5d:47:eb:51:
         c7:b1:4b:5d:d2:aa:f8:b5:ec:db:de:7f:f8:08:d7:c9:b3:82:
         bf:15:9c:1a:36:88:a0:00:42:64:3d:a7:56:a8:53:78:24:de:
         e4:e2:c4:fe:7b:a7:b8:5a:72:22:08:13:99:d2:8a:76:51:b1:
         e3:a1:09:ca:b3:5c:1b:00:12:2d:bb:e3:45:c4:14:49:a8:1c:
         bc:be:2b:6b:9a:32:e2:7c:cc:fe:45:a9:98:a1:89:70:3b:c7:
         bd:da:8b:9f:72:43:b1:3b:c8:93:8b:46:f1:72:b0:89:0c:f9:
         81:7d:7c:38:4c:1a:c4:37:93:46:56:3b:5c:55:57:34:e4:64:
         91:51:86:8f:40:13:27:00:71:26:bf:55:a2:77:68:11:ea:84:
         33:0d:0d:94:2e:02:89:19:bb:ad:3e:a3:30:5b:42:e9:51:d3:
         da:a6:77:02:55:dd:d5:31:ff:e2:d4:12:de:f3:98:24:f8:78:
         94:f3:90:23:3b:2a:df:d2:3a:d4:8f:9c:37:db:24:ac:ed:e3:
         53:12:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:39 2026 by rpki-client