Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
File:                     q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json)
Hash identifier:          RvvWbQt07XjuJsqL3Gte1xf2D3U/6jsulB68xJiY1dw=
Subject key identifier:   BA:29:93:79:C6:F9:E0:9D:80:7B:28:05:6E:DF:F8:E4:8D:28:D3:FD
Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
Certificate issuer:       /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Certificate serial:       0871
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
Manifest number:          0869
Signing time:             Fri 12 Jun 2026 20:47:52 +0000
Manifest this update:     Fri 12 Jun 2026 20:47:51 +0000
Manifest next update:     Fri 19 Jun 2026 20:47:51 +0000
Files and hashes:         1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: Qykcjp7DtOfeM4Cw1kwMkC1PU6e4WUxkZ/v8VI3ACss=)
                          2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: qS1ZoDt2aNwKGyjoFIpFYDmjrousmLlYXDWuZSQ3NCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
                          rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:47:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
        Validity
            Not Before: Jun 12 20:47:51 2026 GMT
            Not After : Jun 19 20:47:51 2026 GMT
        Subject: CN=6a2c7078-5333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:a9:6d:7a:16:16:16:1d:9d:a5:47:f9:5a:
                    17:c6:cd:9b:49:dd:64:7a:a0:9a:c9:3a:16:ad:d0:
                    50:01:5f:ba:23:10:95:4b:9b:72:42:e7:59:97:71:
                    5b:9f:08:cb:80:b2:e4:0b:1a:10:37:7a:e9:c5:43:
                    a4:8a:14:78:46:d0:88:1c:86:e1:0d:4f:79:de:34:
                    7d:db:c8:a1:d0:3d:cf:31:bc:60:25:20:09:16:e9:
                    48:14:c8:00:e7:11:01:54:4e:01:92:14:a6:4f:d8:
                    cd:41:63:52:f5:76:a0:21:f6:5d:74:e1:42:9c:83:
                    ff:62:23:6b:92:56:22:b1:e7:b9:c4:38:5f:9b:fd:
                    d0:1b:45:61:4f:a1:ab:cd:d1:7b:4b:cf:b6:50:3d:
                    cc:98:40:54:ea:6d:2d:fd:92:8c:62:4a:db:a1:a1:
                    4d:d3:56:d2:db:d2:34:1f:88:45:e4:7f:c1:0c:53:
                    20:bc:98:9c:de:30:ae:f9:3c:b8:aa:16:67:69:10:
                    27:08:81:cb:5b:46:af:94:59:75:76:67:38:39:a0:
                    a2:30:6d:47:71:84:08:b9:62:06:4f:d0:90:35:bf:
                    f3:c1:0d:1e:ff:f6:98:01:95:9b:9c:e7:8a:55:ef:
                    24:2f:11:e7:df:a9:a2:b6:ef:79:c5:75:6c:37:01:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:29:93:79:C6:F9:E0:9D:80:7B:28:05:6E:DF:F8:E4:8D:28:D3:FD
            X509v3 Authority Key Identifier:
                keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:64:3d:e6:26:79:a2:37:68:03:df:f1:51:7e:ae:fd:11:00:
         26:7c:8d:68:e9:e3:1f:18:04:9e:78:53:65:8a:2c:43:f1:2b:
         c0:71:02:11:27:d1:b3:1c:68:f6:81:90:4f:c1:11:89:e3:69:
         01:a0:d9:a2:ec:39:04:e8:14:bf:30:ff:4f:f3:2e:77:ce:2b:
         c5:23:61:96:e3:2f:5e:68:8b:89:7d:15:d5:dc:81:34:c0:1e:
         94:ed:fc:72:6a:47:7f:b2:51:06:a4:0c:5c:8f:1b:53:0c:07:
         e1:ca:41:8e:26:1f:c2:7f:af:dc:fc:be:59:b3:45:08:b9:a4:
         9a:18:26:73:dc:11:42:50:e2:8b:e3:b7:11:e8:97:a5:d1:b9:
         65:2e:e6:51:b8:3a:11:61:72:7a:05:03:77:40:b9:2d:d3:d3:
         3c:26:32:cf:36:80:f6:18:4d:7d:7d:9f:04:10:31:79:4a:77:
         d1:ad:aa:e8:55:5f:cf:cd:27:be:75:77:d2:dd:b1:8f:3c:f6:
         af:d9:88:13:26:59:8c:86:bd:e2:26:cb:e6:e4:67:6e:11:e3:
         c8:06:e8:e8:79:a8:df:c6:36:18:24:62:fe:2c:00:ba:7c:4e:
         9e:aa:64:b4:43:8c:b5:b0:9a:80:54:d3:4b:75:fb:fe:25:92:
         83:ab:31:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:34 2026 by rpki-client