Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File:                     qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier:          mrVNpVTPPRwVPLk6LkvsW0uooPe2KdeTbIEj8iRZa+o=
Subject key identifier:   CD:7A:23:85:EC:C5:25:D4:F5:0E:9B:CA:2E:5A:44:1E:60:4C:0B:D2
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer:       /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial:       0B4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number:          0B2E
Signing time:             Fri 12 Jun 2026 19:20:17 +0000
Manifest this update:     Fri 12 Jun 2026 19:20:17 +0000
Manifest next update:     Fri 19 Jun 2026 19:20:17 +0000
Files and hashes:         1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: HyA4lFJwoZmL7DVtEjWKEa6g1/zKUUQPgqhjN2SSuOU=)
                          2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: 06JDuEw0u9UTrCmVjHn/IvdBcebyeZXlu9hwRmQETbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
                          rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2891 (0xb4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
        Validity
            Not Before: Jun 12 19:20:17 2026 GMT
            Not After : Jun 19 19:20:17 2026 GMT
        Subject: CN=6a2c5bf1-af32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:08:6d:51:e2:e7:99:87:85:2f:17:01:97:
                    07:a4:47:9f:d0:01:73:3b:50:7c:4e:2c:27:8b:ff:
                    8a:a6:03:3b:34:1f:cb:eb:85:7e:e2:4c:5d:71:75:
                    e0:7f:26:45:54:b2:16:db:c5:29:7f:54:1a:fd:9a:
                    88:be:0e:98:6c:32:7f:64:41:9e:7a:fa:77:54:ee:
                    2b:22:6a:ee:80:cd:3b:5c:10:b4:a0:88:dd:bf:10:
                    24:80:97:c2:f0:74:57:b8:f0:05:0b:d0:e0:78:c1:
                    6d:c6:c1:6f:dc:11:19:df:09:79:d7:b1:63:99:03:
                    9a:15:98:bf:46:88:c8:f6:f0:4f:67:05:ad:49:ea:
                    f3:a9:9d:b3:46:6f:94:d2:98:10:07:fe:52:a6:00:
                    55:79:62:a9:78:f3:42:a6:1e:a2:06:06:56:94:8f:
                    9c:5d:30:38:ce:0d:45:50:c1:e6:a2:17:6a:83:61:
                    6b:b7:f4:d4:85:7a:c7:aa:86:35:ef:ec:84:00:6c:
                    4b:36:25:a9:04:ba:f6:d2:8b:da:83:fb:3e:4b:41:
                    1e:b8:34:2a:45:bd:0d:52:cb:81:6d:a3:82:c8:37:
                    49:bd:b1:61:a7:46:86:0e:5f:40:fb:81:50:73:80:
                    1f:10:50:fc:f2:b3:ad:ca:d3:95:87:19:90:b4:36:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7A:23:85:EC:C5:25:D4:F5:0E:9B:CA:2E:5A:44:1E:60:4C:0B:D2
            X509v3 Authority Key Identifier:
                keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:eb:6f:68:bf:ba:9b:0d:b1:66:fb:1a:a7:f4:16:84:f6:05:
         6a:51:f7:e9:a0:14:63:0d:3b:ed:03:da:a9:47:e8:75:aa:b0:
         76:5d:54:b8:ae:4f:ee:fc:6c:52:81:5c:08:9e:0b:26:25:82:
         44:44:65:f7:ff:d7:b5:2f:37:24:3d:6d:6b:19:ed:d7:39:94:
         ca:7f:96:02:91:2f:e9:fd:ab:d5:ef:fe:3b:a5:08:c4:f3:16:
         c6:55:ca:14:7c:d7:00:61:0f:05:e0:3c:39:4f:bf:08:61:f6:
         e8:d3:38:bd:c1:06:74:85:3b:d8:ca:b6:f0:c9:62:d0:23:1e:
         38:15:f3:b1:b8:e9:fd:5e:05:41:1b:35:36:63:5c:60:98:8e:
         1b:9f:81:5c:55:15:2f:5d:54:c0:10:3c:aa:bb:6a:d3:ca:ce:
         5c:60:6b:6a:79:4d:c9:9f:5a:07:8c:df:87:65:37:86:03:f9:
         c3:9b:86:a9:61:a5:20:f6:15:fc:de:b9:47:ef:a2:2d:1b:f6:
         f0:59:6c:92:9d:06:2c:36:44:84:ec:db:98:b6:22:ad:3f:a1:
         34:c2:52:b9:16:5c:a0:c7:36:27:a4:22:90:11:8f:64:ec:3f:
         a8:2a:be:b8:9f:f5:95:69:78:54:37:9a:e6:4e:27:4a:fa:43:
         f3:e9:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:57:31 2026 by rpki-client