Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File:                     QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier:          Qy+gQgFt0R37fMdH02yLcyg7Jyc+SDt2WWDmR55uyrk=
Subject key identifier:   D5:8B:84:C6:C5:AE:37:35:3A:8D:13:72:CB:84:16:5A:5E:A5:1F:98
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       0492
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number:          0484
Signing time:             Sat 13 Jun 2026 00:04:56 +0000
Manifest this update:     Sat 13 Jun 2026 00:04:56 +0000
Manifest next update:     Sat 20 Jun 2026 00:04:56 +0000
Files and hashes:         1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: zrWy4uFoFuqdKs+pc3YlASyHPm/D3OTVLvWhbPLhOIQ=)
                          2: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=)
                          3: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Jun 13 00:04:56 2026 GMT
            Not After : Jun 20 00:04:56 2026 GMT
        Subject: CN=6a2c9ea8-e22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:a3:2d:2b:e9:66:7d:c5:0c:93:fe:14:a4:
                    6d:cd:15:cd:8e:12:77:24:65:b3:28:3c:ba:4a:ba:
                    4c:11:70:c0:e5:39:f8:7e:30:f2:f9:1a:89:6a:ef:
                    d2:a8:46:91:d0:46:cc:83:bc:10:80:78:0a:c9:86:
                    6d:63:dd:24:f7:c5:36:c0:ee:d7:8b:80:a5:d3:dd:
                    e2:30:09:44:2d:2d:c5:40:1f:4d:0a:06:4d:3b:32:
                    76:91:e3:39:78:8e:40:ae:52:47:e9:63:c9:3d:63:
                    c5:b6:57:a8:07:7b:3e:91:e9:2b:16:b9:d5:dc:cb:
                    d9:20:29:fd:38:d4:9f:c7:9a:0a:51:d7:ef:00:84:
                    f4:db:1c:7b:a2:41:dc:c2:0c:eb:32:f2:26:50:f3:
                    dc:54:ed:48:7d:77:c9:26:87:3d:ce:46:e5:a2:06:
                    f3:3f:95:29:e8:80:4e:46:7c:b5:c2:e8:31:80:a8:
                    ec:0d:cb:b5:60:00:f2:00:23:75:10:2b:3e:0c:dd:
                    a9:b7:c8:e3:ae:ff:b5:c8:b4:71:e6:d6:5f:4c:16:
                    33:6a:45:09:53:28:3f:4c:32:c6:61:29:9d:3a:13:
                    2f:1f:3c:17:41:be:7d:46:30:d4:19:6e:90:51:fe:
                    38:45:ca:a2:5c:d8:b9:e1:99:cd:d2:cb:2a:bb:bc:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8B:84:C6:C5:AE:37:35:3A:8D:13:72:CB:84:16:5A:5E:A5:1F:98
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:31:0e:29:39:1d:f4:3c:42:8c:a5:2c:db:fa:39:50:23:62:
         69:52:60:a2:96:9d:9f:cb:5e:ce:04:e0:25:56:03:6e:6f:3d:
         76:7b:36:6c:fe:c3:e4:3f:31:4d:b0:de:41:bb:d0:ba:5b:7a:
         73:8c:cb:82:10:19:18:e9:e5:2c:fe:46:6e:82:29:b2:14:e9:
         07:ef:e3:77:a4:34:34:b0:12:38:02:68:b2:a6:19:bf:a1:e0:
         2c:68:1c:ea:61:6c:6c:8e:62:e3:f3:25:d1:b3:66:c8:70:51:
         11:db:11:c3:dc:40:ff:16:96:11:85:b3:8a:3e:e1:2a:87:8b:
         ac:1e:62:e4:8f:e7:4b:ad:d5:d6:5e:38:6e:1f:ec:84:18:78:
         0d:94:fe:f3:74:35:a4:0d:31:ef:c3:ca:06:e4:7c:06:66:49:
         c7:60:c8:cb:80:72:54:59:a9:87:ef:07:c1:30:d9:a4:a3:14:
         d8:82:7d:69:d4:98:d6:39:3c:b0:52:16:3b:39:99:c7:d9:07:
         50:3b:87:93:cf:4f:f2:e0:ba:30:de:97:03:90:e5:1f:a2:93:
         b0:5e:ce:b5:09:a3:2d:70:ad:ca:f9:02:05:02:d9:ce:66:3e:
         6f:78:5a:81:7a:cd:ae:53:87:9f:70:e8:36:13:f6:b7:69:06:
         49:90:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:45 2026 by rpki-client