Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File:                     AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier:          t1CX6u5Wtc+VPb/OhLxgFASSoi3NnEbxa5Qygfj3qKM=
Subject key identifier:   87:67:CE:E2:79:6B:43:7D:1F:6C:0B:DA:F0:5B:1A:9A:E4:D3:33:D5
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer:       /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial:       08D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number:          08CD
Signing time:             Mon 20 Jul 2026 20:54:06 +0000
Manifest this update:     Mon 20 Jul 2026 20:54:05 +0000
Manifest next update:     Mon 27 Jul 2026 20:54:05 +0000
Files and hashes:         1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: L/or+faFyBxfBYwwLSE3FpDUrgAlVdEo8hNsPnJPgg4=)
                          2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: 9TmPmA1+zthJxiNmUQ4CrTPbBg0Xhy5uru/BuqYwuPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
                          rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
        Validity
            Not Before: Jul 20 20:54:05 2026 GMT
            Not After : Jul 27 20:54:05 2026 GMT
        Subject: CN=6a5e8aee-6d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:89:5c:f1:02:ff:e7:b1:22:50:03:37:f7:
                    4d:9b:e0:b4:68:da:4e:b6:de:62:87:aa:47:12:ac:
                    9f:1a:24:0d:99:01:51:33:0a:8e:33:f3:ee:fb:7c:
                    55:a6:04:69:9f:d5:f7:ed:4c:eb:43:50:45:a9:b7:
                    77:4d:7e:d5:b3:00:12:b4:b6:a8:5b:fc:be:03:f0:
                    6c:b5:35:f8:a9:00:89:77:fd:61:db:00:74:8d:3e:
                    1d:0b:13:55:e2:9b:7d:1c:17:1d:b9:77:ed:9d:c6:
                    d1:ba:d4:43:2c:4d:74:75:5a:28:42:c6:d3:59:26:
                    89:39:bc:4a:f1:67:9d:cd:53:be:9e:19:4a:b4:1b:
                    9c:7b:4d:16:d5:2c:8d:6d:40:26:03:e4:e7:63:dd:
                    20:d6:ba:f6:f7:35:e7:5b:9d:42:95:8a:83:d1:6b:
                    f5:28:b6:2c:a1:4b:76:37:df:94:91:d3:92:bc:6d:
                    ea:0b:43:87:5e:d4:0a:aa:0b:40:10:b8:47:2f:b1:
                    4f:f8:45:d4:32:ec:96:a1:bc:35:47:9c:2c:bf:a1:
                    52:65:60:79:fb:60:f1:e4:ac:a5:ba:3d:05:e4:39:
                    e4:33:76:e3:44:cc:e9:9a:a4:e4:f8:2f:3c:ae:b6:
                    21:dd:6e:30:78:fa:db:cf:e5:2a:15:76:1f:e3:80:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:67:CE:E2:79:6B:43:7D:1F:6C:0B:DA:F0:5B:1A:9A:E4:D3:33:D5
            X509v3 Authority Key Identifier:
                keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:11:ce:e8:cc:aa:cc:b4:dd:26:b6:4f:ae:89:17:0c:99:
         9e:8c:0c:f0:3d:0b:75:6a:77:0f:8a:f2:0d:d8:3d:88:5e:f6:
         22:ce:a0:a6:2a:1b:3d:6c:a6:c5:db:b7:e3:36:47:be:62:ac:
         15:6e:f1:44:d4:d0:f1:2c:4c:cf:96:12:cd:88:85:5e:1c:b2:
         f1:74:d5:bf:e5:06:40:53:4d:54:21:cf:c8:ec:5f:68:3f:f4:
         54:1d:ab:24:29:43:cf:97:e8:5b:a1:7e:6d:bc:d5:3c:94:78:
         00:01:d4:1a:fa:13:eb:94:36:ad:f5:8a:b7:53:cd:1f:1f:cf:
         65:b6:d5:2b:a0:b7:5f:ce:5c:c2:ea:c5:c1:53:c2:cf:e2:f7:
         31:ef:0f:35:21:38:e0:06:0f:a7:11:63:ea:6f:63:aa:57:35:
         0a:8f:b7:91:6e:be:2f:8d:c2:8a:39:6c:1e:ae:45:83:a2:12:
         65:ed:30:0e:40:87:9c:3b:eb:c8:5f:c0:37:60:88:50:15:6a:
         09:66:f8:2c:40:10:54:cc:21:8a:72:2f:fe:49:13:3c:e8:dd:
         82:b4:58:42:9c:63:8e:56:50:34:b1:63:31:13:df:d0:13:70:
         ca:0b:e8:db:33:e0:bc:99:94:96:86:98:3e:f7:34:f6:32:6f:
         49:ff:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:37 2026 by rpki-client