Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
File:                     qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json)
Hash identifier:          2J3HkEdFYsCpxLatVdho3hBdix5N1al4khScV6Xw1Uk=
Subject key identifier:   13:FC:5B:78:90:17:DC:B4:48:D9:41:89:6E:E2:61:4C:50:E5:8C:38
Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
Certificate issuer:       /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Certificate serial:       06BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
Manifest number:          06B3
Signing time:             Mon 22 Jun 2026 22:25:14 +0000
Manifest this update:     Mon 22 Jun 2026 22:25:14 +0000
Manifest next update:     Mon 29 Jun 2026 22:25:14 +0000
Files and hashes:         1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: Ih9EpXAF3qLndqwUGNhfIIIOlBOMkU4TODRq+lxCkrY=)
                          2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: fipC8fnuwGfyjeMJXsenerqMyqmtrvp5/f9MWaX5s6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
                          rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 22:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
        Validity
            Not Before: Jun 22 22:25:14 2026 GMT
            Not After : Jun 29 22:25:14 2026 GMT
        Subject: CN=6a39b64a-35eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:88:a3:3a:74:3d:4e:69:32:cf:94:90:d0:
                    c3:c6:99:57:5e:e8:fd:61:9c:7d:34:ee:08:88:ec:
                    c2:0c:b0:d6:40:f6:2b:d1:8d:48:29:07:2b:f1:3b:
                    cb:87:b9:95:6e:d3:c6:2f:d6:e3:72:c5:41:14:ad:
                    90:66:16:09:5e:62:09:13:7e:18:99:44:16:cf:55:
                    35:40:6f:ce:a6:ff:09:9d:6f:dd:39:d9:e1:ad:37:
                    dd:77:ef:5d:ba:01:f5:e9:9d:36:8f:31:08:eb:62:
                    15:10:40:3e:2d:bb:ac:07:5f:bd:5b:1e:ef:3c:8e:
                    b7:55:3e:58:10:fd:df:fe:51:7c:fd:10:ef:3d:79:
                    25:32:18:c0:c1:e3:54:80:ca:6d:b4:5d:f9:d5:f8:
                    e2:de:ae:ea:b4:d6:a1:16:00:61:c4:34:75:1e:a2:
                    a6:79:62:37:c2:24:68:fd:06:30:fa:db:9a:48:9b:
                    a0:fb:f7:1e:7e:ac:3c:7c:9e:82:2b:3e:54:33:a5:
                    8a:3d:18:3a:d2:75:ea:d2:0a:c9:50:67:14:5b:93:
                    af:88:34:21:76:84:2c:05:02:7c:b6:1c:d5:17:c2:
                    c9:bb:17:27:34:10:70:2a:13:2e:f7:a4:ce:bd:74:
                    21:c5:53:f3:25:c7:9f:a6:c9:6e:63:97:7e:40:ca:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:5B:78:90:17:DC:B4:48:D9:41:89:6E:E2:61:4C:50:E5:8C:38
            X509v3 Authority Key Identifier:
                keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:c3:f8:23:d5:b5:48:a6:f2:4d:6f:32:c9:da:2f:f3:bb:
         21:03:86:7e:97:56:b9:c0:62:9c:51:31:c4:50:76:e4:27:c0:
         37:4a:4c:14:c7:82:65:81:75:e6:23:8a:6f:50:b4:00:e8:2d:
         f4:f4:d5:2b:77:8a:fb:ac:47:8e:a5:f8:2d:ce:95:0b:56:43:
         0c:df:89:e5:c4:32:26:69:d7:53:61:06:22:49:8e:19:85:14:
         13:65:dc:ea:6a:66:80:81:f2:26:10:0d:3b:19:de:bd:0d:6a:
         25:33:45:d5:5a:e2:bb:96:9a:ab:cc:15:58:32:6e:1f:35:dc:
         01:92:32:a9:ca:9e:7c:e2:78:3b:3f:df:2e:63:65:9f:0c:74:
         35:a7:6b:2f:b1:92:15:53:5b:05:6f:e9:f2:5b:7d:9f:0c:f8:
         9b:9a:84:78:62:52:d1:39:97:80:a6:0a:06:20:d6:36:4f:59:
         44:05:82:c8:04:47:28:34:14:f7:2b:82:c0:5f:6f:44:6f:78:
         6e:99:21:da:20:85:48:bd:0c:65:a6:6f:0a:ce:88:a9:77:00:
         c8:97:b3:a3:5f:b7:19:08:28:a2:84:93:1e:f6:da:5a:25:48:
         c4:6c:73:67:70:33:97:5d:f9:2d:71:a3:a7:f4:4e:5c:96:fc:
         71:1e:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:16:14 2026 by rpki-client