Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File:                     qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier:          KJjgXNZJB8UZBrvPqA++oT3rrUu4TWvjAbLcc0+PPEM=
Subject key identifier:   78:C2:3D:B1:9E:FA:2B:B1:76:AD:5A:13:48:45:C1:F1:F9:F0:63:91
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer:       /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number:          0267
Signing time:             Thu 11 Jun 2026 04:29:39 +0000
Manifest this update:     Thu 11 Jun 2026 04:29:39 +0000
Manifest next update:     Thu 18 Jun 2026 04:29:39 +0000
Files and hashes:         1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: ukEsJrFdcknz9rksBzh29/FtAwO/d7WYJ8kZzGukPAY=)
                          2: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=)
                          3: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=)
                          4: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
                          rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
        Validity
            Not Before: Jun 11 04:29:39 2026 GMT
            Not After : Jun 18 04:29:39 2026 GMT
        Subject: CN=6a2a39b3-8ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:c4:11:b1:3a:02:b3:25:76:a4:44:30:a6:
                    af:3c:a8:1f:d8:e3:fd:e2:8f:65:f3:28:0a:b1:75:
                    83:51:ad:71:fa:c7:18:22:45:14:4f:d6:91:11:cd:
                    66:43:d2:f7:ab:00:9d:b9:00:80:48:1a:2a:73:6a:
                    50:1a:b4:4b:47:50:10:44:34:be:cc:03:7c:f9:da:
                    81:6d:13:09:c6:bd:51:a8:ef:91:18:98:50:a4:22:
                    52:2f:fc:e2:21:f9:e1:bd:9b:c6:d6:77:2a:2e:69:
                    92:78:be:dd:7a:c0:4a:30:e0:a2:35:56:ce:61:11:
                    ff:b1:52:c8:4b:90:bc:eb:3e:20:eb:28:f6:7e:21:
                    e3:a6:6a:82:54:30:cb:73:e5:76:7b:82:37:88:b1:
                    3d:22:5e:5d:44:5b:f7:82:64:d7:f4:25:ec:af:fc:
                    06:4f:ad:d6:88:a3:ab:b6:4f:66:8b:f6:bf:c4:6a:
                    17:64:17:2b:c0:20:a4:5d:43:86:40:ae:eb:cc:05:
                    4c:a6:23:2f:48:28:2e:37:39:a9:b1:f1:c2:40:b1:
                    73:e2:63:bb:85:1d:1c:55:6f:7c:59:3b:2f:a3:d0:
                    79:a0:7f:8d:a0:74:15:9e:37:9e:0f:bc:1f:c6:4e:
                    18:33:71:d2:ad:6b:97:43:70:11:eb:47:c2:2c:e9:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C2:3D:B1:9E:FA:2B:B1:76:AD:5A:13:48:45:C1:F1:F9:F0:63:91
            X509v3 Authority Key Identifier:
                keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:dd:cd:fd:2d:6a:09:f7:c9:55:1b:3f:f2:5d:c7:9a:b0:5f:
         13:0b:9d:10:be:8f:77:06:8e:c3:8d:94:b1:40:b6:58:20:70:
         45:aa:e2:d8:18:b1:5a:41:e9:0a:af:06:02:ad:40:cc:65:fb:
         7d:4a:ed:b2:af:26:59:47:bb:2a:ae:eb:2e:8a:22:db:51:b3:
         be:4d:b2:0f:96:cd:13:7e:b8:c2:ec:c3:a8:54:dc:b6:bc:55:
         1f:86:5e:f1:4d:e7:d8:be:be:81:13:f9:30:f9:76:05:25:58:
         62:5e:0c:86:9e:12:ed:a4:b1:aa:5b:9c:c3:02:5a:d9:d5:35:
         37:74:89:82:50:d8:c6:f1:44:57:fb:b9:68:14:bf:2b:06:b1:
         09:c0:35:7e:83:d7:a1:ff:5c:35:17:a8:1b:58:a0:8d:0d:f3:
         9c:78:e4:ec:ea:eb:c0:cb:91:1e:91:24:a6:16:33:27:aa:59:
         f6:0a:11:f9:0d:3c:fa:7d:4e:1c:97:62:31:cb:8e:9e:2f:77:
         d7:cc:bf:24:ad:1a:c1:30:91:16:fa:64:3a:0b:f3:f7:e1:e4:
         d9:00:87:73:5e:0a:44:36:93:9b:ab:27:67:5f:4e:30:0d:a3:
         24:86:a6:a4:3f:be:2e:d7:03:66:21:0e:86:7c:7f:b6:15:d7:
         47:dd:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 20:10:51 2026 by rpki-client