Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File:                     qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier:          CzjGCSH1eHxB4cR5vf3T537F2eRy0aKhLMWt5YtLfac=
Subject key identifier:   E3:6C:4F:F7:36:2D:F2:B6:A0:C0:83:CF:59:0D:FE:A9:E2:59:88:B9
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer:       /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number:          0262
Signing time:             Thu 21 May 2026 02:20:13 +0000
Manifest this update:     Thu 21 May 2026 02:20:12 +0000
Manifest next update:     Thu 28 May 2026 02:20:12 +0000
Files and hashes:         1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: ZMLTnjsa7Fii808u6cUXAj2ZBY+Ea7otVNQgj9M6/eg=)
                          2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: Q3iqUPNxpMUTGIgTwjjfM3K9Qqme00bVcKDIrn27a8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
                          rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
        Validity
            Not Before: May 21 02:20:12 2026 GMT
            Not After : May 28 02:20:12 2026 GMT
        Subject: CN=6a0e6bdd-5d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:39:81:97:60:2a:06:98:a1:29:ed:25:bd:
                    1e:59:28:43:11:31:c6:1e:88:e2:39:80:91:88:58:
                    e6:9f:17:1e:6a:77:4f:d7:ae:f1:07:8e:64:5a:07:
                    8e:fa:97:a7:63:0b:be:ef:05:a1:03:01:c3:b5:9f:
                    2c:2f:fe:c9:cd:f3:f4:0a:a8:ca:ee:bb:e9:ae:7d:
                    4f:3a:44:be:ec:3f:a0:36:d7:00:18:fd:bb:7b:85:
                    68:df:98:91:cc:db:ae:d0:20:69:55:39:95:ac:c2:
                    67:66:98:ae:ca:0b:21:a3:0b:5a:ea:58:6b:2e:19:
                    42:9c:aa:b8:41:5a:1f:42:dc:44:de:75:e8:a5:f3:
                    2e:2c:fc:54:47:8a:88:02:2c:01:ee:48:30:9c:98:
                    58:dd:bc:1b:29:15:32:f6:30:54:8b:49:4f:23:70:
                    5b:6e:65:89:d2:df:ab:22:5a:ce:bc:e1:73:63:58:
                    0f:e2:05:6a:98:b9:36:83:1b:ed:ae:c3:57:ce:99:
                    7f:ae:d6:ed:e4:24:1f:59:6f:76:7b:7f:51:16:8e:
                    4a:68:47:d6:d6:43:92:a4:0c:1f:2e:10:18:9e:66:
                    24:f0:c2:9d:ee:96:77:63:96:a9:b3:fe:1a:46:4d:
                    00:ce:2d:a1:fa:b2:11:db:a4:1d:62:c5:b3:3b:36:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6C:4F:F7:36:2D:F2:B6:A0:C0:83:CF:59:0D:FE:A9:E2:59:88:B9
            X509v3 Authority Key Identifier:
                keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:fa:4e:a0:ea:9c:35:1c:0f:22:9c:d5:b5:52:dd:7a:8e:
         1c:9b:00:63:82:8b:c7:0e:d4:b9:0a:78:63:1b:79:ae:bc:83:
         eb:84:00:d5:eb:1e:11:0c:07:d6:42:4f:d6:ed:1d:db:6e:07:
         71:0f:6b:ac:36:d6:2e:bb:0f:01:0a:39:fe:f3:87:f6:34:e3:
         7b:35:21:4e:79:af:3a:6f:b0:6c:23:88:5c:10:1f:c2:9d:cc:
         39:f8:bf:73:74:cb:a8:f9:c1:f1:ba:08:85:b1:6c:51:ee:27:
         58:25:9c:39:68:04:ee:f3:5d:eb:39:f2:be:e8:55:c4:ac:72:
         03:3d:3a:bd:ca:01:ea:de:5e:fa:d4:6c:c1:b7:7a:6f:be:7f:
         8c:46:8f:43:a3:78:3a:eb:18:35:99:33:8a:0d:74:70:12:d6:
         7c:bf:4b:17:a6:87:db:44:d0:73:2c:b9:2e:15:0f:78:c2:b3:
         32:0e:2d:6c:d8:64:b9:08:b5:23:94:95:4f:43:d5:b6:de:9a:
         69:a4:ca:c6:f7:ac:aa:4d:9d:57:2d:82:39:65:2a:83:5e:60:
         f0:29:c6:26:03:e5:be:e1:73:bb:12:4e:08:6e:e6:e1:31:1e:
         19:8a:12:77:6e:82:97:70:92:fd:a2:64:e4:71:69:04:7b:74:
         79:68:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:23:44 2026 by rpki-client