Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
File:                     Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json)
Hash identifier:          KAXd2Aue+3+CDo2N6+uLxpxkR8rC+wSLDlIo54ishUI=
Subject key identifier:   9E:BA:6A:C4:4F:75:6A:14:72:A8:40:5D:32:C6:0B:FA:94:5C:BD:C0
Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57
Certificate issuer:       /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
Certificate serial:       2E41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
Manifest number:          2E1F
Signing time:             Wed 20 May 2026 15:29:55 +0000
Manifest this update:     Wed 20 May 2026 15:29:55 +0000
Manifest next update:     Wed 27 May 2026 15:29:55 +0000
Files and hashes:         1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: czC7gIGwKjio7NEYAgpr7lIdy1qirhjTYV2TElB5HIE=)
                          2: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: Wc0o48iov7rXKqvl8HBWTbUP09bv/Hb3Sn4CiAQcsog=)
                          3: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: RRtlZPLxNXoaDY5ECfLrXwJY6e1jfEEkw/UE23pwwM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl
                          rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11841 (0x2e41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
        Validity
            Not Before: May 20 15:29:55 2026 GMT
            Not After : May 27 15:29:55 2026 GMT
        Subject: CN=6a0dd373-db70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:0b:ca:9c:bd:12:06:43:9a:12:99:d0:09:
                    5a:1e:b6:7f:2d:37:64:cb:94:39:6a:b8:17:81:9b:
                    bd:4f:50:57:87:0f:57:b1:41:8f:46:08:a3:72:40:
                    bc:5a:e9:f5:cf:50:45:1a:5a:94:3e:a1:20:1b:2f:
                    ff:43:ff:d0:38:8a:5f:5f:c1:da:bd:f5:1b:b8:7a:
                    7a:32:e1:f1:fa:70:de:df:48:f8:ea:b9:92:50:0f:
                    9e:f5:0b:be:73:ba:e5:89:43:15:d3:e7:32:c2:6d:
                    e3:aa:eb:5f:bd:89:b9:01:e8:74:4f:0f:68:3b:c3:
                    77:fb:85:97:06:68:ad:fb:b7:25:a3:09:c8:48:55:
                    bf:fb:63:e2:b9:4c:65:81:af:a4:55:47:a7:1c:f1:
                    97:20:27:20:74:37:43:0a:b7:a6:fe:ed:c9:9b:69:
                    09:14:be:63:f2:cc:e9:a5:5a:cd:94:6a:dc:09:f9:
                    c2:5f:36:fa:a6:ca:21:e7:5f:23:60:6f:8d:3d:06:
                    b5:06:9d:b5:56:09:72:f6:d6:5d:bf:11:cc:48:27:
                    18:89:7a:d8:8c:8d:1d:d8:27:15:f7:d0:a4:04:6b:
                    28:8e:f0:a9:cb:44:75:44:eb:6f:50:c8:75:b3:51:
                    6c:de:f5:96:a0:a7:08:3e:0b:70:0e:e1:4a:94:72:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BA:6A:C4:4F:75:6A:14:72:A8:40:5D:32:C6:0B:FA:94:5C:BD:C0
            X509v3 Authority Key Identifier:
                keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:8b:2e:9f:56:24:31:d7:2b:1f:85:87:0b:48:8f:f1:26:
         08:f6:95:d0:72:4e:74:c6:29:6c:f3:75:f2:df:db:7e:e4:66:
         d2:85:d3:f5:22:58:05:4d:41:23:03:af:64:7a:10:44:eb:f7:
         0a:47:f0:0b:9a:b0:28:3e:22:e1:eb:fc:90:45:ec:a9:d4:a8:
         b5:00:fc:b1:11:2f:24:ab:b0:0a:b1:35:2b:f2:43:3d:12:43:
         2a:55:6d:84:d7:b3:15:73:7e:21:fe:23:32:86:fe:de:0d:63:
         68:5f:6e:0d:a6:24:97:59:50:ed:2d:21:b0:5f:4f:ab:2d:2d:
         8f:61:d8:fe:97:34:04:94:4f:41:af:0c:f8:be:0d:39:fe:63:
         9c:12:05:b7:bc:94:d1:45:a8:10:f7:d7:2b:68:9f:a8:4c:71:
         c1:17:f1:46:a5:63:af:10:3e:80:fe:5a:76:82:81:a7:20:48:
         2a:c9:4b:ac:ae:07:72:b6:47:b4:77:a5:4c:94:92:c9:ad:d7:
         eb:ed:c2:6a:28:c5:4d:6a:18:b3:42:29:04:25:42:36:5a:62:
         a1:f4:8a:70:c4:6f:a3:59:19:ed:d8:0a:7c:79:18:7b:0b:ed:
         74:d1:7b:33:c6:3f:71:3c:e8:99:f2:6c:fb:30:d8:24:ff:ae:
         a0:6c:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:12 2026 by rpki-client