Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
File:                     qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft (raw, json)
Hash identifier:          DaPaSVMGrFYo+CX3ZnUaZhsyEah1EgNDYAs6NdglNC0=
Subject key identifier:   9C:22:A7:17:CB:54:CB:E1:88:CD:D9:ED:13:38:13:60:7E:F2:CC:D1
Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4
Certificate issuer:       /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
Certificate serial:       094A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
Manifest number:          0940
Signing time:             Wed 20 May 2026 20:12:17 +0000
Manifest this update:     Wed 20 May 2026 20:12:16 +0000
Manifest next update:     Wed 27 May 2026 20:12:16 +0000
Files and hashes:         1: qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl (hash: omcwS0XSs+SlZIpIRMcwS9Lh1PaTHNZ2UBBre/HHNcc=)
                          2: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (hash: d8opkbtcxlyFCpprQQ3tauoxiI6m50FsaHiBQoF0J2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2378 (0x94a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A13F, serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4
        Validity
            Not Before: May 20 20:12:16 2026 GMT
            Not After : May 27 20:12:16 2026 GMT
        Subject: CN=6a0e15a1-fed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:a2:ae:74:72:ec:0a:11:c8:6d:db:73:ee:
                    bb:da:08:ae:48:8c:ea:eb:f2:e2:0e:4b:e6:c0:e3:
                    cb:0f:a9:ae:9b:4a:e0:61:d4:54:4f:88:af:fd:36:
                    1c:61:8e:71:56:07:eb:4c:d2:96:67:e4:e7:ca:d4:
                    41:4f:ab:d6:33:9e:55:59:d6:cc:e4:f8:db:b7:3d:
                    c0:7a:13:ec:85:58:56:1a:e3:1d:d2:1f:68:ed:3c:
                    e5:21:46:6d:8a:c0:a1:09:fd:9f:0b:20:5d:68:27:
                    54:4d:14:ce:33:a8:3f:fb:2e:1e:5c:58:8c:f5:eb:
                    73:1b:3a:ee:a4:0e:01:30:5c:99:8f:ee:34:ac:5b:
                    86:b6:63:3b:96:d6:f1:1f:3f:42:cd:fb:b1:d3:86:
                    80:06:82:57:32:68:6b:b3:4e:d2:9b:2d:8d:a2:a3:
                    b3:ef:e1:1f:ae:7b:8f:b2:fa:d9:43:e2:c9:2b:d4:
                    f8:b8:66:6d:bc:d8:18:00:35:af:49:e1:4f:46:d6:
                    e2:72:db:ab:9e:a2:1e:9e:ba:c7:e2:dc:75:6a:bd:
                    05:7a:0b:de:5b:a6:c8:99:49:5e:5e:90:90:fc:45:
                    72:38:e3:69:c8:28:31:0c:47:12:e7:ea:c5:20:87:
                    27:13:6d:97:af:7f:3c:9a:13:50:71:63:19:c6:8d:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:22:A7:17:CB:54:CB:E1:88:CD:D9:ED:13:38:13:60:7E:F2:CC:D1
            X509v3 Authority Key Identifier:
                keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:27:8f:bb:99:49:8f:50:d5:ee:62:1d:70:04:ce:c8:4c:
         6a:09:a0:2d:c5:b6:87:26:44:10:cb:61:04:22:37:44:74:c7:
         0d:34:4f:81:31:38:5e:f8:36:b5:6d:f3:1f:16:a4:99:75:69:
         a2:d0:3e:e1:8b:ba:0c:42:fa:c4:0c:de:0b:a9:d8:16:8f:b9:
         2b:cf:4d:6b:12:3d:52:c2:15:96:e5:f0:44:fc:7f:5d:fc:21:
         1c:a7:e0:d4:ee:e3:3d:0e:d2:27:fc:a6:b6:a1:61:e7:33:65:
         f2:01:fa:9e:fe:a8:ef:94:58:bf:59:06:1a:28:8c:c9:fa:28:
         ff:e7:6f:f5:81:76:83:e4:ab:73:a6:0c:3c:5e:ee:63:ad:43:
         b9:49:5c:17:60:3f:4e:c5:f4:7a:63:1f:c7:2a:dd:9e:48:51:
         04:f4:2a:55:98:76:d7:c3:46:38:5a:ab:75:89:88:82:5c:d1:
         b6:22:a7:94:1f:e9:f6:8a:07:2c:e4:a4:ec:59:5b:66:dd:96:
         fa:af:db:66:37:79:eb:46:c7:02:26:a2:e6:ce:64:94:e1:ba:
         ec:a4:df:54:80:60:6e:85:87:1e:31:57:6b:1f:7e:75:7a:5f:
         7c:5a:72:0e:9d:f6:d5:0c:05:b2:66:38:1d:92:fc:ef:91:05:
         7e:ca:b0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:59:05 2026 by rpki-client