Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
File:                     Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json)
Hash identifier:          KyOEKXVwdf4y2iNgtW3XpZDz92GtjDg3Qz84QqdaQUY=
Subject key identifier:   F3:86:BA:97:2C:25:B8:88:62:9B:57:95:25:23:A2:2B:98:44:AB:84
Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
Certificate issuer:       /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Certificate serial:       2887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
Manifest number:          2874
Signing time:             Mon 22 Jun 2026 15:35:32 +0000
Manifest this update:     Mon 22 Jun 2026 15:35:31 +0000
Manifest next update:     Mon 29 Jun 2026 15:35:31 +0000
Files and hashes:         1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: lb2xHx6/+bIc8kyi/eoWSIp2SvS3xvZwH+LeTtfny10=)
                          2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: LPyaDve5O9/4WQe5jKoSjlWttPY7ojSlNyw4xX1idoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
                          rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10375 (0x2887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
        Validity
            Not Before: Jun 22 15:35:31 2026 GMT
            Not After : Jun 29 15:35:31 2026 GMT
        Subject: CN=6a395644-184b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:22:ee:76:56:81:e2:1c:20:42:2d:6d:6a:
                    9e:26:ec:5f:6c:12:d0:2c:b8:ba:ac:50:e4:a4:34:
                    f7:f8:88:d8:d0:ce:2b:f5:4b:92:2e:95:c5:dd:ef:
                    24:cf:48:fb:64:af:5d:0a:16:b1:db:04:18:ab:fc:
                    87:01:9c:da:f0:60:9e:4c:63:29:de:17:b4:57:8f:
                    83:ec:a1:05:7e:18:bd:67:bb:9c:cb:b2:19:26:a9:
                    94:95:9e:28:b5:fd:93:69:28:79:17:44:b8:a7:16:
                    9d:e7:7a:7d:22:81:1a:e0:94:e6:3e:4c:6d:4e:77:
                    44:75:8c:ef:bf:33:b1:f1:e0:ed:aa:69:93:54:39:
                    f6:6c:87:d5:5b:bd:35:76:70:2d:99:8d:09:16:0b:
                    36:b3:87:7d:9f:96:68:a0:6b:0e:f5:ad:5d:58:88:
                    07:55:f0:fe:41:7d:38:cb:53:47:c0:9a:7d:cc:f1:
                    a1:ca:e8:12:30:e1:95:91:18:0f:9e:5c:01:2d:51:
                    29:76:72:76:c5:7c:d6:f4:57:88:f4:4b:59:16:ce:
                    8c:c5:09:0d:22:86:06:54:45:56:4a:99:99:a1:76:
                    0f:2d:4f:94:ac:3d:67:0b:47:b4:ad:4e:0d:fc:db:
                    0d:df:63:17:1e:1d:bb:09:53:1d:bd:9c:f8:1f:f9:
                    44:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:BA:97:2C:25:B8:88:62:9B:57:95:25:23:A2:2B:98:44:AB:84
            X509v3 Authority Key Identifier:
                keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:9f:c5:27:71:e8:a5:2a:25:68:83:87:85:a0:bb:3a:6a:
         1d:6c:75:8f:d4:da:6e:49:40:6f:42:01:37:86:fa:0d:f7:23:
         30:e7:3f:91:1f:89:53:5b:57:19:45:d0:ad:35:d0:0b:3e:f6:
         70:64:0b:a4:c6:31:ba:ec:df:71:79:a3:cf:39:1f:e5:fb:49:
         df:09:7c:c7:f8:f0:d7:7c:7b:a6:9b:6d:79:c6:26:29:ca:b2:
         ad:a9:d2:f0:85:e1:05:43:ea:c4:a1:af:25:b5:d3:8c:b1:01:
         57:6a:bd:a2:9c:b0:48:2c:25:de:d0:21:20:bd:3c:4c:d6:0b:
         c2:a3:59:e5:b9:62:b5:f0:78:48:81:2b:4f:f2:49:3d:1d:59:
         b9:18:36:6d:5a:bb:81:9c:3b:61:5a:58:e2:a1:08:de:51:54:
         50:06:dc:b5:50:cd:03:45:da:16:9e:7e:7c:4e:35:1b:91:b7:
         9b:12:1a:8a:50:3d:f8:11:d3:6a:da:e6:0a:d4:43:e0:52:b6:
         f0:36:7c:91:2c:d6:74:02:5a:1a:11:38:80:57:86:0b:56:c4:
         d5:3f:b1:17:5b:26:6f:ee:7d:7d:88:1d:c8:55:c8:7d:fb:0b:
         79:ac:15:ba:24:73:2b:36:57:a6:63:07:05:8f:a0:1a:fe:81:
         2a:33:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:12 2026 by rpki-client