Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
File:                     QVEOswnqHt6pCF-PaC289YblBfg.mft (raw, json)
Hash identifier:          K7U7U2wz5YiI4eunvfFo2cwDg+PPJ7drhPQ0sP9ESRA=
Subject key identifier:   F9:56:C8:B0:01:C5:F3:55:51:88:05:53:B6:21:70:A5:C4:AB:03:7F
Authority key identifier: 41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8
Certificate issuer:       /CN=A914EBB2/serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
Manifest number:          1A
Signing time:             Fri 05 Jun 2026 05:00:40 +0000
Manifest this update:     Fri 05 Jun 2026 05:00:39 +0000
Manifest next update:     Fri 12 Jun 2026 05:00:39 +0000
Files and hashes:         1: QVEOswnqHt6pCF-PaC289YblBfg.crl (hash: x/nDZsATLlJi4Av6dTfcizhpSPBrG0biqVUFZrMqV14=)
                          2: 04A267BC3A1C11F18A86C54FCE833773.roa (hash: 23knBDl73gfXNd3iGv8o2CcfU2NSZeIUWhdKE2kDL2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
        Validity
            Not Before: Jun  5 05:00:39 2026 GMT
            Not After : Jun 12 05:00:39 2026 GMT
        Subject: CN=6a2257f8-488f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:9a:40:1a:45:e6:e3:d0:61:02:d8:d7:b2:
                    f0:13:51:7a:3e:86:43:13:a8:9d:ba:90:29:5d:bd:
                    19:06:d3:69:53:52:6a:2f:df:fe:44:05:1f:4c:9c:
                    8c:f6:15:b8:db:da:b2:29:72:7c:bb:30:4f:00:03:
                    6b:56:21:58:39:0b:ce:fe:37:05:44:1a:75:81:86:
                    e5:77:4c:dc:ab:b1:1d:6e:51:a9:b0:7d:96:95:52:
                    f9:cc:b2:4f:82:65:6d:57:4f:75:5a:9f:c0:30:22:
                    2d:f3:84:d9:22:19:3d:39:7c:8d:95:99:1a:ec:c4:
                    d5:b1:c3:2f:97:52:94:13:da:0a:27:3f:80:86:d5:
                    d7:0f:5c:35:5f:3a:4b:a9:de:b0:8b:72:4f:3d:a7:
                    55:ea:24:31:e7:cd:3e:11:a1:e0:fc:18:d3:e0:98:
                    2c:40:4a:3f:e4:a5:a5:68:93:d0:ab:9f:f7:aa:d3:
                    09:95:ec:e3:eb:ab:cd:5f:cf:f5:60:15:cc:ad:c5:
                    0d:9e:91:36:de:57:ba:cb:0b:d4:6d:d1:54:2e:58:
                    b3:9b:70:d0:0b:be:79:7d:d1:fa:23:a4:93:0b:dd:
                    73:93:92:40:be:0f:df:ac:04:70:8c:36:e3:1d:ec:
                    2a:80:e4:9c:c7:f7:7c:58:9c:b0:d3:e2:da:7d:c6:
                    60:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:56:C8:B0:01:C5:F3:55:51:88:05:53:B6:21:70:A5:C4:AB:03:7F
            X509v3 Authority Key Identifier:
                keyid:41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a9:17:12:c6:be:0c:5c:ae:f7:e3:9d:34:99:4d:c8:2f:06:
         dd:a3:2d:c6:be:c7:44:0f:6c:b4:a6:34:5b:8d:12:45:75:ce:
         b8:e2:8b:b3:c7:3a:da:1f:38:49:66:be:e4:83:e4:fe:4b:2c:
         a6:d7:15:56:a6:3d:48:67:a5:2a:6c:76:cf:c7:a9:b9:aa:80:
         00:7a:15:c5:0a:d3:40:a4:c4:ee:f7:ce:70:45:08:50:62:72:
         30:b1:aa:de:7f:36:7c:15:ce:94:d4:fb:5b:1f:0e:db:05:2e:
         71:04:40:d5:8c:39:a2:76:ca:cc:6c:6f:db:a2:8e:4c:d5:d9:
         a5:e4:ce:5b:6d:f2:98:15:8f:97:53:59:6c:b8:78:c0:d4:66:
         78:eb:62:56:2b:01:5d:b9:00:6d:06:fd:f6:8e:2f:4e:a6:15:
         e9:2a:16:54:fc:8d:a5:a5:26:97:ab:35:70:17:43:e0:96:48:
         ca:1f:f6:1c:d5:93:03:a0:0d:eb:06:56:4a:e6:a1:49:0b:8b:
         4c:3c:b9:24:66:2e:8c:d7:e4:89:6b:81:e0:c3:d4:b7:5f:7c:
         22:5d:60:c0:bd:01:13:02:e6:df:bc:12:d8:74:83:1c:5e:b9:
         53:61:71:95:57:bf:7c:d5:6e:46:b4:a9:36:9e:9a:05:86:80:
         0c:85:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:16 2026 by rpki-client