Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
File:                     qfCsl7nBjDLiFpwBpJhsemwlX_4.mft (raw, json)
Hash identifier:          XSarzuzBg1Bk1ovZvnWX9NaKJTXQrc8UcejwmCwihCQ=
Subject key identifier:   35:B6:67:D5:DD:F0:6F:A7:8B:F3:1D:43:7B:86:E1:24:81:5F:AA:F2
Authority key identifier: A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE
Certificate issuer:       /CN=A91585F0/serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
Manifest number:          9F
Signing time:             Thu 21 May 2026 07:27:26 +0000
Manifest this update:     Thu 21 May 2026 07:27:26 +0000
Manifest next update:     Thu 28 May 2026 07:27:26 +0000
Files and hashes:         1: qfCsl7nBjDLiFpwBpJhsemwlX_4.crl (hash: m5w3HZyLmynyVN27/iozXLzryWCZsG70+8wZ/pYayMc=)
                          2: C9479880646611F0B371D156C4F9AE02.roa (hash: EiYvwU0YQnjRK3Tvv8B2ub2+aNVUJVhtBwUBXxQFVDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl
                          rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91585F0, serialNumber=A9F0AC97B9C18C32E2169C01A4986C7A6C255FFE
        Validity
            Not Before: May 21 07:27:26 2026 GMT
            Not After : May 28 07:27:26 2026 GMT
        Subject: CN=6a0eb3de-f784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:9b:12:20:51:a4:68:93:51:3d:fb:27:3b:
                    00:15:9f:f9:9d:6b:9c:e8:c3:0f:77:12:9a:16:60:
                    e7:a1:4f:07:7f:3e:15:be:27:48:32:1c:6e:1c:58:
                    6c:5a:33:03:18:c4:38:02:4f:55:7f:e6:0a:7d:39:
                    d5:94:59:ea:6c:6c:5f:2c:21:0f:57:b8:ed:4e:9f:
                    16:9a:0c:13:dc:46:d8:e5:d4:96:9b:20:01:37:f3:
                    9e:41:5a:d4:2f:15:c1:ec:f3:c4:07:97:c4:62:69:
                    05:6b:c9:7b:69:61:c8:04:39:b3:7c:21:2f:4f:b4:
                    01:59:23:a1:a9:37:e6:f5:79:a6:16:95:af:ee:5c:
                    16:13:a2:57:f0:2b:5b:53:51:5d:19:7d:6e:ec:43:
                    ef:ae:f5:e1:3b:54:e2:45:c4:1b:d0:82:a2:33:37:
                    95:15:e7:a7:a5:66:1e:8b:21:75:8e:a5:c3:2b:34:
                    09:38:f1:28:81:f0:b2:fd:f7:0e:d0:ba:57:63:c1:
                    a3:ec:e4:63:de:f5:aa:a1:30:d6:bd:e2:75:0d:8d:
                    aa:5d:40:3f:aa:58:68:2c:02:b9:e3:6a:31:dd:77:
                    98:10:bc:87:d1:72:73:f2:40:f3:6d:7f:16:6a:cd:
                    aa:42:64:38:a7:01:92:42:ac:29:be:fe:80:17:2f:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B6:67:D5:DD:F0:6F:A7:8B:F3:1D:43:7B:86:E1:24:81:5F:AA:F2
            X509v3 Authority Key Identifier:
                keyid:A9:F0:AC:97:B9:C1:8C:32:E2:16:9C:01:A4:98:6C:7A:6C:25:5F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfCsl7nBjDLiFpwBpJhsemwlX_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/56356CD4640011F0B1A1D57EC4F9AE02/qfCsl7nBjDLiFpwBpJhsemwlX_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:76:bf:1d:44:b7:55:c7:6e:57:4f:b0:bc:13:02:4a:c4:b3:
         69:b2:ba:eb:fd:15:25:37:16:81:72:77:5b:89:04:6c:b8:f4:
         cd:34:f2:db:2c:65:18:dc:57:e3:25:99:7d:22:6c:2b:c4:e7:
         f5:4d:69:50:a1:8d:b4:e2:ca:db:7d:65:8e:cb:67:1f:1b:e0:
         c2:cb:42:09:47:03:9c:b6:2c:75:bd:cd:04:88:e5:e8:52:3a:
         38:37:a4:23:00:0f:ee:01:33:e2:8b:0c:d7:a7:52:11:07:02:
         66:60:6f:22:61:df:18:9d:2d:55:40:6b:5f:0e:d5:17:1e:84:
         2d:fe:4e:9c:fe:e9:a4:85:d0:4e:e8:62:1c:8f:a9:43:cf:e9:
         3b:24:80:88:ee:38:c9:24:87:1c:28:6d:6c:43:63:5a:e7:fa:
         34:10:ab:46:f2:c6:66:c7:6e:28:a2:5c:b3:46:eb:de:f6:e2:
         e5:ed:ab:f9:ca:70:33:4c:12:53:63:24:25:db:10:f6:fd:d3:
         a3:b1:54:48:ec:c4:23:af:ff:29:37:cd:25:6d:ad:b9:a4:eb:
         4c:d5:96:e7:71:82:a8:bd:0b:ed:01:ee:3e:1d:e8:5c:4f:d1:
         19:39:b3:73:d8:ca:70:8c:43:f6:ba:24:78:b9:3c:5b:8e:98:
         f6:fe:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:22 2026 by rpki-client