Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
File:                     MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft (raw, json)
Hash identifier:          fbl2hkp9YSj4nSkcPxvGLkiYm7cLzPdOvnCzpFAPvk8=
Subject key identifier:   16:E4:F4:CF:0B:B3:47:CE:DF:D9:B0:D7:9C:1D:F1:03:1E:4B:41:CF
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Certificate issuer:       /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial:       1A34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
Manifest number:          1A0E
Signing time:             Wed 20 May 2026 16:21:48 +0000
Manifest this update:     Wed 20 May 2026 16:21:47 +0000
Manifest next update:     Wed 27 May 2026 16:21:47 +0000
Files and hashes:         1: MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl (hash: eRWX5QFCLypH47ruvYz6+EpG2O5ktgJgVConeooTgNE=)
                          2: 936822385BDA11EF98C26511C4F9AE02.roa (hash: dwoWpYOI6PUpnQH36666TWFcSYXgXewa8q9iJsyb4wI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
                          rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6708 (0x1a34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
        Validity
            Not Before: May 20 16:21:47 2026 GMT
            Not After : May 27 16:21:47 2026 GMT
        Subject: CN=6a0ddf9b-7ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:10:e0:8d:53:47:7c:db:58:be:28:54:ca:
                    ae:97:85:ac:b8:8a:15:33:22:a8:b8:e8:07:b8:e5:
                    1d:80:24:ee:b8:1c:62:38:18:b0:93:b5:04:e1:30:
                    59:77:b0:98:0f:99:0f:a7:38:82:6c:db:27:2a:6b:
                    70:cb:b7:f6:dd:b0:ba:90:ed:89:07:e1:b7:4d:46:
                    7d:d7:a7:d9:8e:9c:30:3a:60:60:14:9e:7d:ec:bc:
                    67:50:3a:f9:3f:4b:ba:83:0f:fd:70:30:f7:6b:08:
                    82:42:b6:cb:18:9b:e4:e8:b7:91:8c:8b:ff:09:95:
                    e4:12:98:bf:79:54:12:af:34:44:07:dc:35:be:94:
                    c0:ec:88:5c:49:7a:a4:fb:da:46:df:9d:6c:44:d0:
                    06:be:df:65:62:fb:ad:10:52:e3:2b:e4:09:3b:df:
                    b1:10:e7:5c:f3:06:fd:c0:79:cb:ff:e4:e5:18:b3:
                    7c:6e:ce:c0:69:d1:32:c2:16:ba:b8:e6:5e:af:2d:
                    d6:e8:69:35:d4:76:00:b4:ec:cb:ce:4b:d3:56:31:
                    da:ee:2d:d2:39:5a:9c:05:8f:7c:b0:10:6e:4b:64:
                    59:20:ef:c6:95:8b:50:06:4c:37:d5:d5:30:57:98:
                    60:61:95:db:96:35:49:63:87:f2:10:59:91:0b:83:
                    b2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E4:F4:CF:0B:B3:47:CE:DF:D9:B0:D7:9C:1D:F1:03:1E:4B:41:CF
            X509v3 Authority Key Identifier:
                keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:71:59:45:1c:09:1a:a1:95:ff:f6:e5:78:d2:25:87:2e:
         f7:a3:b1:8a:36:ed:95:8d:51:4d:3f:10:d3:f2:6a:29:c5:af:
         88:e7:9a:b3:4a:bc:4a:44:f3:a0:7d:44:98:ef:c1:2a:b5:26:
         fc:16:29:46:8a:b6:81:4c:e2:b2:68:0e:4e:64:98:60:94:86:
         64:18:87:5a:39:1a:94:dd:4b:68:25:fd:b1:00:ff:2c:26:d7:
         7e:19:78:15:47:08:07:4f:52:e0:68:2a:b9:78:a2:fb:8e:52:
         31:de:d5:c7:7c:dc:d8:53:0b:6f:99:04:24:65:c7:4c:02:22:
         32:c0:e8:7b:7e:bd:a1:54:f9:20:56:88:5f:d2:ed:81:76:18:
         9f:53:3d:d4:07:8d:bf:9f:2d:2d:78:42:5c:f0:62:70:ac:27:
         bb:39:49:e5:ca:95:ec:66:e4:dc:3a:45:9b:67:99:ff:bd:ff:
         02:3f:75:db:51:27:20:b9:3f:27:a5:30:0b:1a:4c:ad:65:95:
         27:a4:ca:39:e4:59:d7:2c:db:33:82:5c:da:01:e5:2c:ec:c1:
         67:91:40:b5:75:55:55:9c:55:c0:e6:97:16:b2:b0:b9:ca:f8:
         ee:47:70:fa:1d:e3:d3:cc:68:71:f6:aa:3d:38:c4:e0:29:e4:
         4a:de:3b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:45 2026 by rpki-client