Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File:                     qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier:          A7qt6qks4Slo2kVgCgsrm5suogqMPgkzCPhVy5P6cec=
Subject key identifier:   79:35:55:BA:06:7A:5B:7F:11:C6:D7:9B:B9:F5:00:7A:BF:EC:67:BC
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       02C5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number:          02B8
Signing time:             Thu 04 Jun 2026 21:58:25 +0000
Manifest this update:     Thu 04 Jun 2026 21:58:24 +0000
Manifest next update:     Thu 11 Jun 2026 21:58:24 +0000
Files and hashes:         1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: Rkeg/fdXwtYXa9jeXHBepZrJea7hJ/KfYn3J6ps2Jo0=)
                          2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
                          3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 21:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Jun  4 21:58:24 2026 GMT
            Not After : Jun 11 21:58:24 2026 GMT
        Subject: CN=6a21f501-00d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:89:a2:1b:4a:73:28:57:94:88:57:f2:22:
                    82:3d:4a:ad:20:2e:ae:4c:50:59:4e:63:25:59:6f:
                    91:5c:29:c1:8a:51:d5:8c:84:3b:80:a1:b6:7b:43:
                    6a:75:0e:63:a8:d8:ed:79:32:4a:59:39:fb:a4:67:
                    a0:9d:03:3e:a4:3d:16:55:e6:a1:bf:4e:bb:cf:d9:
                    64:6a:73:7c:e5:dd:98:d5:19:bf:80:8e:ff:1c:8b:
                    0d:28:81:6c:a8:c5:66:6e:b0:7d:eb:dd:9b:74:db:
                    19:61:29:68:72:f1:62:d8:3e:92:59:16:39:73:8f:
                    e8:84:fa:77:54:f5:eb:ef:a3:10:75:b5:da:7a:4e:
                    74:6e:b1:2f:25:93:1e:4e:cb:99:04:52:54:82:36:
                    84:d4:f7:b3:c1:19:be:7e:91:a0:95:78:ab:86:52:
                    bc:db:cb:12:42:23:8e:24:76:b6:25:27:5d:eb:0e:
                    e2:5d:09:f0:7d:0e:48:ac:31:07:b4:4e:5c:a6:8d:
                    65:03:3d:03:74:a7:15:29:52:18:03:8a:64:ae:7a:
                    fe:0e:35:8b:16:97:e9:cf:34:ea:77:c3:0d:85:ee:
                    c8:d3:03:f3:94:c4:a7:32:b4:a0:b5:e2:34:e6:22:
                    38:ad:e5:39:a9:54:bf:8a:ef:b8:4c:4e:d7:51:69:
                    f7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:35:55:BA:06:7A:5B:7F:11:C6:D7:9B:B9:F5:00:7A:BF:EC:67:BC
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:59:27:99:ef:73:c6:b2:b9:ab:a6:88:a0:52:3d:2a:ff:92:
         74:5a:a7:78:3a:9b:82:3a:f7:50:63:ab:12:23:65:35:38:d8:
         75:5e:a3:05:d8:6f:ef:36:d0:4a:38:7f:a3:87:95:92:a4:1d:
         24:69:30:f9:ba:3f:d4:a4:ff:78:30:98:a7:01:c6:f3:68:08:
         f7:b0:62:9f:9a:71:ad:77:19:8b:5c:bf:86:be:37:0f:21:05:
         6e:11:b0:20:6b:cd:b3:88:fe:fa:1b:27:ef:bf:55:ad:d0:3b:
         ac:aa:e4:34:f6:02:a5:fb:b2:ad:7b:5a:81:2e:d3:f7:a8:68:
         1c:a9:c9:17:0f:ce:ac:1e:f5:a3:5e:e2:38:15:d5:9d:ab:8a:
         96:45:f9:6d:0c:84:45:63:93:0c:58:c2:33:e8:57:e5:fb:8c:
         e3:24:0f:17:25:1c:a9:1b:19:09:b1:d6:c3:41:cf:42:b2:7c:
         68:60:fa:06:05:d4:54:4d:ad:14:6b:d7:4c:be:e2:c3:83:d0:
         d1:3b:33:d6:47:bc:a6:a9:4a:2b:ae:27:44:ea:38:88:99:89:
         06:3b:74:b6:5a:b0:64:7c:e1:04:ca:c5:59:8b:59:f0:1d:6a:
         4b:29:60:ad:04:b1:63:d7:17:91:3b:ca:88:aa:0e:9c:66:2f:
         4b:c4:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:15 2026 by rpki-client