Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
File:                     5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json)
Hash identifier:          Dr2Pt2x40y9bb+KZX+IRf9sdykMYCqGNecH6+w0M/TA=
Subject key identifier:   CF:4B:D9:42:6F:C3:E4:1E:1D:51:BC:7C:2F:36:DD:A8:AA:4E:8B:4B
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Certificate issuer:       /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial:       0354
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
Manifest number:          034F
Signing time:             Tue 23 Jun 2026 01:02:00 +0000
Manifest this update:     Tue 23 Jun 2026 01:02:00 +0000
Manifest next update:     Tue 30 Jun 2026 01:02:00 +0000
Files and hashes:         1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: pP9QjniGC5HzQ2+t/KeqRZJAChdEjEMwzfZPBf2PpiI=)
                          2: E757164C074511EDB229157DC4F9AE02.roa (hash: Bjnc4EakQapdCARIIa5nan+FIy1tiCXArToRM95Qc7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
                          rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 01:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
        Validity
            Not Before: Jun 23 01:02:00 2026 GMT
            Not After : Jun 30 01:02:00 2026 GMT
        Subject: CN=6a39db08-e44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:28:58:5f:f7:64:58:70:6f:32:a9:4f:c7:
                    18:01:89:85:0f:ab:70:4f:da:d2:4f:be:88:4f:ee:
                    df:00:3d:b6:65:9a:1b:37:16:f0:e3:69:96:4a:42:
                    1e:e2:99:a0:f4:e5:98:99:ab:83:3b:0a:a8:f6:57:
                    6a:a3:5e:8c:13:98:9d:ff:44:8c:27:e9:d7:17:66:
                    c6:30:b4:9f:5d:f7:43:5e:dc:17:57:fa:9f:ae:90:
                    c2:6e:3f:bd:60:f7:40:c0:4f:20:c1:24:d3:21:37:
                    8b:e7:52:b3:01:65:1f:b4:15:11:50:13:c8:83:80:
                    e7:7c:15:b6:13:18:5e:a5:83:15:49:a8:69:12:98:
                    50:25:87:36:3f:99:83:df:9f:36:e9:9e:45:d4:ca:
                    e6:1b:78:61:40:b6:a5:5b:aa:d3:d4:cf:18:19:fa:
                    91:0d:8c:e3:6b:8b:18:71:dd:4e:7b:41:15:e2:17:
                    2c:22:8e:c9:02:49:cb:85:a8:28:08:4a:d6:82:70:
                    9e:f2:86:98:37:0d:b8:f3:b2:f2:70:f8:d7:89:27:
                    a3:e6:5d:35:21:cf:d7:21:64:3d:ed:fb:79:0a:5a:
                    5a:82:88:9f:2f:85:fe:7b:28:ed:d3:2f:f4:45:36:
                    ba:32:ef:6d:2b:0c:be:a9:d6:ce:7c:0b:57:9d:1f:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4B:D9:42:6F:C3:E4:1E:1D:51:BC:7C:2F:36:DD:A8:AA:4E:8B:4B
            X509v3 Authority Key Identifier:
                keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9c:b3:f8:db:f3:6b:a7:e8:1b:44:46:e5:9a:5c:a7:7d:a4:
         72:67:28:5a:f6:e8:11:0f:ff:9f:5c:0d:84:ae:7f:26:a1:6d:
         3c:b0:21:ee:6a:a0:4b:78:35:e3:29:bd:2f:41:43:11:80:ca:
         da:b3:62:0a:06:d1:e7:22:e3:25:53:ce:f2:c7:12:19:bc:d2:
         16:fc:8c:3d:aa:19:e7:e4:5d:4c:c7:9d:56:08:85:19:cd:e0:
         4b:83:5d:45:31:fe:82:36:80:77:1f:5f:15:f3:82:f8:07:8c:
         73:35:cb:1d:56:f6:ac:1b:9c:0f:36:0d:db:61:9f:f9:cf:5a:
         bd:46:80:de:18:63:a7:26:99:ae:80:f2:8c:53:e1:e5:fc:9a:
         fe:ed:1a:60:b1:6c:ee:96:83:1a:f7:0c:ca:34:39:a5:9b:78:
         43:f5:26:3a:b8:60:34:a6:ce:fa:24:97:ed:78:fc:1b:cf:18:
         51:ae:65:15:0e:60:2e:2f:b9:0d:6a:e7:d4:c8:40:97:27:2c:
         d7:fd:97:81:37:35:07:79:4b:08:e3:8f:4a:08:d5:7b:d4:7c:
         08:68:8c:1b:6a:9e:4d:0d:4c:a8:93:ba:78:fd:17:37:48:72:
         45:d8:bc:87:8a:43:75:47:0a:6d:1d:82:31:46:8d:8a:ea:40:
         40:db:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:51 2026 by rpki-client