Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File:                     qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier:          tRmSCrIrJxg7rKy4MuIC16SwiHZaKrJF1PoIZlu+m28=
Subject key identifier:   C3:6E:9A:58:FC:AC:2D:82:98:6A:E8:E3:02:FF:41:5B:02:4B:3A:75
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer:       /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial:       0B90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number:          0B7F
Signing time:             Wed 20 May 2026 19:11:25 +0000
Manifest this update:     Wed 20 May 2026 19:11:25 +0000
Manifest next update:     Wed 27 May 2026 19:11:25 +0000
Files and hashes:         1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: boNQbQ4I655yoCwWbaFFvoEpgtLyoKYqct362rl0+RM=)
                          2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
                          rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2960 (0xb90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
        Validity
            Not Before: May 20 19:11:25 2026 GMT
            Not After : May 27 19:11:25 2026 GMT
        Subject: CN=6a0e075d-9f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:82:f7:e8:b0:e7:39:60:80:7f:24:07:89:
                    42:c0:9d:cd:2d:ff:0a:2e:89:44:83:9c:bd:27:94:
                    58:fd:51:39:97:85:6d:57:b4:6e:b4:aa:26:34:3d:
                    6d:9e:67:78:ec:ee:ed:61:9e:35:02:9c:7c:a7:96:
                    a7:e6:9d:eb:a5:8d:1c:4f:28:55:9c:13:20:62:67:
                    d7:1d:e0:92:6f:0a:96:28:d4:ff:08:7b:40:38:6d:
                    f7:eb:8b:42:e4:ec:97:80:83:39:8b:29:1b:52:29:
                    21:44:d9:03:28:52:e8:08:a1:2e:5e:bb:9e:c7:e1:
                    5a:19:80:c1:b9:29:81:e7:38:bb:06:06:40:af:cb:
                    33:aa:80:c1:b2:f5:da:8c:da:4d:ec:42:37:fb:6b:
                    04:74:b7:e6:36:cb:6b:6f:99:08:e3:ca:0e:3f:f5:
                    a4:99:8b:e5:e8:74:44:99:2c:bc:5b:7c:c5:b0:67:
                    54:52:60:c7:37:6a:15:9e:d8:d3:6e:70:0d:c3:8d:
                    a6:14:df:cb:af:c3:1c:3f:96:74:6e:ad:8c:11:ec:
                    73:84:aa:8d:8b:83:60:7f:ba:d9:be:d6:e7:01:19:
                    ec:72:48:d5:a3:af:20:05:e4:62:50:79:81:9c:d5:
                    d1:ec:90:b6:ad:5e:6d:1f:cd:45:14:d0:6e:15:b1:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6E:9A:58:FC:AC:2D:82:98:6A:E8:E3:02:FF:41:5B:02:4B:3A:75
            X509v3 Authority Key Identifier:
                keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:92:72:d5:4d:72:60:48:cc:b4:02:98:be:ff:f8:19:e6:3c:
         fb:80:25:a1:e5:5c:08:ab:5b:9e:97:03:68:99:c8:ac:35:df:
         55:ce:2e:ce:fa:97:4e:f8:ed:a7:3d:e3:83:8e:71:d1:9e:36:
         2c:3c:94:cc:1b:8c:2b:7e:c0:c8:1d:45:54:a8:df:c3:5f:92:
         5b:10:1e:07:fb:79:24:66:6a:fb:59:43:00:32:59:6d:1d:8c:
         4f:5b:cc:f9:ad:35:b1:46:5a:e2:18:8d:c5:70:16:b2:b7:40:
         41:f8:a5:d5:f0:9b:81:6c:d7:a4:73:77:af:43:a8:9f:1a:b8:
         df:85:0b:a4:93:11:d0:2d:08:0f:4e:b0:71:ae:5d:65:62:07:
         7b:b7:d9:53:59:86:b8:9b:da:fd:63:eb:76:9c:85:5e:3f:66:
         32:93:ea:28:11:10:09:1b:9c:dc:0d:68:29:d4:0d:db:b9:1c:
         5e:b7:dd:9c:59:3b:92:c1:47:5e:c7:04:0a:1f:11:46:5c:40:
         f9:6d:7b:53:4b:11:c6:cd:43:1f:38:6c:3c:fb:47:7a:1b:cf:
         7a:c6:7f:30:bc:cf:20:3a:f0:c3:3f:fb:5c:85:75:61:58:ea:
         3a:80:37:d9:01:ca:8b:e1:6c:90:63:2e:bd:3e:cf:42:40:a6:
         0f:35:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:04:23 2026 by rpki-client