Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          hWQ+g0LcWiD5+SZvaGYEXLE9Pne7Df6Cz/k7dAn/yQg=
Subject key identifier:   DB:AF:75:F3:19:BE:52:B6:95:6F:3C:A9:1B:36:DA:67:A8:A2:9A:DF
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1CC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1C9B
Signing time:             Tue 02 Jun 2026 16:11:45 +0000
Manifest this update:     Tue 02 Jun 2026 16:11:44 +0000
Manifest next update:     Tue 09 Jun 2026 16:11:44 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: YxzSvuoAtGOpjGe9jkAaIDwUW6sdOvZP1PKGPFz/UFU=)
                          2: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: QLCbgoMVS3G9VHYM06+C4WObA6B/KseYMNiE38jKgGw=)
                          3: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: EvrlKUJ7eCvu6YP+MtDTuqMrMSZ2GeflApGRKT/txT4=)
                          4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: wBGm4fFHkS0MsUDVoFS2mN9ly3H+yMyEnIGfWIGaVpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7363 (0x1cc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Jun  2 16:11:44 2026 GMT
            Not After : Jun  9 16:11:44 2026 GMT
        Subject: CN=6a1f00c0-25b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:ca:cf:ae:02:1a:2c:7a:9a:86:98:b2:06:
                    39:4b:e6:06:f7:85:6f:17:14:a6:73:b2:d6:56:fb:
                    fe:29:8a:e2:8b:e6:c2:b2:97:29:1e:a9:18:5a:a9:
                    66:4a:45:10:bb:e7:56:6e:45:fe:e3:31:43:c6:35:
                    82:dc:51:5b:e8:d0:b7:24:33:31:e7:a0:02:1c:08:
                    c6:05:81:e9:70:71:67:8e:55:78:ee:b6:7e:3c:14:
                    40:cf:99:61:1a:68:35:73:07:44:2b:36:f9:8b:93:
                    2f:e0:7c:67:5e:08:b6:45:c3:d9:e4:78:48:8e:ca:
                    83:24:d9:bb:2a:94:d8:6d:33:16:74:44:f0:8a:52:
                    c1:a0:98:77:3b:84:2c:54:ec:10:ca:c3:49:a3:dd:
                    8a:21:23:58:c2:28:39:7d:66:cc:67:db:43:b6:83:
                    b4:a7:ce:e0:a9:0c:29:c2:1d:00:a5:34:33:0b:03:
                    4c:37:9c:b8:95:7e:43:91:f7:32:aa:5a:79:9c:81:
                    7b:f6:fc:b7:b2:5e:c4:c7:68:39:4b:57:51:92:b5:
                    98:9e:74:c4:ce:04:53:6e:ab:17:55:33:30:a9:c2:
                    43:29:d1:3f:39:e0:11:d0:e3:cb:e4:48:f6:2c:19:
                    4e:16:04:fd:68:93:94:de:47:cd:86:ba:ec:9e:84:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AF:75:F3:19:BE:52:B6:95:6F:3C:A9:1B:36:DA:67:A8:A2:9A:DF
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:12:f1:a1:09:95:87:f7:9e:6b:90:ed:24:01:bc:07:0c:
         f3:84:2a:0c:4a:75:00:fa:04:81:a8:86:34:ab:43:18:8d:e9:
         4a:e1:b8:bd:f8:3d:42:dd:83:70:f2:cc:51:34:ec:cb:75:82:
         61:30:42:e8:66:b3:6a:08:e9:f5:e8:94:14:c9:e9:68:ef:71:
         04:f2:5c:e3:2f:b7:8f:9c:90:76:4f:b3:bb:e7:6c:52:fd:0b:
         fa:63:27:c1:30:4c:ab:f1:85:c9:bf:68:d1:ee:fa:8e:0b:a0:
         ce:80:ab:1e:4a:b0:c8:86:c7:d1:f0:f6:48:8b:75:3a:12:97:
         39:25:c3:c0:a0:06:f2:ac:8d:87:cc:cf:a4:ce:01:1a:7c:85:
         f2:f0:72:28:f8:1b:93:cf:e9:e2:35:30:03:2c:5a:5c:ff:e5:
         76:ae:47:4b:87:f5:f7:8e:57:01:d7:f5:83:e6:a7:a2:a4:8a:
         cd:10:cb:0d:c5:45:9e:e1:58:00:29:1a:1b:17:8d:e5:f8:9d:
         c4:7f:9a:43:d4:36:e0:22:f3:7c:1c:57:95:af:6b:9b:e0:76:
         fc:cc:58:bd:95:6b:a8:f3:49:4b:15:9d:79:db:ad:14:3a:53:
         8c:23:fc:87:d4:dc:ae:34:a7:84:74:40:0b:2e:fd:7b:15:5f:
         aa:16:d4:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB
OEE0QjdERUEwHhcNMjYwNjAyMTYxMTQ0WhcNMjYwNjA5MTYxMTQ0WjAYMRYwFAYD
VQQDEw02YTFmMDBjMC0yNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpPKz64CGix6moaYsgY5S+YG94VvFxSmc7LWVvv+KYrii+bCspcpHqkYWqlm
SkUQu+dWbkX+4zFDxjWC3FFb6NC3JDMx56ACHAjGBYHpcHFnjlV47rZ+PBRAz5lh
Gmg1cwdEKzb5i5Mv4HxnXgi2RcPZ5HhIjsqDJNm7KpTYbTMWdETwilLBoJh3O4Qs
VOwQysNJo92KISNYwig5fWbMZ9tDtoO0p87gqQwpwh0ApTQzCwNMN5y4lX5Dkfcy
qlp5nIF79vy3sl7Ex2g5S1dRkrWYnnTEzgRTbqsXVTMwqcJDKdE/OeAR0OPL5Ej2
LBlOFgT9aJOU3kfNhrrsnoQD8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuvdfMZ
vlK2lW88qRs22meooprfMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD
QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1
eFVJNnZfZEhncmlvcExmZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg/wS8aEJlYf3nmuQ7SQBvAcM84QqDEp1APoEgaiGNKtDGI3pSuG4vfg9Qt2D
cPLMUTTsy3WCYTBC6Gazagjp9eiUFMnpaO9xBPJc4y+3j5yQdk+zu+dsUv0L+mMn
wTBMq/GFyb9o0e76jgugzoCrHkqwyIbH0fD2SIt1OhKXOSXDwKAG8qyNh8zPpM4B
GnyF8vByKPgbk8/p4jUwAyxaXP/ldq5HS4f1945XAdf1g+anoqSKzRDLDcVFnuFY
ACkaGxeN5fidxH+aQ9Q24CLzfBxXla9rm+B2/MxYvZVrqPNJSxWdedutFDpTjCP8
h9TcrjSnhHRACy79exVfqhbUag==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:06 2026 by rpki-client