Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
File:                     Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json)
Hash identifier:          mSnhYEPcTHjR/zdxDu9er2uY38rmnzl4IzGBl/oLd5o=
Subject key identifier:   5D:06:0C:2F:19:6A:81:49:0D:B2:94:52:90:FF:C7:4F:82:6B:0F:9E
Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C
Certificate issuer:       /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
Certificate serial:       94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
Manifest number:          91
Signing time:             Mon 01 Jun 2026 08:15:37 +0000
Manifest this update:     Mon 01 Jun 2026 08:15:36 +0000
Manifest next update:     Mon 08 Jun 2026 08:15:36 +0000
Files and hashes:         1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: PnMdUarCsvA1hK5BI7qdYt28oCOBgCZUIYTO2+zPwGA=)
                          2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: cPnYWMNQVMlUCzK+IYFg8KOYZlfdR0D1X+BkfCqpA3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl
                          rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
        Validity
            Not Before: Jun  1 08:15:36 2026 GMT
            Not After : Jun  8 08:15:36 2026 GMT
        Subject: CN=6a1d3fa9-04da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:02:ca:7e:8b:1a:23:00:31:fb:20:5c:f9:
                    c0:25:16:95:82:65:ca:a3:67:e0:30:79:ce:93:cc:
                    41:d3:39:5f:07:65:55:3c:05:7c:37:54:b3:c4:d1:
                    79:c1:04:54:7f:4a:07:63:b2:22:a8:57:f4:7d:95:
                    c7:a6:5e:dc:69:29:3e:c4:82:f9:87:ef:ea:3d:12:
                    11:c4:31:b1:d5:99:5f:7c:05:93:8a:4e:54:0e:42:
                    d2:b8:9e:6f:4a:08:d4:61:9a:41:5c:f9:e4:b9:32:
                    c1:1e:58:3e:31:54:15:b2:6c:d2:6c:89:5f:4a:e0:
                    cf:e5:c7:48:47:13:b4:ed:6e:6c:0c:c8:a5:95:34:
                    85:44:3d:7e:d2:d1:00:e9:60:2b:de:85:70:79:70:
                    d8:99:78:76:2a:ce:6f:dc:a2:2e:aa:ee:6c:6c:48:
                    82:a9:69:53:20:b8:ce:3c:f2:4e:56:d3:8d:9d:7e:
                    43:82:2d:e8:26:9a:07:38:87:7f:d7:16:cb:8d:5e:
                    3f:03:39:46:6f:e3:a8:f2:94:74:d5:85:cf:94:e8:
                    ea:ca:9d:d7:ab:8b:f3:22:da:ca:8b:1d:06:a4:35:
                    17:1c:b1:e5:d5:68:20:52:83:f0:04:89:da:46:b1:
                    8f:ef:6a:8c:81:68:ce:a0:97:51:08:c2:aa:94:b0:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:06:0C:2F:19:6A:81:49:0D:B2:94:52:90:FF:C7:4F:82:6B:0F:9E
            X509v3 Authority Key Identifier:
                keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:47:b5:07:c4:2b:92:17:fc:23:aa:11:bb:06:58:e6:e7:7b:
         e1:70:7c:17:65:51:df:ec:17:9c:31:67:66:b9:cd:04:cc:3b:
         6b:ee:d1:27:4a:4a:f5:0b:1d:78:fd:46:b7:bf:69:8d:de:f8:
         0f:0e:c8:88:f7:42:06:ee:97:6b:4b:c7:48:33:8b:ef:45:9d:
         2b:fe:aa:0c:7b:96:d1:d9:cb:3b:5b:28:4e:69:bc:2e:7d:06:
         27:18:3d:cd:1f:6a:13:e6:63:63:df:fa:fe:8f:88:e9:14:f2:
         fa:e3:fc:2c:52:88:4c:36:e1:98:4d:b8:fb:c4:b6:0c:05:47:
         50:6f:35:b7:0f:93:ef:1e:c0:ed:7c:fa:d4:05:5f:d6:ba:23:
         d3:a0:87:84:5d:03:a7:4e:52:14:cd:da:de:0b:fe:19:ef:3f:
         c7:cc:62:dd:b1:b9:cc:f1:74:fe:62:d6:d4:67:f1:5a:98:b0:
         aa:15:ee:b6:74:a8:57:22:06:82:3f:e0:23:8b:61:88:f8:39:
         77:e7:5d:29:dc:ba:3f:e1:cb:0d:83:d5:4b:53:c4:a6:83:4b:
         08:97:3a:b4:58:25:2f:b5:93:ee:62:8a:2a:d1:8b:4a:3e:5d:
         cd:f1:85:66:ca:12:75:e7:a3:ce:86:6f:1d:b5:57:f7:e8:3e:
         c5:fa:4f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:32 2026 by rpki-client