Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File:                     -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier:          McK3knjSH/41sfEoLY/6uATadXPLuzTSvD/p5oXaTSo=
Subject key identifier:   C9:64:E0:A8:E4:CC:FA:47:03:B6:84:08:9E:13:FF:AA:BB:62:AD:E3
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer:       /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial:       0490
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number:          0482
Signing time:             Thu 11 Jun 2026 02:12:34 +0000
Manifest this update:     Thu 11 Jun 2026 02:12:34 +0000
Manifest next update:     Thu 18 Jun 2026 02:12:34 +0000
Files and hashes:         1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: ukBiJ2BEkFtf+Com0Wv4WzzUtCoTYr0u7ZrZdXlZg+c=)
                          2: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
                          3: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 02:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
        Validity
            Not Before: Jun 11 02:12:34 2026 GMT
            Not After : Jun 18 02:12:34 2026 GMT
        Subject: CN=6a2a1992-35b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:b3:0c:a8:2d:a8:42:f0:4b:3c:c6:48:4c:
                    71:fe:b5:4f:92:bb:b3:d9:34:9f:17:66:35:e7:c2:
                    ad:27:99:5c:eb:89:60:75:92:b8:8d:76:d5:03:89:
                    eb:21:66:82:f9:91:07:6f:18:12:1e:c5:e2:48:a3:
                    04:e7:5e:00:06:93:34:c9:86:14:63:67:69:e2:2e:
                    19:3d:e0:cf:7b:6a:70:dc:52:7f:b1:1e:e5:22:07:
                    54:a7:4f:71:b6:5a:65:fe:65:82:fa:39:6b:7e:75:
                    37:27:cc:2d:1f:41:9a:5b:a4:b7:56:d2:d9:9f:3b:
                    e3:21:18:ba:34:e3:92:0f:e8:53:b3:cf:d1:1a:26:
                    f2:6f:ac:2a:8e:12:27:f2:e7:d3:d4:b3:c3:56:5e:
                    40:86:a4:fb:77:59:1b:1a:d9:ff:de:75:30:84:71:
                    31:a7:3b:35:a1:59:5e:73:5b:7f:a7:02:84:b5:82:
                    2b:51:50:a8:c5:5f:88:d8:7b:29:5c:2d:5b:94:ed:
                    26:9a:25:fb:9c:dc:a9:97:8a:df:b3:f2:dd:ef:34:
                    b7:a9:9f:f1:97:91:d2:cc:9c:6f:37:18:a6:e2:c5:
                    66:29:16:ae:03:2e:a2:31:6c:bf:dd:60:15:27:b3:
                    86:ae:ac:54:68:96:6f:09:8d:b4:8a:f2:b0:ba:c9:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:64:E0:A8:E4:CC:FA:47:03:B6:84:08:9E:13:FF:AA:BB:62:AD:E3
            X509v3 Authority Key Identifier:
                keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:09:ec:85:92:0d:e6:01:3c:c3:10:91:df:57:60:92:24:
         4a:db:de:64:a1:8f:a3:f4:2b:d7:a9:1f:e8:19:1f:0e:35:42:
         dc:4a:e6:4a:7d:b3:c7:b5:47:82:1c:09:a0:45:18:b6:ee:c0:
         d1:a3:75:10:6c:95:b3:55:6f:7d:b0:24:32:b3:dd:9a:a0:fc:
         08:9e:69:bd:60:e7:59:fd:48:a3:3d:90:28:8c:bc:96:e4:f8:
         c5:c3:f4:59:55:13:cc:8e:8a:30:24:64:30:1b:cf:78:98:4f:
         64:7d:2c:00:82:3c:85:47:9a:3e:26:9c:cd:31:44:74:ee:0d:
         a1:66:ff:26:e5:06:95:61:6c:37:4d:36:49:8f:22:c0:dc:f7:
         06:fe:75:b4:a3:79:c1:3b:60:37:3c:88:0d:ea:b1:bf:6f:60:
         b5:b2:a1:d1:e0:de:94:fc:99:4f:58:a3:f7:f7:c6:8e:38:a9:
         c7:a9:8c:17:fb:37:bb:e4:38:6a:e0:78:f2:7d:17:3b:b2:59:
         a2:a8:6e:38:1c:f9:17:48:ae:32:04:6b:c5:12:26:35:9c:c0:
         7f:2f:c5:fb:0d:ed:0e:3f:2c:6f:b0:63:5e:1d:11:06:15:f2:
         f7:e7:98:9f:9f:df:5d:18:82:a8:e8:05:30:ac:be:5c:c1:f4:
         7e:53:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:36:58 2026 by rpki-client