Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
File:                     qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json)
Hash identifier:          th4TmtWiHKthBURrVTeKPVl9Zaam8hEukpenCoWYCgQ=
Subject key identifier:   8C:5E:B9:93:D4:30:05:F2:AC:5C:CF:80:8D:9B:7E:51:89:DF:57:E2
Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29
Certificate issuer:       /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
Certificate serial:       06B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
Manifest number:          06A9
Signing time:             Wed 20 May 2026 22:25:59 +0000
Manifest this update:     Wed 20 May 2026 22:25:58 +0000
Manifest next update:     Wed 27 May 2026 22:25:58 +0000
Files and hashes:         1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: WkgHEnakZt/FB+zMd54bwtKuJC+GkGBz9y6No4kUXPQ=)
                          2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: /ULmSnSTdH0/f1q4tjs1akmKQxqjyakkSOX6RXEjmGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BE1, serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
        Validity
            Not Before: May 20 22:25:58 2026 GMT
            Not After : May 27 22:25:58 2026 GMT
        Subject: CN=6a0e34f7-e9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9c:f3:61:bc:be:ef:af:4c:af:4a:b6:af:1f:
                    44:fe:2b:37:a5:a6:ae:19:39:cb:a5:15:47:08:a6:
                    44:fb:65:ca:50:5c:0a:f7:01:ed:47:fe:5f:76:67:
                    43:95:c2:d2:30:54:34:25:3c:ce:0c:54:6a:bb:41:
                    6c:7d:ac:13:10:c8:60:2f:c3:9c:ef:ac:5c:b8:44:
                    ca:71:ac:0b:3f:ad:8e:2f:68:9c:60:42:62:a4:f1:
                    6f:54:0b:38:84:38:29:6e:f1:5c:71:7c:aa:22:0e:
                    8f:20:5a:00:62:f6:c7:3a:59:41:67:7f:39:9e:25:
                    6b:2d:e3:ca:35:63:3d:84:04:1e:09:5a:19:cd:4a:
                    ba:4e:9b:97:d0:4f:81:cf:f4:a5:f4:c8:7b:a2:86:
                    63:c5:12:57:79:b1:20:eb:8d:35:5e:c4:06:79:c6:
                    58:e3:3a:00:ac:81:61:93:c7:b2:94:c1:8a:aa:35:
                    fc:c2:95:c4:c6:ae:45:27:20:d7:a9:42:ef:29:72:
                    84:b7:1f:7c:ec:1f:b0:00:63:40:25:ce:b5:de:be:
                    78:d8:e3:4f:7f:a4:77:c9:d8:95:0c:e1:d8:6e:31:
                    3c:6a:1f:c9:c1:84:1e:68:c8:15:5f:2d:ed:ea:e3:
                    ed:6f:bc:c6:9f:db:e7:42:1d:6f:51:c3:16:c9:f4:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:B9:93:D4:30:05:F2:AC:5C:CF:80:8D:9B:7E:51:89:DF:57:E2
            X509v3 Authority Key Identifier:
                keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:03:01:7b:68:2b:29:8f:32:74:60:7c:84:62:bc:7b:bf:bb:
         dd:18:72:d5:e7:cc:5e:9e:45:e0:8d:0b:bd:66:c7:19:48:ff:
         40:d3:59:c9:88:a1:0c:b5:81:1a:61:61:b0:93:19:69:7f:1e:
         06:51:ed:9f:b3:85:f3:2a:d3:f9:a4:41:b6:58:cd:0c:94:4e:
         e4:37:de:60:bf:05:f8:27:ac:c8:3b:5b:94:e2:c8:ef:d8:e7:
         2c:57:ee:39:05:d8:20:75:28:9d:9e:36:89:83:ef:36:36:5c:
         d0:ff:87:8e:15:31:2b:25:e4:0d:62:16:d4:42:c7:bf:16:6f:
         70:7f:52:39:e3:af:20:14:d3:13:e5:37:00:fe:3a:f4:b7:78:
         02:8c:e1:59:79:33:11:26:d6:f9:b4:98:6d:9f:26:36:10:8d:
         32:7d:e4:4b:ea:c0:ac:7b:e8:8b:49:3e:c7:ff:f0:6f:98:ea:
         0f:dc:f3:a5:4b:15:56:6c:ea:12:3c:fa:0a:3b:74:bf:b3:a3:
         37:6d:9e:0f:f1:19:66:44:52:c1:e5:58:c5:7b:ab:9c:a5:3b:
         0e:74:e6:f1:eb:3a:d3:36:42:32:b4:f7:c8:8f:9c:19:0d:a1:
         16:dc:60:ca:d0:6f:37:db:3a:01:76:6f:ba:6e:3a:6e:ee:ee:
         9d:d4:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:22 2026 by rpki-client