Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
File:                     qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json)
Hash identifier:          Bp3rpa6llWTLvAMtsqqDwi9joB+9BQ2ap48/LOM/sCA=
Subject key identifier:   12:9E:AF:73:90:E1:2C:91:87:FE:28:B4:E4:81:C2:40:09:AB:AB:B9
Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
Certificate issuer:       /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Certificate serial:       1786
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
Manifest number:          1770
Signing time:             Thu 04 Jun 2026 16:35:21 +0000
Manifest this update:     Thu 04 Jun 2026 16:35:20 +0000
Manifest next update:     Thu 11 Jun 2026 16:35:20 +0000
Files and hashes:         1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: MTtMOlBkcQ15bGIgWlLJdKFlEKwc+LeJ+mQm3274aL4=)
                          2: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: lZtSqEluaQyvKzJzwijqNxqveUY7rB8QQXqYRdPds0g=)
                          3: BAD2356E153411E892E6D468C4F9AE02.roa (hash: Uh0ufQqszTK1hbj5HShNIOMuiOfZ3FBUNVqfFJVggoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
                          rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 16:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6022 (0x1786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
        Validity
            Not Before: Jun  4 16:35:20 2026 GMT
            Not After : Jun 11 16:35:20 2026 GMT
        Subject: CN=6a21a949-9432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:be:ae:22:13:0c:c6:b4:a9:67:d8:5e:3f:
                    d9:44:9b:f5:56:11:86:20:fe:49:99:ae:14:72:04:
                    b3:1d:5f:af:43:cd:4f:ae:3d:20:cb:3d:2a:b4:7a:
                    ab:b6:dd:a7:5d:32:89:d4:11:fe:59:89:fe:23:d4:
                    38:6d:b9:85:c6:ef:2b:5e:9c:82:e5:3a:bf:aa:c3:
                    da:b2:7d:79:cb:d1:5a:98:fe:70:7e:ae:23:36:f7:
                    ba:c9:c3:a0:28:00:b5:8c:68:da:7c:2d:fd:44:3a:
                    cb:41:a6:68:d4:f5:ae:7b:86:c5:18:8b:9d:8b:4b:
                    a5:5d:f9:82:56:89:a3:2d:5b:78:b4:0c:8a:74:58:
                    9a:56:fd:f1:f0:44:41:1e:14:34:a3:62:e3:52:59:
                    bf:bf:82:c0:63:13:6a:f2:0b:92:06:a1:10:33:00:
                    44:8a:70:73:a3:fc:44:d0:8b:2f:46:dd:60:c1:66:
                    16:c5:c0:af:2b:97:61:41:8a:c7:14:67:f3:37:b5:
                    6b:df:c5:55:81:38:6d:b0:cb:3b:48:03:16:7c:ea:
                    cf:dd:fd:9f:fe:d8:92:13:4f:0b:14:ce:9a:2c:c6:
                    34:a1:19:88:5e:34:ff:41:e8:9b:c0:36:c1:d2:d0:
                    ae:8d:d8:57:a3:04:b2:79:12:f7:5f:09:92:92:70:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9E:AF:73:90:E1:2C:91:87:FE:28:B4:E4:81:C2:40:09:AB:AB:B9
            X509v3 Authority Key Identifier:
                keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:4c:17:81:15:08:40:26:db:02:b2:ff:76:d0:b8:32:a1:
         fa:1b:c8:4a:6a:fe:13:4f:70:b6:e7:26:f2:f2:79:48:87:00:
         a7:c4:9f:36:2c:c1:05:05:12:31:2f:cf:04:8c:fd:ea:f9:5c:
         c1:1c:a2:da:52:28:8e:61:7e:00:5a:ca:1c:d9:ff:aa:56:19:
         aa:ef:47:1d:51:8b:c6:1f:3f:77:83:3a:41:f0:45:92:8b:84:
         81:e2:58:c0:86:ff:85:b8:20:8c:66:5b:aa:71:f5:e7:d5:f2:
         09:b2:08:b2:db:97:7a:3e:fd:cf:6e:51:6f:07:20:ea:da:0b:
         61:38:0c:b9:71:b2:7c:25:15:ad:77:d2:13:0e:a5:1d:20:5d:
         05:7e:59:54:4d:73:22:72:59:7f:60:c7:64:e6:26:52:a0:bc:
         0f:d2:9d:3c:29:e6:90:bd:3f:89:45:58:38:b8:95:11:7e:25:
         65:4f:9b:a8:72:0a:15:ae:e3:a5:73:50:ab:c5:1d:aa:0e:fe:
         71:b9:8d:55:c6:93:34:a4:60:a6:cf:84:b7:29:69:a6:01:af:
         e8:2c:d2:5e:40:a8:00:e1:99:cc:ba:da:5c:5c:24:dd:dc:6c:
         11:8d:24:7c:74:41:ec:10:d1:51:45:11:f2:c7:b4:ef:3e:e8:
         65:3d:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:24:44 2026 by rpki-client