Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
File:                     lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json)
Hash identifier:          tqu9yDo28dR1rt2+LadoRXxTpqOBd/R/rFVKNGH9zU0=
Subject key identifier:   E2:70:BB:75:54:43:DE:ED:36:43:65:BB:6A:41:C4:FF:27:CF:14:49
Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3
Certificate issuer:       /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3
Certificate serial:       0773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
Manifest number:          12A3
Signing time:             Mon 22 Jun 2026 17:01:23 +0000
Manifest this update:     Mon 22 Jun 2026 17:01:22 +0000
Manifest next update:     Mon 29 Jun 2026 17:01:22 +0000
Files and hashes:         1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: J5d1kCeZs7wuzZMJtTsVvcXZLff3u5RHylF9TkZ9E68=)
                          2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: Fr+3c6RpSKSYZINS3tB5kOz0vDzbNjiqKIyeQ9IGWSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl
                          rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3
        Validity
            Not Before: Jun 22 17:01:22 2026 GMT
            Not After : Jun 29 17:01:22 2026 GMT
        Subject: CN=6a396a63-b0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:7d:2e:e7:c5:ca:96:1d:19:3a:d7:0b:ef:
                    6c:1a:bf:fc:b3:59:63:56:86:5c:cf:63:2c:72:c9:
                    8e:c0:31:5b:65:28:dc:1d:57:0d:71:ff:0f:2c:10:
                    97:b0:85:6b:84:ca:ff:1e:8d:7d:ae:c4:a1:ec:00:
                    21:72:c4:c9:ac:59:5e:1b:cf:e8:5b:11:18:7a:71:
                    de:e3:90:a3:8c:33:05:bf:89:9b:c8:4a:63:70:a8:
                    cc:d5:a8:98:6d:68:36:ed:93:7b:59:7b:df:37:fb:
                    d5:a8:84:1a:ee:31:84:76:f3:5c:5a:8f:2e:50:ad:
                    6e:06:d0:a0:f6:4d:fb:f9:67:55:b0:ee:db:5c:3c:
                    59:71:26:cf:36:d4:0f:0f:54:31:63:db:3e:8d:7a:
                    4e:33:12:cf:74:4b:7d:22:06:da:4b:5d:af:18:de:
                    b7:31:dc:bd:b6:92:8a:ac:7f:e4:da:08:34:1c:73:
                    da:0f:e4:04:72:f3:3c:73:28:5c:f0:50:13:c7:02:
                    34:9e:8f:b8:b2:a3:45:fa:73:aa:49:66:b4:0f:d9:
                    6d:f3:e8:cf:62:97:e2:1e:7f:f5:2a:b6:fd:8b:f6:
                    14:b8:b6:2f:83:ea:02:94:7a:98:44:75:fd:6b:4c:
                    0f:93:b2:f3:50:f8:3f:c9:55:26:ff:e5:49:c5:85:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:70:BB:75:54:43:DE:ED:36:43:65:BB:6A:41:C4:FF:27:CF:14:49
            X509v3 Authority Key Identifier:
                keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:3d:85:db:84:68:d6:4a:35:16:3a:89:ca:25:bf:09:c7:
         88:fd:40:d6:c4:48:8b:69:4c:50:9f:95:7f:85:58:af:57:a5:
         20:38:16:d7:13:70:7c:68:61:5f:4b:be:9e:ea:8b:d0:17:47:
         7e:df:3b:12:93:00:11:87:79:26:9d:d9:e9:d8:b6:ae:28:62:
         77:86:7f:04:bc:49:f5:5e:ea:05:56:47:fd:64:34:1a:47:96:
         32:ac:4a:8a:35:c5:f3:06:c0:a2:34:50:14:28:10:63:3b:bc:
         a8:94:d6:d5:37:21:73:8c:e4:c9:41:50:33:77:f0:2d:51:e7:
         ed:a0:4a:8a:82:9d:04:1d:02:17:e6:47:9c:2e:e5:3a:38:34:
         98:f0:be:2e:f9:eb:99:f1:f9:e5:37:0f:2f:99:72:b3:06:a9:
         1a:03:71:47:48:c5:89:25:23:3c:ab:31:8a:70:77:2b:0b:f1:
         90:3e:db:ff:d5:04:ea:ef:a0:10:3d:e0:a2:ba:01:91:39:4b:
         7f:eb:45:bc:02:6d:0c:59:ac:e4:ef:8a:06:84:29:52:dc:f4:
         4a:20:f6:d6:30:e5:2b:46:4e:31:27:6e:21:26:62:9d:58:89:
         77:e7:5f:11:05:01:89:ff:ba:9f:a1:b5:33:fc:40:8a:f9:e3:
         12:86:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:30 2026 by rpki-client