Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
File:                     a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json)
Hash identifier:          vi0TKBgPPmsM2czq/xN0YDZZjAtvaB4CZkcxvuN+JXU=
Subject key identifier:   7F:D5:27:F0:E3:71:90:D1:82:BC:97:1F:6A:E0:66:03:3D:F1:63:2A
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Certificate issuer:       /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial:       34D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
Manifest number:          34B3
Signing time:             Wed 10 Jun 2026 15:18:38 +0000
Manifest this update:     Wed 10 Jun 2026 15:18:37 +0000
Manifest next update:     Wed 17 Jun 2026 15:18:37 +0000
Files and hashes:         1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: 4sl4eyOwwkUapHI9RFkp7ex8HlDd7xNbOtBXTzUShlc=)
                          2: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (hash: NHHqtoWG+gwaIC084o2r9OLvOpqSCVAznqovXmjnsXg=)
                          3: A634576635D511F1A68BE981A0833773.roa (hash: 4ZRG+jBKDkZrZQYJ33ftXyXhm7MnH5udmfkKK13Boew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
                          rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 15:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13527 (0x34d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
        Validity
            Not Before: Jun 10 15:18:37 2026 GMT
            Not After : Jun 17 15:18:37 2026 GMT
        Subject: CN=6a29804e-4859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:02:ec:7b:5d:ec:ed:e0:cf:b3:08:04:88:5e:
                    2d:cd:f1:59:e2:d7:b2:12:be:e3:42:7b:9a:8e:6e:
                    8c:bf:0b:14:be:ac:f7:7a:64:7e:05:48:8f:77:2e:
                    39:21:71:3e:ec:dc:80:d5:72:db:41:2d:de:f7:d8:
                    35:d1:90:fc:5e:dd:d9:53:d6:bd:3a:9d:bf:71:ee:
                    c7:bc:b1:02:0b:71:b9:1f:f6:1d:05:d0:d3:e4:a4:
                    8f:59:8d:15:07:a1:8f:03:00:9c:c3:f9:e3:2f:4b:
                    f3:a9:81:23:5c:b3:10:f5:a2:17:8b:0d:f6:31:a6:
                    40:18:a5:57:a3:79:16:52:c6:40:ae:99:ce:ec:12:
                    af:0b:69:0f:e9:e6:91:7a:93:68:eb:40:5f:aa:e7:
                    75:7c:7a:a9:98:74:1a:eb:d1:19:81:58:b3:c9:4d:
                    a3:52:18:18:36:60:55:ab:d7:96:3a:5f:19:7d:05:
                    1b:75:3e:73:07:b5:08:68:54:82:74:c9:93:5b:1f:
                    78:7c:ad:dc:46:ea:ea:05:13:33:10:31:99:96:7c:
                    90:6b:23:be:46:fa:a7:13:3a:fc:d1:89:3d:25:1b:
                    f9:00:bf:2c:40:28:38:63:fa:aa:95:88:21:c0:b8:
                    d0:11:02:67:a8:2d:a3:84:01:d4:74:74:dd:08:3d:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D5:27:F0:E3:71:90:D1:82:BC:97:1F:6A:E0:66:03:3D:F1:63:2A
            X509v3 Authority Key Identifier:
                keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bc:22:4a:f7:d8:db:86:6d:48:38:50:f8:58:34:b9:3d:85:
         b8:9c:e8:22:44:90:4d:e0:c9:11:f8:97:c4:aa:03:ca:b3:5e:
         ff:0c:fb:94:bb:fa:48:ae:a7:fe:fb:77:c2:04:43:e9:94:26:
         d8:2c:f5:05:81:09:0c:08:c6:43:5b:9e:db:6b:35:f7:8f:e7:
         36:05:a3:78:7e:e9:c1:48:f9:bd:3c:80:3c:34:5c:b3:f3:a3:
         d2:10:71:89:6e:94:1b:d3:c2:06:15:ac:ed:d0:04:af:7a:ca:
         f7:3b:07:d6:62:2f:61:df:8d:9f:00:22:7e:8b:14:92:a6:71:
         ce:61:0b:1e:47:fb:bc:59:11:03:24:b2:05:7b:31:fe:e3:47:
         05:39:94:24:bd:1f:19:89:77:a3:0a:f7:53:0b:43:96:5f:52:
         8e:f4:01:0e:36:3b:3d:7d:ea:87:dc:eb:80:bf:8b:4d:8d:2c:
         cf:79:d0:ef:63:53:e5:11:9b:3a:eb:03:69:d9:5f:21:f8:07:
         77:32:78:c3:06:b9:1c:7c:ab:ee:0d:ba:89:6a:28:ec:d9:51:
         2e:fe:d2:5f:06:e1:2e:50:92:c1:b9:77:55:50:3c:42:c8:3f:
         ae:5b:2f:99:5c:1f:b8:c9:e4:d5:51:58:e2:97:2b:a9:5a:c1:
         b3:f4:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:55:46 2026 by rpki-client