Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File:                     QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier:          js5I4ansQ8nlN6kWrUw2Yde1TAgOQsfJwSLzzZrFyYQ=
Subject key identifier:   F8:51:EF:8C:E7:C0:81:57:CB:7A:86:16:06:8D:18:AB:A3:7D:ED:9C
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer:       /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number:          A8
Signing time:             Mon 01 Jun 2026 08:02:35 +0000
Manifest this update:     Mon 01 Jun 2026 08:02:35 +0000
Manifest next update:     Mon 08 Jun 2026 08:02:35 +0000
Files and hashes:         1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: 3o541uAwiE6b5Ak5vpYi8K1adxauheBA+BoQvWzqLGg=)
                          2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ZIVHyn4HDYxvTrf1jI6tJxVlx+GuNfOvlQ+9Flv3lLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
                          rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
        Validity
            Not Before: Jun  1 08:02:35 2026 GMT
            Not After : Jun  8 08:02:35 2026 GMT
        Subject: CN=6a1d3c9b-6816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:a8:7b:5f:7a:c4:de:78:80:d8:b5:85:b6:
                    a9:ea:9c:a7:8f:65:3a:6f:3b:b9:23:27:57:25:06:
                    c6:8c:5c:3c:18:70:f6:4f:07:35:00:02:4f:ca:c6:
                    12:85:2f:20:a2:9f:19:97:16:89:f1:fd:51:85:9c:
                    6e:d0:36:ed:3a:5e:71:c7:96:2b:39:a3:0b:5c:bf:
                    3f:02:6d:e3:df:08:c4:98:3f:2f:3e:fc:ca:8d:28:
                    6c:ce:b3:63:28:1d:2d:18:78:15:1e:00:36:0e:eb:
                    a0:28:83:1b:69:34:57:50:0c:71:6b:7c:9a:dd:31:
                    1a:98:47:45:88:de:f4:04:a4:34:7e:95:32:d7:cd:
                    5e:4b:ec:dd:66:5c:4c:5a:6a:76:07:42:1a:d8:8e:
                    1e:f5:78:25:fd:e3:19:d0:7b:77:5f:82:9a:20:09:
                    58:b4:20:ac:bd:4b:a7:7e:df:f5:c5:41:e6:a3:84:
                    fc:4d:cb:f7:b3:38:a4:1e:49:9e:28:93:8a:7c:94:
                    91:67:f2:81:0f:3c:62:a7:f4:f0:f8:ce:52:d5:9a:
                    a6:51:97:2c:e7:ea:0d:39:e6:5a:15:7c:35:1b:7e:
                    ee:8f:a1:41:2e:fc:e9:6a:81:64:d4:1f:fe:89:3b:
                    d3:6d:1f:dc:46:50:63:eb:ad:d9:f1:dd:53:9b:94:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:51:EF:8C:E7:C0:81:57:CB:7A:86:16:06:8D:18:AB:A3:7D:ED:9C
            X509v3 Authority Key Identifier:
                keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:a9:88:d9:85:89:7f:7c:47:95:fc:16:44:80:50:c5:35:e8:
         4d:3e:a1:68:99:b0:bc:50:28:81:44:36:40:93:75:c2:0c:c5:
         63:cc:b9:76:ff:f3:fa:84:95:a6:97:1e:75:0a:97:d2:30:7d:
         08:6c:df:3b:2f:ef:6f:a7:fb:5e:5c:6e:15:ae:c2:05:19:23:
         bb:4b:c7:4e:4a:3a:a8:f8:02:b6:50:5a:db:61:54:9f:e6:4e:
         40:1f:5f:d3:48:0b:d8:64:2d:a6:a3:1e:92:2d:68:f2:99:4a:
         d3:1c:49:f5:a3:f3:03:34:09:3b:6c:93:bc:31:88:77:45:d3:
         a6:00:42:94:dd:da:ab:72:b5:e5:93:31:94:09:27:84:e2:17:
         bd:69:78:7c:ec:a3:79:62:39:f1:23:ea:0f:c8:06:8d:09:82:
         13:55:78:fc:bc:44:97:ba:04:70:52:9c:23:89:f5:32:f4:48:
         a9:24:9d:c1:4c:6c:5c:a5:6e:6f:65:2e:47:ee:3d:97:e3:5a:
         55:04:5e:18:30:cd:d1:c1:3b:4f:b2:9d:4b:22:60:3b:a3:d1:
         f2:36:58:38:4c:92:36:62:96:97:19:ff:89:5a:28:b3:bf:89:
         99:50:c1:df:4a:81:1e:d2:db:6c:ee:bb:41:58:47:7e:f2:fe:
         95:f6:ce:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:39 2026 by rpki-client