Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File:                     AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier:          PopVaYRYB98sWsxwkwQoPcbhNjjCB8/w9WNKa3c+4Hw=
Subject key identifier:   F6:07:E4:0B:63:86:56:5F:8B:DF:4F:12:13:4B:65:2A:E1:04:05:F9
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer:       /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial:       08B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number:          08AA
Signing time:             Tue 12 May 2026 20:33:50 +0000
Manifest this update:     Tue 12 May 2026 20:33:49 +0000
Manifest next update:     Tue 19 May 2026 20:33:49 +0000
Files and hashes:         1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: AVw1skW/n8CYzdDoUzOivfFjl9SGBbCN9lKQlQCSl1g=)
                          2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: 9TmPmA1+zthJxiNmUQ4CrTPbBg0Xhy5uru/BuqYwuPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
                          rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2228 (0x8b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
        Validity
            Not Before: May 12 20:33:49 2026 GMT
            Not After : May 19 20:33:49 2026 GMT
        Subject: CN=6a038ead-8bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2b:b7:a6:53:c7:c4:9b:f5:73:a4:97:d1:ab:
                    05:c9:f2:2d:b4:b8:6d:e5:5b:15:d6:80:e0:5a:d9:
                    03:4c:46:50:5b:a6:49:d2:40:2b:e1:e0:db:c9:cc:
                    26:1d:41:7c:55:2e:8d:37:1b:1f:e3:10:c4:87:79:
                    33:d8:dc:1c:63:3d:9d:79:c4:1d:04:bb:ab:a9:42:
                    b3:4f:24:42:c0:ed:dd:1a:d0:02:1f:7d:b4:8a:78:
                    a4:57:25:f2:17:5f:45:73:51:ce:38:1d:f5:e1:75:
                    18:99:89:61:b4:8e:60:4b:af:a2:41:2d:7d:43:ac:
                    ce:fe:1b:c6:f5:3d:b9:b5:21:f5:ed:ea:2d:c6:ae:
                    19:47:f3:86:af:e9:66:58:34:c3:eb:76:06:eb:f5:
                    c0:97:80:76:72:b7:61:31:98:cc:36:13:ca:36:84:
                    cb:c1:23:2c:2f:b5:1a:58:45:4d:4a:85:30:9a:64:
                    63:4e:d2:67:ad:40:27:fa:09:c4:7d:ec:b0:98:ea:
                    68:fe:fd:10:0e:5e:c2:53:d9:5a:1e:03:e0:ba:3b:
                    38:dd:5a:cc:c7:b4:06:13:02:df:b3:f8:6f:9e:db:
                    51:e7:0a:cf:62:48:f2:37:65:ab:8f:d5:45:9e:4c:
                    6b:6c:3d:1d:cd:bf:ee:8e:21:4c:a0:f0:26:25:a5:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:07:E4:0B:63:86:56:5F:8B:DF:4F:12:13:4B:65:2A:E1:04:05:F9
            X509v3 Authority Key Identifier:
                keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:94:ed:5a:40:16:c3:7e:0c:5a:2e:26:ec:4d:50:54:2f:
         1a:c0:da:03:14:88:3a:10:62:88:13:51:51:3c:e7:2f:96:5f:
         d5:2e:75:66:02:7b:b1:4b:b5:af:a0:4a:d7:55:70:61:7d:e5:
         88:8b:82:f7:c5:9e:48:ac:fb:d2:45:61:e5:b6:aa:b3:79:2d:
         e3:d0:ad:22:ae:54:dc:e8:38:b1:b7:c0:78:5a:8b:9a:98:66:
         e0:e4:99:d6:39:0e:90:99:9c:9b:68:da:c8:be:7e:f4:07:54:
         76:a4:13:15:ce:e0:bb:3d:98:60:00:e8:a0:f9:19:13:f2:b9:
         38:66:e2:94:6f:5b:2f:cd:2d:ff:25:a1:31:19:44:a2:e9:c9:
         ae:39:8b:ba:9d:55:49:d3:e5:89:00:05:e2:bc:da:b5:30:09:
         e1:66:86:d8:f6:01:25:9e:95:34:da:14:45:cd:52:02:58:3b:
         b0:39:dc:e5:c1:cd:a6:50:9f:2f:19:20:85:c4:fc:08:7e:14:
         54:e4:97:78:a9:76:8b:1b:90:9b:a5:64:aa:85:16:dc:62:ad:
         2c:90:24:8d:51:91:42:9c:6a:a2:12:6f:f1:c8:ab:97:0c:8b:
         bd:da:7b:07:10:75:5f:ac:a6:16:1a:24:2e:ac:d0:df:f5:3e:
         2b:3a:50:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:25:32 2026 by rpki-client