Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File:                     q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier:          l5fyKvxbPrhWf8AlnGhZFX9QBSabJ3n5YFRt3s0+b9Y=
Subject key identifier:   5E:F4:0F:B3:08:57:AA:D6:E9:83:FE:B8:2B:CD:B6:F2:65:6D:7F:9A
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       07FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number:          07E0
Signing time:             Tue 12 May 2026 21:27:22 +0000
Manifest this update:     Tue 12 May 2026 21:27:21 +0000
Manifest next update:     Tue 19 May 2026 21:27:21 +0000
Files and hashes:         1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: f7wS6WBQez/Q3yc2UxW8KqqHovnBjwAh6zN9GYlNw04=)
                          2: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=)
                          3: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: 73c7rPkr5oOJDjoo4nNiA+fWKV7P9/3x9TJs2lmqH+g=)
                          4: 56D3C71687AB11F095613811C4F9AE02.roa (hash: /iyD3hld6gjpTGLsl0+ygpbYTM+w2T0GBHJEgaI/WgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: May 12 21:27:21 2026 GMT
            Not After : May 19 21:27:21 2026 GMT
        Subject: CN=6a039b39-14f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:6a:c0:b1:00:85:ab:7a:7d:97:df:a4:37:
                    38:db:4e:d9:3e:f5:5d:c8:64:de:6f:d4:e1:0f:33:
                    69:ce:b5:85:31:ab:3b:d5:0a:f5:14:57:3f:33:29:
                    63:db:4b:92:b4:f5:69:0d:21:28:06:e7:ae:da:ea:
                    57:3e:94:ca:8d:be:d2:bd:72:c0:bd:7f:98:8b:bf:
                    bf:08:d7:83:4c:14:c9:dc:51:f1:62:cd:f8:a8:4c:
                    14:f8:87:8e:23:37:36:b9:50:77:3a:40:f9:d3:82:
                    06:f7:af:0b:6f:75:dd:37:17:93:6a:0d:68:07:e8:
                    b1:3d:33:54:e6:10:11:cd:2a:ca:33:e8:14:24:d1:
                    9a:4a:00:b1:22:b4:35:64:6b:48:39:6d:55:a7:b0:
                    21:bd:3c:c8:22:be:44:fd:16:14:55:75:2d:bb:0c:
                    19:a8:ff:a4:8f:c8:be:a7:6d:69:26:a7:ac:b6:87:
                    b4:de:de:39:f0:c2:33:ac:8e:f2:ef:fb:dd:1d:68:
                    40:7a:37:5f:e5:55:b6:2a:58:cf:33:bb:e5:54:ab:
                    93:36:2c:7a:ad:39:b9:b0:fb:14:b3:05:09:73:82:
                    aa:b5:09:dc:20:8e:5d:00:77:5a:e4:e8:e5:9c:ee:
                    4e:02:be:50:65:47:8a:00:53:84:cd:bc:2a:b9:ad:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F4:0F:B3:08:57:AA:D6:E9:83:FE:B8:2B:CD:B6:F2:65:6D:7F:9A
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5f:6e:41:c5:5c:a0:6c:44:55:73:29:64:dc:72:94:9b:82:
         d9:26:9e:b6:78:71:d1:3b:bf:d9:1f:4d:d0:c5:dd:30:19:66:
         5c:d1:04:fc:47:01:d8:1a:46:cf:e7:cf:0d:96:83:ea:19:85:
         53:b6:fa:fc:44:38:d5:e4:6a:a7:9d:7a:44:fc:63:e2:2e:16:
         ee:67:63:b5:7b:e6:b8:9a:0a:52:a4:d7:7d:f7:ef:26:34:20:
         43:35:57:03:f5:09:c3:3c:99:59:38:cc:3b:f3:1e:57:c9:7d:
         fe:ab:dd:ec:27:bb:b2:ae:69:6a:fb:38:ae:59:41:6d:80:49:
         01:34:f6:d3:c2:e5:f2:da:d4:16:c5:5a:2e:4b:f7:f3:8c:8a:
         9b:0a:0b:ef:1e:8c:be:fc:14:42:3f:9d:2d:e3:a6:ac:82:66:
         80:ed:c2:0a:c8:aa:88:71:60:e1:a5:87:7e:d3:9c:72:73:33:
         82:4c:96:c1:0c:da:34:f4:5d:69:8c:70:51:91:36:b9:0d:88:
         bb:6c:73:03:f3:3b:06:c4:1d:e3:49:37:42:b2:69:d1:4e:72:
         42:d3:26:42:9d:27:0a:f2:33:df:e3:aa:b0:f6:c1:a9:3f:50:
         d3:5a:b6:c8:1e:a0:53:c2:e9:4a:e4:b9:82:a3:33:da:1a:a0:
         9f:7b:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:40:51 2026 by rpki-client