Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
File:                     Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json)
Hash identifier:          ZcvGRIXsUFpcU3my5L28V3IoZ8qTmogBoH0Va2UZNoU=
Subject key identifier:   8C:AD:63:0D:22:EC:94:D0:87:C1:3D:44:EE:00:C6:48:C8:0B:CF:C1
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Certificate issuer:       /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial:       0B90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
Manifest number:          0AD6
Signing time:             Tue 12 May 2026 19:42:00 +0000
Manifest this update:     Tue 12 May 2026 19:41:59 +0000
Manifest next update:     Tue 19 May 2026 19:41:59 +0000
Files and hashes:         1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: xqde5A90oO4yBoppibxCf+JB1+/sjmKD1b1y1v0NPZg=)
                          2: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: FMzg28ZdQ4F0sdhtK2wuRkllmrqXUEFKB65mg1sG8L4=)
                          3: 553170245AC511EBA052F663C4F9AE02.roa (hash: 7erTlCvInc3AVRLw7wvtHf/eZ1jEoIGiOeY13F8Zqv8=)
                          4: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: jZ6Iauv/dN/4P0hBUVndivCUUgxGO8TMbCYwzqgk7iI=)
                          5: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: If1p2T4ry814caqPtmeuOiTH0yVCnehjVYiIPxJ8aBs=)
                          6: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: M8kgzZ/qskhWT6RqbwLXgYKBgdTgBhgTCm6VDEfCRyI=)
                          7: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: xyMhDnjS1J7j5KhCCxE7FkpfD0zlq+Ub21i1KmDM4ok=)
                          8: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: zt8ovKN7+n8nwUz7dlHlvLBjh4KwXCc4mYOMPsqbe38=)
                          9: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: lxrRVOjIONZ0+sk1QUPdtSqTSIWnhV1Sgp2inbSvE0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
                          rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2960 (0xb90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
        Validity
            Not Before: May 12 19:41:59 2026 GMT
            Not After : May 19 19:41:59 2026 GMT
        Subject: CN=6a038288-5189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:93:d3:c1:ca:12:8e:06:58:5c:ce:35:ab:89:
                    8d:57:90:7f:25:5c:a4:7a:89:23:a6:13:ca:58:9e:
                    17:6f:7f:28:76:a6:dd:01:d5:ec:4d:a9:93:66:aa:
                    f1:a9:bd:d7:f9:15:62:00:6c:24:31:1a:aa:f6:5c:
                    42:a6:1f:2e:fe:e5:01:e9:ad:cd:e1:b0:26:2f:57:
                    dc:95:e7:e9:c8:56:b1:d1:8d:c4:d9:7b:e1:9b:8e:
                    85:e7:0b:d0:13:9b:8f:04:45:9d:5d:66:e2:80:da:
                    44:71:13:ce:5f:0a:eb:73:8a:bf:97:05:a9:b8:15:
                    7b:19:67:b9:70:ef:6c:fe:67:a1:4e:25:c3:7e:7a:
                    88:6e:51:f2:e1:e9:4a:d2:00:6a:27:1a:69:02:01:
                    78:21:ec:43:55:66:62:49:43:52:9b:05:1d:de:13:
                    55:06:9d:cb:86:1b:84:f9:6f:32:2c:fb:c0:8e:7f:
                    ba:54:78:1f:a4:5e:f4:5b:ed:95:d9:3c:6a:47:a2:
                    ef:a5:80:51:07:4c:c7:b2:b1:1d:fe:d3:2c:c3:98:
                    0b:49:5e:c7:4a:8c:63:a9:b2:98:6a:f1:e3:d1:74:
                    ec:d9:2c:82:6e:37:e8:54:f2:6e:40:2d:e4:10:dd:
                    9a:16:1b:fe:81:86:65:05:37:43:08:21:cb:d6:c2:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AD:63:0D:22:EC:94:D0:87:C1:3D:44:EE:00:C6:48:C8:0B:CF:C1
            X509v3 Authority Key Identifier:
                keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7d:5c:ca:19:72:02:0f:29:3b:f6:d8:e2:21:2c:5f:37:b6:
         b8:22:ef:e7:2e:59:e8:46:1d:5b:2b:ad:88:51:86:e2:6c:25:
         45:3e:c1:e1:f7:4f:16:3e:02:cb:f4:3a:9b:d1:67:68:db:74:
         d7:23:8a:43:e7:0f:a0:da:b5:78:a1:ae:ce:d7:2f:b9:d3:60:
         86:8f:b6:21:c4:0b:20:9f:8e:bb:50:4a:96:e0:15:76:59:d5:
         92:d0:c5:49:7d:37:10:20:f3:d2:b8:11:6f:5c:c0:70:b8:fe:
         62:27:f4:92:e1:36:49:58:0f:93:ba:be:0c:d4:8a:4a:b8:88:
         fe:cb:10:ff:e6:86:a4:63:55:a8:83:66:63:d7:a2:d8:54:6e:
         ab:48:9a:33:db:37:4a:81:d5:c3:e7:25:27:46:db:35:81:d6:
         4c:2c:df:cf:e1:98:df:29:7a:57:20:d4:cb:46:7c:7e:f7:d2:
         c5:cb:7c:84:e0:01:cc:6e:05:c9:43:cb:3d:68:83:05:f7:25:
         43:6c:07:90:a3:4f:3a:dd:30:31:3c:25:99:c7:70:31:a4:84:
         61:6a:c7:69:3c:df:30:6b:a0:a0:bd:48:76:2a:15:55:da:a9:
         af:e5:29:a9:de:ef:42:a1:5b:e7:ab:6f:f1:2e:10:27:b4:de:
         74:f4:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:54 2026 by rpki-client