Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
File:                     fqSkLLBXo92BKeSh4seYBQ_W1lc.mft (raw, json)
Hash identifier:          WmjGJllhqLCdkshgLcEcjQw2L+z5RQ/qgz9zEAsf464=
Subject key identifier:   2B:BA:B7:1B:97:51:B4:C8:41:C9:96:00:8F:E5:8C:EA:A0:DC:7D:F2
Authority key identifier: 7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57
Certificate issuer:       /CN=A913C35A/serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
Manifest number:          0C
Signing time:             Mon 11 May 2026 09:17:16 +0000
Manifest this update:     Mon 11 May 2026 09:17:15 +0000
Manifest next update:     Mon 18 May 2026 09:17:15 +0000
Files and hashes:         1: fqSkLLBXo92BKeSh4seYBQ_W1lc.crl (hash: G3OORXkIAfW3XAakmCRlePsDd4X2DIQsXjadUTSvk8U=)
                          2: 6F2747DE3DE511F19BE7396A9C833773.roa (hash: EIFF9n7nIw8O07orwFHUSOVHnVSTRstMZzTfvLGr7aA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl
                          rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C35A, serialNumber=7EA4A42CB057A3DD8129E4A1E2C798050FD6D657
        Validity
            Not Before: May 11 09:17:15 2026 GMT
            Not After : May 18 09:17:15 2026 GMT
        Subject: CN=6a019e9c-4726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2f:90:b6:fc:8b:42:e7:e1:dd:e5:58:d3:03:
                    71:80:b1:30:af:c1:f3:e4:a9:95:16:43:f8:79:d7:
                    e9:09:5e:ab:1e:e0:5d:e6:d6:02:9f:3c:45:ad:fa:
                    1e:8c:19:df:63:43:f6:ee:7e:de:8b:03:54:15:b7:
                    ad:f0:1d:db:c3:9b:bc:2f:19:fa:83:a5:6b:4d:97:
                    ef:fd:51:d5:c1:a2:aa:66:5a:50:0d:b4:77:1b:08:
                    84:35:5b:0f:d9:3c:f7:17:29:a1:0d:e3:15:3a:96:
                    8b:26:00:aa:29:2d:9a:63:cf:99:31:c8:37:8e:d5:
                    ee:c8:ed:26:19:84:aa:bb:21:9c:8c:3c:0b:5a:c9:
                    a2:9e:d6:2f:ae:8d:66:ab:c3:48:61:c1:0b:f1:14:
                    1f:08:05:fb:22:cc:86:14:82:3d:67:04:eb:88:4c:
                    20:07:c6:77:5b:cf:c4:0c:2c:39:2b:25:ff:f4:9d:
                    2c:8a:e4:d6:2b:6e:37:00:b2:06:6d:8f:1b:5f:c7:
                    79:fd:84:99:e1:cf:2b:9b:86:eb:76:df:ea:79:84:
                    54:39:0f:5b:21:26:06:1a:1a:13:51:43:e7:5a:51:
                    8e:45:59:47:56:58:d2:40:04:4d:ae:c8:45:71:81:
                    d6:bd:87:1d:2e:d2:79:fb:06:24:ba:cf:c3:2e:9c:
                    6e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BA:B7:1B:97:51:B4:C8:41:C9:96:00:8F:E5:8C:EA:A0:DC:7D:F2
            X509v3 Authority Key Identifier:
                keyid:7E:A4:A4:2C:B0:57:A3:DD:81:29:E4:A1:E2:C7:98:05:0F:D6:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fqSkLLBXo92BKeSh4seYBQ_W1lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C35A/161F7FE43DE511F1AD5235459C833773/fqSkLLBXo92BKeSh4seYBQ_W1lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:37:13:b6:98:55:d3:2e:3a:8d:85:09:5d:c2:9b:df:38:c0:
         46:87:0c:98:1d:c2:27:9f:c2:0c:ea:62:92:3c:9b:93:a4:7f:
         60:d2:21:2f:df:b8:79:10:35:cc:85:dd:de:a9:b9:bf:aa:22:
         e8:90:c0:9c:92:a0:65:92:56:c3:0e:bf:0c:bf:db:d2:69:b2:
         1c:70:70:70:c4:8c:53:9c:2b:f6:f9:7f:30:94:37:0a:12:bc:
         33:17:26:87:97:a5:32:83:51:02:e8:8b:2d:bf:23:d5:de:c0:
         c2:19:13:1c:4e:76:03:0a:44:34:dc:b8:99:b7:92:43:c7:8e:
         e9:e1:0f:ee:83:d6:52:99:2e:7a:80:59:34:56:ff:86:2d:cb:
         67:e9:3a:f2:a1:39:b4:2f:3c:ef:6d:c4:4c:e7:b1:65:31:b5:
         e7:0d:08:93:c8:39:dd:74:56:33:52:a5:32:cd:26:a5:de:d8:
         ed:9f:1b:57:de:10:d9:48:b1:bc:b5:89:be:cc:a3:a4:e0:66:
         6d:1a:77:58:f9:a5:a4:b5:b2:e3:b3:04:97:bd:b8:78:9b:bb:
         1d:79:10:2a:88:44:ba:4f:71:b1:fb:b1:3d:90:6e:0e:b9:08:
         62:02:49:b3:8f:ff:b0:3f:cc:69:b0:08:b9:98:39:40:6c:53:
         2c:a8:65:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:58 2026 by rpki-client