Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
File:                     q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json)
Hash identifier:          9HLqUOUkwFJ49JJWqqoY2QCkOzvraRscrnat4IKaPZc=
Subject key identifier:   7F:68:AC:9A:0E:37:2F:DA:43:D5:93:12:08:1C:BE:06:34:1C:A6:AB
Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
Certificate issuer:       /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
Manifest number:          A1
Signing time:             Mon 11 May 2026 07:32:49 +0000
Manifest this update:     Mon 11 May 2026 07:32:49 +0000
Manifest next update:     Mon 18 May 2026 07:32:49 +0000
Files and hashes:         1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: v9r1eIvNvN4kKmCRn6jnOO15tIvLcce6OOqntlxum6k=)
                          2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: EriMxkKUBJx5Xw15e8N5dYbbr/AUbZc0WvM0QC4DQFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
                          rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
        Validity
            Not Before: May 11 07:32:49 2026 GMT
            Not After : May 18 07:32:49 2026 GMT
        Subject: CN=6a018621-c85d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:85:6b:d8:de:37:43:c1:41:b5:a6:34:53:
                    ec:3c:86:71:46:53:0f:e9:98:9a:2d:13:68:42:1d:
                    3a:45:25:66:bf:30:97:8e:95:ce:7b:90:29:56:ab:
                    b7:63:aa:a6:90:3f:a2:d1:51:4a:3f:a0:87:e0:57:
                    5e:c1:ea:b5:af:f0:3c:e2:94:cd:90:4b:2e:54:75:
                    15:a8:3d:14:ee:06:2e:90:87:3b:39:03:8c:e4:58:
                    33:f6:c2:8e:63:01:3c:6f:98:5c:f6:f8:35:91:94:
                    e4:1b:32:a0:06:58:1c:1c:83:87:fc:ca:63:14:c3:
                    7e:a0:db:91:18:47:aa:aa:18:db:76:7a:d7:5b:aa:
                    f2:26:95:13:9a:1b:f2:90:eb:e8:b7:c1:83:50:a9:
                    dd:33:be:da:d8:96:31:7c:96:53:7f:1e:1e:7d:0d:
                    a9:a5:fa:dc:4a:49:33:00:b3:5f:c0:b9:29:07:f9:
                    50:91:54:22:ff:0d:58:75:60:03:4d:73:9b:e6:48:
                    46:44:65:6f:c2:58:98:cf:17:20:07:31:3a:a7:70:
                    63:64:b5:c1:10:2a:75:6e:07:3b:33:48:c2:08:2e:
                    74:e7:a8:ed:05:c2:2c:a3:b5:48:11:98:e8:04:22:
                    09:5a:82:98:b7:02:49:09:a7:4d:99:a7:01:01:18:
                    61:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:68:AC:9A:0E:37:2F:DA:43:D5:93:12:08:1C:BE:06:34:1C:A6:AB
            X509v3 Authority Key Identifier:
                keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:11:b7:46:ad:4a:25:d1:46:66:27:67:b6:04:a7:4e:b1:20:
         fe:4b:ca:b0:54:c9:3c:35:ea:74:4b:65:ac:07:7d:d4:23:55:
         83:7b:96:d7:36:29:0d:df:db:99:1e:f7:5f:33:18:c7:e4:a9:
         28:60:23:5f:b7:7f:d1:dc:b2:87:a4:35:1d:42:3c:95:85:07:
         79:e2:30:67:e9:64:75:4a:de:bc:31:09:56:f0:5c:06:2a:a5:
         77:a2:eb:69:50:dc:c0:6a:30:e0:af:1e:dd:88:21:98:10:5d:
         44:fd:ad:2b:8a:4f:8f:2f:59:75:87:11:62:a5:64:3c:76:53:
         4e:7d:fc:ad:d4:49:79:f9:2c:04:83:7d:ac:69:2e:61:2c:5e:
         7f:9f:ac:ad:8d:ff:85:c7:cd:54:68:0e:61:4b:41:c0:62:68:
         51:7e:a7:69:c2:a4:c9:79:99:8f:e7:ee:6d:77:91:7d:1e:55:
         14:81:8b:59:ee:72:a8:8d:46:c7:70:cf:89:df:01:23:20:ae:
         83:ef:05:10:bc:40:17:55:e7:02:5e:71:47:58:cf:d3:d1:ca:
         02:0e:d1:3f:60:90:fe:9f:9f:36:11:2a:f4:a9:a2:0f:3e:71:
         1b:b4:59:c9:f2:cb:90:d0:c0:10:c1:7c:d6:dd:91:ec:1a:f8:
         b4:6a:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:08 2026 by rpki-client