Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
File:                     qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json)
Hash identifier:          MFb4fDpAJY0A83Y4GhhB/et2YBLjlP3YZJARrvWo6n4=
Subject key identifier:   9F:2B:50:58:10:9D:21:1E:F0:F9:A3:A9:2D:09:1E:67:DF:C2:3A:AC
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Certificate issuer:       /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial:       0810
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
Manifest number:          07FC
Signing time:             Tue 12 May 2026 21:22:50 +0000
Manifest this update:     Tue 12 May 2026 21:22:49 +0000
Manifest next update:     Tue 19 May 2026 21:22:49 +0000
Files and hashes:         1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: rqZf+1YdKdOL14iRzsWCafRR70/x1kqUfmuAMCLvOLg=)
                          2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: 2gCt/x7KidgUUiic8KeZ4+Ldk+O6Z1R5WNeHf6m8yn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
                          rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2064 (0x810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
        Validity
            Not Before: May 12 21:22:49 2026 GMT
            Not After : May 19 21:22:49 2026 GMT
        Subject: CN=6a039a2a-54e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:74:c5:02:5a:cc:2b:54:4c:21:f7:5a:08:
                    af:36:56:eb:16:4e:71:40:b9:48:ff:47:b6:c1:39:
                    f8:3c:2c:7c:89:d8:fc:8e:31:89:fe:c0:01:78:e7:
                    83:f5:2f:05:e8:ce:bb:be:e4:9c:65:74:94:6f:6b:
                    e2:a5:24:b3:9b:6a:e6:98:8f:2a:8b:5f:1b:d7:a2:
                    6d:d7:ce:21:bd:54:7a:94:1c:22:37:b4:54:44:c8:
                    29:0e:57:c6:9f:ad:c7:a1:2b:14:d7:e4:e3:af:df:
                    b2:ca:ec:42:dc:f9:84:0b:2b:a4:c5:0e:89:82:9b:
                    42:be:c2:16:4e:17:c1:05:2f:26:99:7e:02:83:62:
                    b7:23:ba:4d:39:96:01:8b:ac:d6:b6:59:1c:5b:b3:
                    11:0c:88:6a:03:5b:66:a3:bb:11:e9:58:86:5f:d4:
                    78:c8:6f:34:11:fc:a2:2b:fa:3a:f6:d8:b2:f7:f1:
                    67:da:19:3d:bf:69:d1:2d:5d:88:ed:90:56:df:f9:
                    bc:7b:f9:5f:15:74:34:c6:30:92:d7:5c:45:b6:0f:
                    c0:3f:7f:2a:d3:8c:be:b9:dc:82:7a:ec:b6:5d:98:
                    d3:5c:8e:67:55:1c:fb:02:70:8b:b8:ea:67:a0:82:
                    76:9f:69:e3:6b:07:ad:4b:d9:99:a8:9c:e3:05:6d:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2B:50:58:10:9D:21:1E:F0:F9:A3:A9:2D:09:1E:67:DF:C2:3A:AC
            X509v3 Authority Key Identifier:
                keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2a:a4:85:cd:4d:52:0e:62:b3:69:be:d3:1a:11:ae:45:aa:
         c7:16:2e:96:45:a4:ac:ed:89:f3:37:67:a7:ba:e0:f5:88:1a:
         9e:ea:2e:f6:c2:ba:ca:5c:ce:3e:88:4a:a1:93:ed:74:4c:f6:
         c1:69:2d:59:04:bb:b8:e7:bb:86:30:ac:cb:24:d0:78:ab:e7:
         cd:82:cd:37:5e:6f:0b:d6:7f:c4:e8:76:c0:4e:c8:b4:d0:14:
         91:c8:21:c5:d5:fb:f0:f9:48:58:8a:b9:5d:ec:cc:4e:a4:8c:
         59:fc:fa:7e:23:37:c6:0b:c5:c5:09:e0:ed:e4:16:69:fa:59:
         f7:5f:91:27:75:d6:ed:e3:66:4c:bc:90:6f:ef:99:42:05:60:
         9d:63:59:35:85:8e:74:0f:c2:29:5e:4f:4a:e9:b2:98:fa:2c:
         07:a5:e8:6e:2c:69:d4:8e:92:97:07:59:26:87:5e:85:7f:fd:
         62:5e:54:0b:f4:6d:0f:e9:69:cd:50:d2:71:cd:3a:23:49:00:
         40:07:4a:e4:94:a1:8c:15:9e:08:27:90:ab:16:fb:fd:b6:a8:
         7b:70:b0:a7:ab:32:ea:5b:94:9f:d4:14:15:87:dc:10:bb:f3:
         11:d2:50:dc:06:25:34:a7:00:11:a6:8d:8e:ec:64:8b:29:81:
         cb:49:fd:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0NTYxMTAvBgNVBAUTKEE5OUIyREI2RkFDMzZDQjAyMDNCOThFMjBGRDY3RTAx
OUZFMUI4RkIwHhcNMjYwNTEyMjEyMjQ5WhcNMjYwNTE5MjEyMjQ5WjAYMRYwFAYD
VQQDEw02YTAzOWEyYS01NGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4d0xQJazCtUTCH3WgivNlbrFk5xQLlI/0e2wTn4PCx8idj8jjGJ/sABeOeD
9S8F6M67vuScZXSUb2vipSSzm2rmmI8qi18b16Jt184hvVR6lBwiN7RURMgpDlfG
n63HoSsU1+Tjr9+yyuxC3PmECyukxQ6JgptCvsIWThfBBS8mmX4Cg2K3I7pNOZYB
i6zWtlkcW7MRDIhqA1tmo7sR6ViGX9R4yG80EfyiK/o69tiy9/Fn2hk9v2nRLV2I
7ZBW3/m8e/lfFXQ0xjCS11xFtg/AP38q04y+udyCeuy2XZjTXI5nVRz7AnCLuOpn
oIJ2n2njawetS9mZqJzjBW3E+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8rUFgQ
nSEe8PmjqS0JHmffwjqsMB8GA1UdIwQYMBaAFKmbLbb6w2ywIDuY4g/WfgGf4bj7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni84MTQxNDI1RTMw
NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJMQWdPNWppRDlaLUFaX2h1
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Fac3R0dnJEYkxBZ081amlEOVotQVpfaHVQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTQ1Ni84MTQxNDI1RTMwNjYxMUVCODUyNTEzNTVDNEY5QUUwMi9xWnN0dHZyRGJM
QWdPNWppRDlaLUFaX2h1UHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqiqkhc1NUg5is2m+0xoRrkWqxxYulkWkrO2J8zdnp7rg9Yganuou9sK6ylzO
PohKoZPtdEz2wWktWQS7uOe7hjCsyyTQeKvnzYLNN15vC9Z/xOh2wE7ItNAUkcgh
xdX78PlIWIq5XezMTqSMWfz6fiM3xgvFxQng7eQWafpZ91+RJ3XW7eNmTLyQb++Z
QgVgnWNZNYWOdA/CKV5PSumymPosB6Xobixp1I6SlwdZJodehX/9Yl5UC/RtD+lp
zVDScc06I0kAQAdK5JShjBWeCCeQqxb7/baoe3Cwp6sy6luUn9QUFYfcELvzEdJQ
3AYlNKcAEaaNjuxkiymBy0n9Aw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:33:01 2026 by rpki-client