Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File:                     qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier:          icZA24vP1O5tAnR8iG5b09PUN3Gjx7/C1KSiIdl8CbE=
Subject key identifier:   F6:33:78:0A:23:74:BB:A3:93:77:25:1F:7C:2F:F9:BA:ED:DA:5E:AD
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer:       /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial:       10C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number:          10AC
Signing time:             Tue 12 May 2026 17:21:57 +0000
Manifest this update:     Tue 12 May 2026 17:21:56 +0000
Manifest next update:     Tue 19 May 2026 17:21:56 +0000
Files and hashes:         1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: 7YPCeIkK3GYvyBm+EyuSwt4rr/rWpdzEfStTspH+fkk=)
                          2: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: IT79Hkoa22EueYUEPb7uUMkBxRjft5NtH+6nYpQUQTE=)
                          3: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: na3agWbpkvvPPGYrDAzu2fpB/eIpBQi6AGL/7SLQlTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
                          rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4292 (0x10c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
        Validity
            Not Before: May 12 17:21:56 2026 GMT
            Not After : May 19 17:21:56 2026 GMT
        Subject: CN=6a0361b4-55d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:85:6a:dd:ef:07:2d:f5:8a:b5:eb:4c:89:
                    d5:fb:88:04:a7:30:93:20:6a:14:11:2a:e7:c1:cf:
                    9d:92:25:b2:da:a9:12:4d:d5:3d:e6:29:e6:e7:13:
                    e2:cb:52:d5:17:f1:f0:f3:0a:cd:e6:39:a0:a9:c2:
                    58:39:7c:06:dc:84:05:a8:59:87:13:45:41:ac:84:
                    97:06:d4:f5:e3:df:ae:7a:cb:ee:be:ca:91:d0:16:
                    b0:59:b7:af:a4:4a:ab:ca:42:45:54:79:24:c1:47:
                    47:3b:a8:8f:04:97:40:fe:3a:b5:70:83:e6:d9:3b:
                    62:e3:63:3b:3c:28:da:0f:88:b7:88:21:f3:16:e4:
                    ce:35:98:d4:0f:ff:3f:2a:55:5e:e8:f2:28:23:83:
                    aa:06:c6:be:8d:5b:db:36:01:47:02:1c:73:69:41:
                    e2:18:c6:26:93:54:25:43:ce:5b:ed:19:42:2f:fa:
                    d0:8b:f1:2d:b7:e3:fd:3f:da:a6:53:65:dc:b8:a0:
                    9b:4b:02:8b:6d:24:5c:ef:6e:a1:29:38:2c:18:5e:
                    b4:cb:2b:be:08:83:87:53:4b:86:d8:48:69:16:72:
                    33:84:3f:fb:5e:93:24:3c:7e:67:55:97:5b:d5:13:
                    df:91:01:70:44:c7:e2:44:99:68:20:a2:ee:a8:c5:
                    fd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:33:78:0A:23:74:BB:A3:93:77:25:1F:7C:2F:F9:BA:ED:DA:5E:AD
            X509v3 Authority Key Identifier:
                keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:78:c4:93:96:91:5c:29:29:5a:d5:90:85:f4:1e:dd:8b:fb:
         5d:9b:88:3b:84:ca:52:58:e6:20:f2:28:45:62:40:f6:0c:93:
         94:20:a9:28:31:3e:02:b2:52:62:d7:dc:7f:a1:c0:6c:f6:84:
         90:93:c1:2f:96:73:f6:40:a5:73:dc:ee:b0:7b:aa:f0:eb:4a:
         b3:a4:69:33:47:54:99:3a:dc:b1:44:50:8a:83:4e:90:96:ac:
         ef:09:70:2c:f9:e3:31:86:ea:ee:af:d3:a7:90:f4:11:12:8b:
         7a:3d:aa:67:53:0f:f6:25:db:86:dc:57:34:c2:3c:97:0f:50:
         d8:45:46:19:d1:1b:b0:c3:9a:24:e2:37:5f:54:c8:38:f5:7d:
         4e:e6:b6:d9:15:c8:6b:03:52:fb:b0:db:13:46:d8:71:e5:a6:
         da:c1:55:9c:20:66:8e:6a:18:b9:d5:4b:63:dc:f1:2b:a7:6c:
         25:f4:f1:ae:92:48:13:8f:4e:55:48:bc:57:39:85:db:6f:04:
         d3:f6:2e:88:95:a6:9d:1d:76:a7:7d:c5:bc:fe:ee:cc:a2:a5:
         c6:fb:0b:7b:ed:fd:b7:79:fb:7b:41:56:d7:7d:ae:cd:bf:d2:
         22:ed:dc:75:e6:6f:2d:25:44:a6:99:3b:df:f8:fd:f5:02:77:
         ff:92:97:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:30:05 2026 by rpki-client