Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
File:                     q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft (raw, json)
Hash identifier:          yK8LQpfbV8oeDnU52u3Wj7dzMufNcHoqOI4vuVgYbJQ=
Subject key identifier:   29:6B:D7:DE:50:4D:AC:48:5C:65:6F:9E:51:6E:B8:43:4F:FB:65:7F
Authority key identifier: AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC
Certificate issuer:       /CN=A914E1BD/serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
Manifest number:          3C
Signing time:             Wed 13 May 2026 08:40:43 +0000
Manifest this update:     Wed 13 May 2026 08:40:42 +0000
Manifest next update:     Wed 20 May 2026 08:40:42 +0000
Files and hashes:         1: q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl (hash: fjLnKhoRL9lnzew85qqZatZLi4FkWHxLjyZY7KahYJc=)
                          2: FC4E4156FB3411F0841666933D6F56BC.roa (hash: EB7Zu5vP9pgptqSutxDmsy3gmbeSeQdiZ2X1SMg8Qf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl
                          rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1BD, serialNumber=ABA26C7B7501559AC4109B8F5AFF2DF4337153FC
        Validity
            Not Before: May 13 08:40:42 2026 GMT
            Not After : May 20 08:40:42 2026 GMT
        Subject: CN=6a04390a-de4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:2a:90:a9:bf:38:f9:7f:97:78:46:de:23:
                    c5:b4:89:1d:43:7b:24:51:90:04:a8:26:46:68:54:
                    e7:5b:b8:60:6c:8f:82:0a:6b:e7:1a:c9:e9:b8:66:
                    d5:1c:39:7c:74:8a:05:0c:b7:6c:e9:4d:1b:77:3a:
                    5c:c7:1d:8d:1a:e8:e3:88:dc:8c:db:47:d3:21:b5:
                    c3:0e:12:cf:99:1a:bd:6f:ca:cc:d2:e8:8a:be:78:
                    9a:39:d3:c8:89:97:b9:f3:6b:fa:a7:72:9a:b6:be:
                    d0:6f:ab:a5:19:53:99:e2:8f:05:25:71:7b:45:a2:
                    b9:59:0f:57:9d:93:57:ac:7e:62:24:d8:79:44:c5:
                    ad:84:2b:e6:ba:e7:68:f9:f7:84:b8:a9:ad:1d:23:
                    b0:90:59:ba:27:24:5f:eb:26:d6:ee:c2:36:be:5c:
                    0b:56:be:34:80:ad:89:72:2b:46:e5:81:30:c5:8a:
                    66:19:34:b9:99:1b:d2:5a:c0:21:0d:98:37:da:fd:
                    3f:20:44:72:c9:e7:01:26:70:fc:d9:c6:c6:a5:99:
                    64:69:e8:30:eb:5a:1f:b6:91:ad:b3:d0:fc:d1:b3:
                    50:69:3d:eb:8b:33:20:8d:35:b4:95:b0:54:86:50:
                    28:d5:1c:35:2a:d2:2d:28:f9:82:89:db:2e:fd:5f:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6B:D7:DE:50:4D:AC:48:5C:65:6F:9E:51:6E:B8:43:4F:FB:65:7F
            X509v3 Authority Key Identifier:
                keyid:AB:A2:6C:7B:75:01:55:9A:C4:10:9B:8F:5A:FF:2D:F4:33:71:53:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6Jse3UBVZrEEJuPWv8t9DNxU_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/6468FDA0FB1011F0947DB856746F56BC/q6Jse3UBVZrEEJuPWv8t9DNxU_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:34:c2:3b:c2:25:f8:88:fa:ec:d7:e8:3b:6a:03:0f:64:ff:
         8a:b1:b1:14:d3:1e:00:fb:53:9e:e6:59:74:79:2a:6d:30:62:
         88:1d:e2:e9:1b:13:46:50:2d:ea:b4:8f:6b:c7:97:ec:60:87:
         33:b2:8b:b1:88:07:1a:ab:fa:38:1f:95:b3:e7:34:b3:d5:ef:
         48:b9:88:1a:11:9f:5c:f0:7b:c0:cb:f0:91:8d:f5:d5:1a:23:
         5f:21:45:6a:90:89:98:80:b5:42:f4:3a:31:ff:5f:4c:ce:9a:
         8a:d3:df:48:51:bf:b9:bc:01:1f:0a:97:4f:17:17:7d:2b:a7:
         12:64:b7:cf:55:bb:07:6f:55:33:80:8c:34:fa:63:3d:c0:ad:
         36:8b:80:d4:00:c2:6a:65:b9:57:7d:1b:4b:36:21:9e:9f:fb:
         12:78:87:7d:48:7f:aa:fe:10:57:00:ae:30:9c:b6:17:1b:75:
         d9:e6:21:3f:bf:f1:5a:b2:0c:ef:6a:bf:27:21:1e:ea:65:bc:
         50:5e:b2:4b:98:3f:8e:90:ef:40:8f:2f:bf:53:09:a0:b7:a0:
         b8:ea:36:28:f7:7f:03:f8:72:53:79:53:96:b9:85:47:91:67:
         e1:00:b5:9f:3d:4c:db:af:f4:cc:ab:37:45:eb:30:2b:e6:9c:
         9d:2b:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:56 2026 by rpki-client