Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File:                     Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier:          bTYbfhTGHnOiGVaqCLCJWIC0GxCs4AWoZhQv/IhqDK0=
Subject key identifier:   CA:9E:39:BD:78:D7:08:59:89:1E:92:CF:64:88:8D:1C:BC:AA:72:C6
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer:       /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial:       11D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number:          11C8
Signing time:             Tue 12 May 2026 17:11:55 +0000
Manifest this update:     Tue 12 May 2026 17:11:55 +0000
Manifest next update:     Tue 19 May 2026 17:11:55 +0000
Files and hashes:         1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: nIwqyJoXUNO8UOC9wNnnEkQ6MO+hxQMlbmi8/zKm35o=)
                          2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: p2avfwbA5rKR8w+8rtSYTQz3CfMf5vT3jgg0mIj4V8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
                          rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4564 (0x11d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Validity
            Not Before: May 12 17:11:55 2026 GMT
            Not After : May 19 17:11:55 2026 GMT
        Subject: CN=6a035f5b-2bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:fb:a8:78:23:90:10:d1:3b:0b:1a:77:91:
                    cc:73:af:13:82:3a:69:16:34:70:1b:7e:2a:43:36:
                    a2:b9:8a:89:e3:fd:1f:59:09:93:74:1f:7e:9f:76:
                    b1:ad:52:84:04:96:96:12:09:e0:e4:d5:05:d9:77:
                    69:77:ae:10:6a:c8:cf:42:2c:7d:28:bc:12:21:d7:
                    21:1c:74:0b:61:a0:02:68:cd:2c:a9:f5:1a:f5:fe:
                    34:b8:03:cf:21:41:a8:7e:a5:b9:75:35:0c:5d:d6:
                    60:66:ab:c8:9f:5e:9e:2e:91:5f:d9:0c:3a:03:12:
                    b9:9f:ce:79:2e:2a:c8:f5:60:dd:3f:e6:0c:bf:be:
                    74:22:14:65:3a:1b:b7:8d:38:e4:69:96:87:b8:ce:
                    8e:90:2a:9e:08:fb:e3:94:fa:07:88:d0:89:44:8f:
                    0c:85:63:0c:4a:1f:4e:a8:59:c1:2b:39:42:aa:3c:
                    e5:7b:eb:bf:bf:84:5e:1d:08:09:03:4b:86:10:89:
                    6d:8f:cd:83:36:fa:e0:ee:34:72:4b:1b:81:f4:77:
                    2b:4c:a6:4a:5e:8a:e3:64:07:aa:8f:11:22:82:62:
                    c3:e7:31:ee:77:66:d8:db:41:52:74:85:a5:2b:e1:
                    73:82:b7:fb:dd:80:78:1f:49:30:11:a5:02:84:90:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9E:39:BD:78:D7:08:59:89:1E:92:CF:64:88:8D:1C:BC:AA:72:C6
            X509v3 Authority Key Identifier:
                keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d3:25:2e:ec:e4:5b:bc:09:21:2f:ac:a8:da:07:29:e1:ea:
         0c:95:7e:21:98:0d:c1:59:53:b2:80:ea:e7:02:59:d9:e5:bf:
         df:56:86:94:39:25:96:6b:cf:f2:f5:7c:ee:f5:02:62:c3:f5:
         3b:99:d2:d3:df:ba:7c:cd:cd:c4:3f:1b:b3:2a:9a:98:5f:a7:
         11:7b:67:cd:31:59:6c:73:1b:3b:1f:57:33:88:e2:57:4d:34:
         e6:19:ce:3b:3d:0c:82:8c:33:30:42:f1:bb:39:a3:e2:77:60:
         1c:6f:c2:84:33:88:f3:c3:cb:46:b3:4a:7e:c3:5f:1f:fc:47:
         8f:4d:12:f2:11:c1:7f:c5:85:e1:11:6b:d4:6d:2d:84:d2:2f:
         65:f1:c6:09:a7:89:bd:69:53:d7:be:8b:35:3b:20:07:4f:f3:
         f7:4c:e7:dc:3d:a0:9b:81:3b:29:a4:4a:d1:14:53:94:94:86:
         45:33:ed:5d:95:a5:ea:83:11:63:62:00:21:4f:a0:6c:1d:31:
         d9:c9:9c:f7:3f:7b:fe:3b:c0:bb:da:03:ce:03:cb:51:8d:6c:
         74:0b:ff:6b:aa:e1:d0:0d:3e:71:03:77:27:15:8f:7c:6c:2c:
         b5:f2:4a:c9:24:f2:71:ca:d4:61:74:17:2d:c2:3f:9c:43:9b:
         6c:83:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:12:23 2026 by rpki-client