Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
File:                     cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json)
Hash identifier:          LNHQKPa60pmT0Ua6NrBa31Zyg09//+BUgLbu4zmmFNo=
Subject key identifier:   B5:F4:5E:0E:29:73:2D:B7:49:C9:DC:25:A9:87:1B:A6:66:26:B5:EB
Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
Certificate issuer:       /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Certificate serial:       07B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
Manifest number:          07AD
Signing time:             Tue 12 May 2026 22:26:35 +0000
Manifest this update:     Tue 12 May 2026 22:26:35 +0000
Manifest next update:     Tue 19 May 2026 22:26:35 +0000
Files and hashes:         1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: n3OaPmr1Di/XQEXYXuRNo8J+6Lg14g1vrIpyJpGyaaw=)
                          2: D3B421A2366811F0A18FF40AC4F9AE02.roa (hash: gnBhRZz6lqy+9fZ3prGW4rSWgd+luFMhY8LE1PUlSC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl
                          rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
        Validity
            Not Before: May 12 22:26:35 2026 GMT
            Not After : May 19 22:26:35 2026 GMT
        Subject: CN=6a03a91b-9bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:f3:02:0f:56:27:1f:a3:1c:66:b8:ef:a6:
                    43:59:0b:34:aa:20:a6:79:08:d1:82:b7:77:b8:a8:
                    9c:e9:41:67:1a:44:87:37:f9:c9:1a:3c:f1:b8:4e:
                    9b:f3:8e:27:f6:44:93:1d:cd:2d:14:10:72:2b:8e:
                    41:a0:a5:0e:fc:7e:f3:99:4f:0e:8c:ab:6a:e5:8a:
                    a3:7d:1c:3b:c3:df:f5:3d:0c:25:9a:7a:7f:ad:8f:
                    ab:e8:ec:6b:9c:b1:06:54:67:0a:ad:2e:8b:1c:65:
                    41:d9:68:fd:0c:25:c0:ff:ca:7e:3e:d5:2a:25:ce:
                    a4:2f:6c:f6:a7:9a:ba:56:5f:c1:54:93:0b:63:a2:
                    77:99:63:c9:02:b3:eb:85:c0:a9:64:bd:bc:8d:59:
                    92:69:b7:ee:92:99:7d:ba:ef:42:7b:34:10:21:04:
                    2d:82:1b:ed:a2:71:ac:e7:ed:56:d8:65:45:10:43:
                    21:89:a8:ca:09:66:e4:3b:a5:c3:37:ab:ea:79:64:
                    fd:d6:c6:a0:50:54:6b:e4:9b:d6:d4:80:82:68:49:
                    15:72:03:34:f0:f0:e4:0d:48:ca:c4:91:68:1d:3f:
                    d6:07:60:7b:86:a1:21:6c:e8:5d:20:05:81:2f:c5:
                    f2:52:a0:99:96:3a:60:ff:e7:51:e8:32:eb:f3:e2:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F4:5E:0E:29:73:2D:B7:49:C9:DC:25:A9:87:1B:A6:66:26:B5:EB
            X509v3 Authority Key Identifier:
                keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:14:9f:72:e0:0e:4b:bb:5c:29:82:e8:49:a3:ce:11:0d:8a:
         8d:62:90:5d:7a:8e:85:37:12:1d:77:df:8e:c2:24:de:b1:e2:
         2f:05:69:8f:9a:22:59:6c:f3:fb:b6:68:fe:56:75:70:29:d1:
         43:e7:d4:3f:51:a0:75:5d:47:d0:7f:86:7f:59:13:38:32:04:
         63:36:6b:46:9a:23:a7:46:d4:4b:5a:7f:a1:50:0e:49:a3:43:
         d4:5e:7a:1b:a7:b3:1a:a9:b4:83:d9:2c:91:8f:10:d1:2f:ad:
         5c:ea:20:cc:ba:cd:4e:e4:c2:84:8a:5e:7e:54:68:23:1e:3a:
         39:46:6e:25:7f:b8:19:02:31:84:61:1c:6d:5c:ea:20:d3:38:
         81:1c:b7:c1:26:63:40:0d:61:67:66:b3:ed:80:9f:cb:a4:88:
         3a:09:d3:b7:d6:33:68:12:c6:c8:3f:2f:be:01:b5:4c:67:24:
         61:7b:80:f4:6f:a6:45:13:1a:e4:88:e7:56:83:3f:5e:30:f8:
         b5:5d:f9:6e:3c:56:5c:38:03:5a:62:f5:8e:aa:32:8f:f4:80:
         ad:2c:b9:02:44:56:87:47:a8:64:97:d7:c0:17:85:08:91:53:
         35:72:1a:41:11:ce:ef:5b:00:fc:56:b2:2d:e3:2f:84:a6:8a:
         3f:ba:26:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:05 2026 by rpki-client