Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File:                     cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier:          a1kXuqouPVouao484XffqOaYDOAIFdEbZEBymi77zQY=
Subject key identifier:   B2:6B:3D:96:B8:E3:5D:1D:5C:B7:79:2A:00:97:5D:97:90:17:52:9B
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer:       /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial:       0849
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number:          083F
Signing time:             Tue 12 May 2026 21:00:57 +0000
Manifest this update:     Tue 12 May 2026 21:00:56 +0000
Manifest next update:     Tue 19 May 2026 21:00:56 +0000
Files and hashes:         1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: Do74W9oWdw7gPFV/keyU6DjRcp9E/w5iyl6HBCmq3fo=)
                          2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
                          rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
        Validity
            Not Before: May 12 21:00:56 2026 GMT
            Not After : May 19 21:00:56 2026 GMT
        Subject: CN=6a039509-1507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:ac:94:1f:e3:b9:a2:e3:c1:b1:9a:c1:0c:
                    fb:91:b8:d9:83:5e:74:1b:c0:a3:08:78:d7:74:13:
                    c7:ee:36:13:44:50:cc:b5:30:77:4d:d4:cb:6b:b7:
                    e0:3b:4f:81:60:c3:f2:66:99:ca:96:ba:31:d5:5a:
                    e6:f4:90:d4:f0:d5:9a:fa:f7:e9:ea:56:2b:e3:ee:
                    de:e3:c2:21:a0:41:f6:b9:c3:23:b6:42:06:37:aa:
                    18:57:5b:31:bb:8b:f8:94:a8:34:d5:7d:dd:f2:52:
                    fd:4b:0e:19:05:2b:5c:f3:07:d7:81:21:cc:bb:74:
                    37:8a:fc:cf:39:ea:57:e0:5a:5e:93:9a:05:ac:e3:
                    2a:e8:69:4b:96:fa:e7:56:1d:8a:d4:7b:41:25:c8:
                    9b:5e:0d:f8:98:38:b9:85:e2:0f:71:e3:03:3d:af:
                    ef:98:f2:08:3a:dc:5c:45:51:24:f6:5b:a0:60:b9:
                    7e:28:91:89:fa:d0:ac:47:3c:62:9e:1e:77:43:e7:
                    52:6e:76:86:1e:d3:d1:30:82:ec:a4:08:0e:68:3c:
                    4d:ac:e5:77:72:45:8e:17:9d:dd:8b:24:97:42:57:
                    ce:3b:44:99:1f:e8:45:9c:54:c4:ac:02:1d:1b:38:
                    4d:15:c4:3f:d5:c6:43:53:98:86:88:21:11:04:c3:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6B:3D:96:B8:E3:5D:1D:5C:B7:79:2A:00:97:5D:97:90:17:52:9B
            X509v3 Authority Key Identifier:
                keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e8:8a:5d:23:9a:0c:1d:9e:97:f0:3d:c3:58:a1:12:8b:a4:
         22:b2:a7:08:a1:3b:f0:c2:3c:58:4d:87:c0:ad:1b:12:e5:56:
         0b:f8:a9:81:e0:0b:8b:0f:51:0e:b0:ab:45:d4:01:84:6f:5f:
         10:44:0d:34:99:c7:2d:1b:b4:e2:bd:8c:48:1b:b5:7f:48:c6:
         1e:55:5d:81:40:0e:7b:85:01:75:3f:fc:20:3a:0c:d5:71:80:
         41:2e:88:38:3b:88:c6:4f:e8:70:fa:0b:82:79:aa:e7:97:26:
         f8:3b:33:65:46:a8:17:eb:51:94:08:d7:70:fd:00:06:0f:dc:
         df:af:9e:be:48:ec:d2:b3:d9:6b:05:47:61:9e:8b:ae:c1:6f:
         ba:2f:cb:7c:55:d2:e5:11:0b:7c:13:24:da:cf:7e:b6:58:3c:
         6f:34:47:5c:c9:2f:a2:17:1d:9f:f9:b1:3d:6e:a3:e9:79:8e:
         51:04:fd:51:e9:4b:1e:62:d6:a9:eb:0e:d5:dc:89:75:ae:74:
         92:cc:3c:d5:f7:e1:4b:b7:e7:03:71:cc:6b:6b:7e:5e:a3:1c:
         7d:2b:7f:9b:25:60:fe:14:f9:58:03:8c:87:19:9c:28:50:9f:
         9f:f4:bb:5a:6f:af:cb:44:a0:d1:1d:22:95:a1:dd:eb:88:f1:
         16:0a:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:49 2026 by rpki-client