Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
File:                     Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft (raw, json)
Hash identifier:          cuCAVpf575MDZ85aV6ZKUoAFYvtQ20y5lIl+/cK/CnE=
Subject key identifier:   2B:CD:A9:DD:4C:3F:58:C0:E4:99:F4:91:7F:2A:92:28:E8:62:5B:1E
Authority key identifier: 43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4
Certificate issuer:       /CN=A9180484/serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4
Certificate serial:       0E06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
Manifest number:          0DFA
Signing time:             Tue 12 May 2026 17:52:23 +0000
Manifest this update:     Tue 12 May 2026 17:52:22 +0000
Manifest next update:     Tue 19 May 2026 17:52:22 +0000
Files and hashes:         1: Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl (hash: h1vRCNBvt0gTac+0jkqLapHkAn0t6iSYUv/rL4UsTEs=)
                          2: D2588FA2D2C111E9B5D20B2AC4F9AE02.roa (hash: RQcnUY2ghoOnBxEoKgojycXvIPQWfacqz6Xk8jibV5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl
                          rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3590 (0xe06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180484, serialNumber=435BDF930304194A0869ADEE87A0B556C588F6F4
        Validity
            Not Before: May 12 17:52:22 2026 GMT
            Not After : May 19 17:52:22 2026 GMT
        Subject: CN=6a0368d7-4afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:97:c4:74:e2:f3:b1:dd:0c:11:7d:90:9c:
                    f3:c9:48:9e:df:c5:a0:5e:40:ed:81:21:31:5b:28:
                    12:c2:80:f8:a2:50:9b:1a:bc:b3:f0:e2:7d:85:0e:
                    59:0a:ac:e8:38:9a:75:bf:81:bb:67:f0:bc:17:b6:
                    8b:29:6b:58:45:fa:07:e9:aa:35:bd:f0:a3:3a:66:
                    19:cd:2a:e8:3f:8b:39:84:43:ab:06:84:ab:dd:48:
                    45:84:eb:b1:4c:a5:91:a8:b4:01:2d:df:b8:9a:76:
                    b1:53:4e:ea:e6:e7:76:18:20:bb:8d:ac:4a:4b:27:
                    ab:e3:71:6f:e4:4e:88:26:75:3d:c8:00:ca:8d:7a:
                    80:97:03:85:04:7c:56:3b:7c:0e:f4:c4:c1:cc:da:
                    dc:aa:fd:37:2c:24:4c:57:22:d7:f7:5b:3e:c1:d2:
                    96:4c:5f:a4:b1:40:8d:44:db:75:21:28:e8:c5:2d:
                    75:3b:46:08:12:eb:5a:f7:68:ae:00:d4:d1:fb:cf:
                    02:35:00:ec:1f:44:9b:e2:57:39:41:88:0f:7f:79:
                    20:3f:0e:c4:3e:55:87:e3:b9:14:ca:90:03:44:2d:
                    28:0a:33:3a:02:f0:d3:1c:73:29:e6:31:33:f7:cb:
                    8c:44:14:7d:2e:4b:d3:f3:ec:a9:d1:f5:e1:4b:de:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CD:A9:DD:4C:3F:58:C0:E4:99:F4:91:7F:2A:92:28:E8:62:5B:1E
            X509v3 Authority Key Identifier:
                keyid:43:5B:DF:93:03:04:19:4A:08:69:AD:EE:87:A0:B5:56:C5:88:F6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180484/6925BD8ED2C111E9A925CD29C4F9AE02/Q1vfkwMEGUoIaa3uh6C1VsWI9vQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:39:9d:72:8c:09:f7:b6:d6:01:d0:0b:3b:b3:57:bc:14:72:
         2c:c4:9b:63:fd:4d:3e:f6:10:2b:31:20:db:23:45:0b:68:98:
         5b:13:21:bc:a3:4e:29:f6:17:a0:fa:79:31:a9:d3:13:a1:d0:
         a2:05:a4:c7:38:0d:93:c6:a7:64:c1:36:ee:57:79:3d:18:a3:
         c1:56:8d:c7:db:ab:2e:67:b2:c7:23:b9:7b:ab:cb:a4:b8:16:
         80:40:39:df:29:82:8c:97:3a:df:62:34:7f:4a:51:95:89:1f:
         ec:13:a4:7a:13:8d:d2:0a:99:84:40:cb:53:ae:14:98:e1:0a:
         7d:ff:7f:82:7a:3e:7b:2b:f8:f7:56:72:78:19:fb:88:e7:c3:
         66:ee:58:c8:47:77:60:56:3c:24:42:d4:8d:89:99:4f:b0:4f:
         d6:10:11:56:b2:ab:cb:6a:ac:41:bb:c1:ed:bc:1f:e9:ce:22:
         0d:4a:35:5b:8f:08:a4:82:6c:db:9b:6e:68:b0:f8:c1:1d:b0:
         70:b5:59:c3:62:54:84:64:ad:42:c4:ff:e7:4f:46:c9:bc:0e:
         f5:3a:3b:d9:ae:1e:fe:a0:3a:58:b1:75:64:fc:7a:bf:6e:9b:
         de:b3:90:1e:ce:b2:ab:5a:af:b2:74:d1:9b:49:7f:21:fc:af:
         ff:5e:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:45 2026 by rpki-client