Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
File:                     qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json)
Hash identifier:          o17HSQqYA+HfOUSeeIy7GapxqzmOt/LeF0X+9UxDeZk=
Subject key identifier:   A0:81:93:54:57:60:DF:79:6C:34:4D:53:6C:1F:43:D4:82:0D:BC:9D
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Certificate issuer:       /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial:       08A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
Manifest number:          0855
Signing time:             Tue 12 May 2026 21:20:05 +0000
Manifest this update:     Tue 12 May 2026 21:20:05 +0000
Manifest next update:     Tue 19 May 2026 21:20:05 +0000
Files and hashes:         1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: nCCEhu0LKUaTUMWhZVBzmPurpP5pFWx5Y78+smVbCXI=)
                          2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: azCvE0MXDPIZCtICB6ofLTQq6LREywUXev2jJIJ9EIU=)
                          3: 26E184C2B56D11F0939EAE46C4F9AE02.roa (hash: azCbrnSmOuKDp+iW9o/dWdbmL/D2BIUAZALDZgMZy1k=)
                          4: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
                          rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
        Validity
            Not Before: May 12 21:20:05 2026 GMT
            Not After : May 19 21:20:05 2026 GMT
        Subject: CN=6a039985-1ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:d8:dc:4b:85:9a:5c:84:ea:aa:56:ad:8a:
                    bf:44:1e:30:b2:f8:0b:47:45:af:45:ca:56:f2:5c:
                    be:11:f5:5c:09:64:0c:e1:42:92:70:dc:f7:ee:84:
                    53:ae:a2:5d:7d:fc:21:f6:bf:7d:da:00:04:5f:db:
                    4f:3c:cc:37:80:f6:c3:79:bc:97:23:f4:43:b9:cd:
                    37:6e:f6:c9:c6:1b:b6:11:81:b5:f2:6f:74:18:d8:
                    f4:58:e9:04:d1:24:19:fe:1b:af:3f:fc:2a:44:9c:
                    01:ff:d1:d8:f6:c1:82:63:91:4f:a5:39:70:63:e3:
                    d4:23:df:5d:28:b8:80:9c:09:a0:6c:c3:87:52:cd:
                    c8:9e:5e:49:4c:95:07:5f:99:5d:4a:90:df:12:a2:
                    d4:4a:e2:99:2f:64:2d:36:bf:00:ab:7e:78:6c:ef:
                    4f:ff:24:d0:15:bf:24:3b:26:dd:eb:70:9c:92:89:
                    cc:d0:58:b5:2d:3c:55:8e:0d:8a:ec:20:39:e4:1d:
                    a4:6d:6a:93:4e:fd:48:f0:70:2d:2e:4c:bd:bc:93:
                    5b:d7:c4:a5:78:e0:d4:70:b3:dd:09:cf:d4:1f:8e:
                    1d:7f:39:fb:d4:4d:a5:41:35:c2:b6:9f:90:39:99:
                    bf:ef:fa:d3:52:47:7d:81:da:ef:7a:27:04:9d:2b:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:81:93:54:57:60:DF:79:6C:34:4D:53:6C:1F:43:D4:82:0D:BC:9D
            X509v3 Authority Key Identifier:
                keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b2:b9:18:fa:2c:c2:25:fc:3b:7e:48:3b:bb:98:bf:96:e5:
         d0:7b:b3:f7:76:40:21:8c:15:2f:50:3f:71:b4:26:7d:f2:84:
         f3:fd:ab:ad:c4:ff:bc:6a:c1:30:ea:d0:30:53:c4:fd:79:71:
         27:d1:f3:91:70:f2:a4:90:d5:6f:65:c4:80:a2:b2:43:9c:dd:
         10:14:54:c2:89:2d:ae:af:d3:bd:7d:a0:b8:3f:b3:b8:80:f6:
         a0:c9:fa:17:ca:4e:9e:bd:ea:94:9d:52:b2:cd:e0:f3:3e:ca:
         6c:09:aa:55:10:10:dd:36:54:75:2a:ab:68:e1:9e:f7:79:06:
         46:03:a2:f2:b4:7a:45:ee:47:0f:c6:63:9e:a0:26:b4:74:07:
         24:30:f9:99:ed:0b:ed:41:4b:33:c0:d8:7d:ce:ec:8a:d0:1c:
         af:fa:65:ab:b2:36:a2:e6:32:d2:08:6e:f6:b4:6b:2e:f7:0b:
         ba:8f:0e:ca:f4:94:b0:9d:40:f8:9c:b7:dc:a7:8d:14:21:14:
         6c:93:86:43:5c:f9:fc:12:07:06:46:7b:f4:ba:01:ef:72:0f:
         85:33:a5:9a:32:86:63:46:44:d1:7b:9c:48:d4:b0:8b:c7:b5:
         a5:4a:a3:1e:bc:a5:c7:83:a9:d2:64:ff:d4:cc:c0:40:8a:d2:
         d8:f4:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:01:52 2026 by rpki-client