Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
File:                     DqjhgHgwQyFWBjSjtPJuxux2ISY.mft (raw, json)
Hash identifier:          +SdJ4IjZPB3DNziBleH6RW6487S6bVkd5vlLPJTOqTU=
Subject key identifier:   2E:CF:17:DA:FF:08:5E:75:81:65:F8:AA:53:DC:33:D3:65:49:D3:B8
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Certificate issuer:       /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
Manifest number:          79
Signing time:             Wed 13 May 2026 07:51:29 +0000
Manifest this update:     Wed 13 May 2026 07:51:28 +0000
Manifest next update:     Wed 20 May 2026 07:51:28 +0000
Files and hashes:         1: DqjhgHgwQyFWBjSjtPJuxux2ISY.crl (hash: C0fuxGHRfoNwKWbuzZvFcDdhqND4IkYCVIYj07rfz8w=)
                          2: E0C97CB098BB11F0B5530B6CC4F9AE02.roa (hash: tzLz5H3WHIRmkrmCQ6z99a4YcvXFYzKj7iQvz5s9xtw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
        Validity
            Not Before: May 13 07:51:28 2026 GMT
            Not After : May 20 07:51:28 2026 GMT
        Subject: CN=6a042d80-16be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:57:9f:5a:78:cd:5a:72:6d:01:7b:7a:d3:
                    76:57:eb:e2:17:eb:1b:a5:4c:54:6f:20:ad:5a:7c:
                    f7:ef:28:3f:72:48:3d:d2:e9:1b:e1:ba:95:ec:f7:
                    9a:55:10:39:11:ac:1a:61:d8:46:35:d8:ca:e9:3e:
                    23:28:1e:0a:1b:9e:74:51:85:32:05:e5:63:0c:97:
                    26:1d:46:4c:d9:a1:5b:2e:b2:48:0f:e6:f9:a2:17:
                    94:af:38:de:dc:ff:18:25:42:cb:78:d1:ee:43:18:
                    87:15:0e:3a:0c:1b:17:c1:5d:0a:c0:bf:eb:32:9c:
                    33:01:a9:10:1a:f3:13:d1:a0:26:16:8e:3c:55:b6:
                    e7:f9:01:b6:4a:cd:ac:18:2d:97:c4:29:f6:cb:ba:
                    b7:f2:68:32:35:e1:f3:37:56:fc:79:6f:33:ba:e2:
                    ff:e4:0c:ac:18:99:15:72:a0:e2:e4:7e:d1:41:9a:
                    56:e9:e0:2a:12:00:e7:ac:58:19:c3:1c:8c:90:52:
                    4d:63:dc:27:82:a2:d7:16:85:92:58:59:4c:c9:e6:
                    25:32:04:b2:a8:0c:5d:26:47:51:4b:e1:b0:d6:79:
                    60:b1:31:8b:6e:1d:a5:0f:70:40:2b:b9:e7:19:a9:
                    13:c3:47:76:7a:3d:25:b5:0d:5e:98:b4:7a:ab:5d:
                    d2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CF:17:DA:FF:08:5E:75:81:65:F8:AA:53:DC:33:D3:65:49:D3:B8
            X509v3 Authority Key Identifier:
                keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:32:1d:b7:25:c8:85:c6:a9:23:29:a3:5a:10:13:e8:2c:3f:
         30:ba:09:3a:2a:9c:8a:d1:98:b3:7a:04:40:5e:1c:30:21:4c:
         98:22:85:05:41:4a:5a:41:d2:10:96:a4:a8:e3:24:ef:ed:6a:
         73:97:4c:ef:09:99:b3:c0:2c:72:6e:b4:2a:3d:45:13:f4:6d:
         98:b1:ad:12:e1:ec:0e:06:f7:b2:5f:8e:06:df:ca:df:70:fd:
         05:13:93:9b:1c:31:9b:a7:cf:63:c8:b7:db:09:0f:3c:77:c0:
         e0:b7:f7:94:47:f0:a7:84:51:be:7b:2a:f7:c0:6e:2b:79:c5:
         e5:cd:e9:f4:de:0b:d4:6d:50:e9:a9:ac:af:26:89:85:a5:af:
         03:ec:68:33:3b:7a:09:7a:ce:29:22:61:0a:a2:da:29:41:d4:
         07:52:2c:8e:0f:79:9f:c1:f7:67:6c:f3:d3:e0:c9:89:cf:07:
         98:cf:1d:b9:a1:6f:48:90:76:af:47:ee:9d:ec:42:6c:b7:7b:
         e5:b6:af:31:df:f2:09:a4:41:4d:54:7e:54:7e:86:b9:de:31:
         6a:93:aa:1a:de:ff:e6:ec:ed:a0:81:0b:26:b4:2e:f4:8f:6b:
         66:cb:aa:11:ca:48:a9:6c:7e:8d:62:ad:12:c7:d4:e2:46:17:
         eb:ca:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:38:22 2026 by rpki-client