Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
File:                     -QbZf3qofIbamQOdI27NtR0jH3o.mft (raw, json)
Hash identifier:          O0tj+ZfvMtRjV3LBytRTzyNZTowqv9PZ/dRjSo38VlM=
Subject key identifier:   61:80:ED:A8:3B:FB:CB:4A:14:D5:8F:16:B1:7E:59:0A:6F:0A:32:C7
Authority key identifier: F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A
Certificate issuer:       /CN=A919FE97/serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
Certificate serial:       072D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
Manifest number:          0722
Signing time:             Tue 12 May 2026 21:56:21 +0000
Manifest this update:     Tue 12 May 2026 21:56:20 +0000
Manifest next update:     Tue 19 May 2026 21:56:20 +0000
Files and hashes:         1: -QbZf3qofIbamQOdI27NtR0jH3o.crl (hash: NS+cvGHeqOM9TKwyiUnPv7Q76O6lIM0f0pdKCwIMfnU=)
                          2: 06EFF1D07D4B11EBA736017DC4F9AE02.roa (hash: H4nUYpPqOxi1wSgruwKar4kfBYf1aIvICgsUIhJSeV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl
                          rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837 (0x72d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE97, serialNumber=F906D97F7AA87C86DA99039D236ECDB51D231F7A
        Validity
            Not Before: May 12 21:56:20 2026 GMT
            Not After : May 19 21:56:20 2026 GMT
        Subject: CN=6a03a205-b79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:65:18:75:1e:07:31:ff:86:13:eb:78:23:b3:
                    d5:33:91:d1:fd:ae:3c:e5:14:5a:f4:7a:ad:d6:a6:
                    7f:cc:34:8c:05:8f:01:d8:b3:94:af:31:38:67:e3:
                    45:0f:37:3c:81:da:56:08:31:eb:92:dc:85:7b:b4:
                    17:cb:cc:17:74:16:5d:a0:41:dd:db:c5:8e:0f:ac:
                    5f:eb:5e:0f:b4:1f:1d:8c:20:c5:fc:73:5a:ac:4c:
                    2d:2c:7a:69:f5:b6:f0:84:9e:b5:97:e9:3c:82:70:
                    a2:0f:25:a2:3b:e2:af:ca:8d:86:4b:1f:76:3a:c9:
                    6c:bf:5f:69:f5:d8:01:46:6b:14:ff:53:9a:87:34:
                    84:10:37:a6:fb:12:c3:9f:5d:8b:fc:da:02:99:af:
                    3a:f9:aa:81:6d:11:73:93:06:1c:78:71:77:4a:af:
                    bb:0f:23:94:b9:47:24:ab:de:23:77:f0:6c:dd:bc:
                    81:00:3d:0b:36:99:34:3b:83:d5:3f:2f:f4:ca:cc:
                    1f:b3:39:82:08:09:bf:79:d6:33:30:dc:94:31:69:
                    41:e7:69:d0:c1:b3:3d:c9:4c:e5:3f:94:4a:27:e1:
                    b9:ad:ac:e4:fd:65:4d:28:5e:2a:d0:f3:6f:3b:e3:
                    87:f2:85:1c:02:a8:23:53:6e:6e:b2:15:5d:b6:9f:
                    46:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:80:ED:A8:3B:FB:CB:4A:14:D5:8F:16:B1:7E:59:0A:6F:0A:32:C7
            X509v3 Authority Key Identifier:
                keyid:F9:06:D9:7F:7A:A8:7C:86:DA:99:03:9D:23:6E:CD:B5:1D:23:1F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-QbZf3qofIbamQOdI27NtR0jH3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE97/D218302E7D4711EB93121F58C4F9AE02/-QbZf3qofIbamQOdI27NtR0jH3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:d6:92:6f:46:d2:8f:45:4f:ed:15:dc:41:1d:ac:f1:6c:
         32:3d:68:d2:8d:59:ff:33:87:bf:54:81:93:24:bd:bd:f1:11:
         87:53:9a:7e:ed:8b:88:95:b5:b6:78:3b:6d:6e:0e:cf:0b:5b:
         94:10:c9:f3:d8:ba:cc:38:41:69:5d:93:cd:fc:c8:9d:10:91:
         da:ca:3a:ae:de:f1:c6:92:c2:3d:08:73:1d:49:d3:fb:e6:9d:
         88:de:6c:6d:a8:74:de:93:e9:ef:4f:71:b1:cb:a2:02:9d:e3:
         56:40:16:c1:c1:3f:fe:68:70:74:6e:e4:03:59:ee:31:17:91:
         e7:34:02:d2:e2:0c:18:52:c7:b1:3e:76:0d:29:73:14:f6:0d:
         1a:49:04:67:a7:47:9d:30:27:b4:3e:12:5a:de:06:c4:78:5e:
         6e:29:55:31:4d:61:e0:70:9e:0d:fe:65:59:66:c8:5a:1f:cf:
         a3:a1:9d:b9:c2:71:b1:85:54:0f:34:8e:6e:a9:7c:d6:39:53:
         09:97:0c:b9:f2:38:5e:91:8b:32:07:2f:51:af:53:cb:9e:dc:
         d2:f7:e7:79:13:31:1e:af:a6:80:2e:bc:b5:f4:8c:a4:88:b2:
         fb:af:d5:fd:14:2c:6c:68:6f:45:dc:87:da:fd:da:f5:f5:c8:
         16:a8:bd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:37 2026 by rpki-client