Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File:                     Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier:          eFD3LyQTm31/aDlVBJGpX5aYasBd0QDt9qUO3cjnvMQ=
Subject key identifier:   CE:04:5C:B2:E4:61:23:83:1A:F8:17:31:C6:D2:EF:9E:8E:66:B3:3A
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       06B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number:          0693
Signing time:             Tue 12 May 2026 22:37:07 +0000
Manifest this update:     Tue 12 May 2026 22:37:06 +0000
Manifest next update:     Tue 19 May 2026 22:37:06 +0000
Files and hashes:         1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: 2+QDf9BanW0LjydPLbW3mlbvNCWddYcY7wOgu5dBBCA=)
                          2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: iKG0U4dWo4Ii/ph+5g5SKDA8RO4TnmSAWL9RH3BX7Bo=)
                          3: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: gkPTMzL29fjMeAxqDDyIKfb4bjNAUoeuE5oKyKWBCYo=)
                          4: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: vBCGm7MlYdNXXeaoLUD2KJwJGSuIu+kSne2oG2vKSsU=)
                          5: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: 5CQDa/aa5UAIsTkpec0rYhloDDXKxfbpTB7+YpevLrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718 (0x6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: May 12 22:37:06 2026 GMT
            Not After : May 19 22:37:06 2026 GMT
        Subject: CN=6a03ab92-8c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f9:d8:a7:3c:3f:50:49:cd:2a:99:4d:39:89:
                    ea:e9:14:4b:63:7d:12:09:42:9a:69:07:c4:d2:2d:
                    20:e9:06:1c:c4:30:fd:04:64:f7:e0:f4:52:e9:1d:
                    1f:05:e0:70:e9:1e:34:68:66:12:a8:10:2e:4a:58:
                    5d:47:42:79:a5:e0:e6:32:25:55:6a:e6:d3:f3:bb:
                    ca:5f:f3:c4:c3:00:eb:ca:1a:17:ea:aa:eb:c0:0a:
                    e3:6a:9f:87:a9:4f:e6:10:09:b6:f2:80:e1:ed:05:
                    a3:06:84:ac:3c:a0:72:3a:13:51:ff:06:8c:4d:14:
                    a4:cb:15:1b:3c:c7:d0:3c:da:f8:b1:2c:49:68:d7:
                    82:ce:01:b5:84:7d:f9:99:0f:0d:0b:c3:05:7a:6c:
                    8d:a5:ab:e3:76:f8:16:c0:05:94:73:c5:ba:15:3f:
                    45:08:cc:ce:ad:64:d9:55:2e:a2:c7:1c:ba:96:74:
                    e9:d2:41:03:e7:92:6b:67:96:bf:13:53:3e:00:d3:
                    d2:4e:25:03:86:aa:b1:8f:2a:e1:e7:5a:b5:31:55:
                    47:ae:1d:e3:1a:27:4c:e8:b7:66:9a:6c:28:d0:f1:
                    94:49:95:e4:8a:5d:4d:f9:70:b2:d1:ce:af:cf:6b:
                    b8:7a:f5:38:11:26:d7:0d:2f:20:bd:b2:59:17:e6:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:04:5C:B2:E4:61:23:83:1A:F8:17:31:C6:D2:EF:9E:8E:66:B3:3A
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:88:c6:95:a9:e0:b4:f9:5e:ec:21:e0:f4:84:ca:ec:41:66:
         a6:f6:46:e9:db:6c:c1:4c:5d:79:a9:b6:99:a0:49:66:f3:17:
         26:f6:a1:72:36:25:f9:d1:54:e9:a1:70:fa:0e:92:ec:4a:c3:
         e2:eb:cf:20:16:ec:c8:a2:63:8e:0f:3f:a5:7f:73:84:9a:28:
         b1:b4:2c:27:03:48:03:1b:b1:1b:0f:df:72:83:e2:de:d2:d4:
         29:25:c4:63:9a:2b:22:81:04:aa:6e:57:2f:57:c1:58:b3:cb:
         ce:f9:a5:5e:ca:15:29:de:da:c5:e2:de:16:69:e1:23:77:fe:
         f7:2d:e1:af:92:9e:f6:2a:36:4c:43:a5:ba:92:39:6b:f8:00:
         78:26:da:ea:dd:77:38:c8:d6:15:0e:66:46:b7:28:42:ac:fd:
         6f:d7:8e:9a:fb:01:9e:64:69:ee:c9:f9:b0:c6:3b:d3:b2:74:
         f3:b1:44:ae:a2:3d:5e:4e:8e:64:4e:a6:bd:b4:23:9d:67:e8:
         27:14:23:0c:a2:12:44:4e:3b:89:55:9e:03:30:8b:75:50:41:
         8a:28:f8:cb:02:0e:7b:f0:11:1a:65:32:e7:f0:7a:c3:08:71:
         c7:5e:e1:dc:44:89:2a:48:45:d5:37:77:a8:1b:ba:36:4f:1b:
         83:51:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:29 2026 by rpki-client