Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          mMZkdUKzwUDflb3MOvJVakoIVEVWnkPq8NWg5l8NImI=
Subject key identifier:   27:C3:AA:ED:AD:E4:4F:AD:08:D0:62:43:B3:2B:63:5D:E6:3A:92:0A
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          012F
Signing time:             Wed 13 May 2026 05:39:53 +0000
Manifest this update:     Wed 13 May 2026 05:39:53 +0000
Manifest next update:     Wed 20 May 2026 05:39:53 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: P5or1WNSAzaDx53uO3hi3MmvnGJOcA1Fc0Bq+Fljvqw=)
                          2: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=)
                          3: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: May 13 05:39:53 2026 GMT
            Not After : May 20 05:39:53 2026 GMT
        Subject: CN=6a040ea9-a700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:ad:57:8f:22:b2:27:73:45:82:93:e8:c7:
                    74:6f:0e:d7:1e:37:88:21:48:3b:5d:ca:83:a0:ac:
                    28:89:be:99:cb:57:ec:3a:8d:73:6d:fa:69:92:fb:
                    61:43:21:3a:65:f4:24:88:fa:49:43:b4:86:52:03:
                    00:c9:2c:a3:af:aa:74:59:f0:2d:25:67:00:ee:50:
                    89:5e:8a:59:aa:d4:71:7d:f6:1e:31:39:93:5a:4a:
                    ad:60:e4:0c:95:0f:6b:2b:6a:31:6e:99:fd:05:a4:
                    e6:34:d0:80:45:9a:17:2b:7c:30:70:0d:7d:52:5c:
                    17:13:35:72:6b:64:d6:08:80:8a:d1:7d:5f:08:a7:
                    03:5a:07:7d:f3:91:7d:4f:ff:12:34:39:a1:4f:11:
                    dc:2e:7d:4d:bb:c2:c9:0d:d9:d5:42:6f:0f:a4:71:
                    77:7f:c4:53:3c:60:7c:7c:1b:b1:aa:e1:88:c0:06:
                    54:fe:91:49:08:3f:f2:19:e2:de:5d:43:c9:1a:5d:
                    df:5d:18:51:b0:57:ed:54:e6:aa:5a:e6:f1:02:2c:
                    04:5c:f0:ba:f0:96:eb:a5:bd:e0:f3:6e:6c:06:a7:
                    22:b5:3d:86:b5:f0:88:0c:4e:64:71:ea:63:9c:23:
                    b1:49:54:33:1c:3b:1b:4c:3d:b7:c7:ac:89:b6:7b:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C3:AA:ED:AD:E4:4F:AD:08:D0:62:43:B3:2B:63:5D:E6:3A:92:0A
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7f:b9:53:12:9a:46:4b:7e:93:dd:8d:f6:91:df:10:0a:97:
         5e:10:86:89:9d:b9:04:81:ad:48:46:5c:88:af:ae:5f:2c:40:
         35:2c:1f:b5:50:bb:0b:b6:57:73:5a:42:2a:e8:e5:c2:c6:d2:
         53:37:57:ae:a2:9c:32:9f:f4:cf:f8:a6:07:d3:e4:c4:9e:d8:
         ca:84:28:f8:ec:fb:4d:26:cc:73:7f:3f:89:35:db:b6:8e:48:
         06:8c:36:cd:56:9a:ac:65:fe:f8:51:ae:95:2e:fd:37:cc:a4:
         28:4e:c8:34:1e:7e:7c:4b:2e:d8:00:e7:72:60:23:c1:35:a6:
         fb:e4:b0:4b:ff:36:4c:9f:57:da:ab:e5:ce:6c:43:04:ea:fa:
         da:15:53:40:29:8c:48:49:b7:61:48:ba:d2:05:86:8a:5e:79:
         fa:32:f1:77:26:bb:a1:0f:ff:33:03:df:0d:e4:23:4e:7d:79:
         a6:6d:9f:76:84:2e:e6:b7:ec:6b:8c:27:92:c8:f1:dc:c1:a9:
         03:7e:82:f0:b2:e6:97:60:5e:8d:f6:1b:a4:3a:35:3e:3d:0f:
         5b:c1:36:b0:ec:73:20:9d:82:83:06:d9:be:7d:3d:fc:9a:e6:
         3a:2a:97:d0:d2:69:e0:e8:df:13:67:83:a3:37:4a:b6:68:e4:
         e1:e3:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:53 2026 by rpki-client