Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
File:                     spEQIVRHIYPPUNKub6MOG940K_Q.mft (raw, json)
Hash identifier:          65VSu9am7O3/vCFk3Q59JDCROvECYMLqbwFrtOwLezw=
Subject key identifier:   03:F1:9C:81:6D:97:77:79:CA:75:68:1E:FB:43:96:11:CE:91:7E:BD
Authority key identifier: B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4
Certificate issuer:       /CN=A91FB095/serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
Manifest number:          0225
Signing time:             Wed 13 May 2026 02:55:04 +0000
Manifest this update:     Wed 13 May 2026 02:55:03 +0000
Manifest next update:     Wed 20 May 2026 02:55:03 +0000
Files and hashes:         1: spEQIVRHIYPPUNKub6MOG940K_Q.crl (hash: SAmHDMYtl4iuO3D6jAU5Q1Nw++fy9B4EDvhtnL8QSrg=)
                          2: 35A46D4E1A5611EE93742844C4F9AE02.roa (hash: ebN5g/mLZ+iv553qbwuex8M4P6A1JM4zrqLcn9GGHns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB095, serialNumber=B291102154472183CF50D2AE6FA30E1BDE342BF4
        Validity
            Not Before: May 13 02:55:03 2026 GMT
            Not After : May 20 02:55:03 2026 GMT
        Subject: CN=6a03e808-c930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:6a:6a:b0:57:60:26:b8:55:cd:49:02:02:
                    30:38:e5:fd:31:3b:24:72:17:a1:7f:f2:18:8f:ce:
                    d3:c0:78:01:68:cb:68:66:d0:b0:a9:46:8d:b0:1e:
                    f1:7a:2a:d4:8a:3f:9d:21:88:06:11:98:21:33:37:
                    2b:45:2e:46:ee:77:d3:2d:06:4c:52:75:e0:10:a9:
                    9a:38:f5:73:24:fc:95:ec:57:e8:3e:6b:46:f3:10:
                    0c:9b:82:86:7b:a5:b7:85:cb:e6:71:03:4e:10:9f:
                    63:08:79:35:da:24:f4:c1:a1:9a:94:16:ab:3d:4d:
                    68:10:ba:d9:fc:73:5c:94:31:fb:df:2e:86:57:4a:
                    fb:03:37:97:0a:d9:6d:3e:20:d3:bc:45:9d:86:65:
                    3a:53:af:10:5f:87:e7:0b:f1:10:52:b9:59:68:ba:
                    20:66:98:44:d7:bc:15:9e:30:f5:ac:97:5a:8d:1d:
                    2e:f7:eb:09:2f:7a:d5:8c:76:58:82:31:76:b4:84:
                    2e:d2:ba:2b:79:6f:be:71:37:6a:56:52:c0:ba:62:
                    e3:44:dc:84:d3:23:bf:71:8e:36:cc:fc:31:74:c8:
                    62:c6:f0:df:8f:71:37:23:a7:ef:0e:85:10:37:1b:
                    e0:74:51:cd:e0:a5:77:22:dd:48:56:33:7b:50:b8:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F1:9C:81:6D:97:77:79:CA:75:68:1E:FB:43:96:11:CE:91:7E:BD
            X509v3 Authority Key Identifier:
                keyid:B2:91:10:21:54:47:21:83:CF:50:D2:AE:6F:A3:0E:1B:DE:34:2B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spEQIVRHIYPPUNKub6MOG940K_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB095/AABEB56A1A5311EEA4608814C4F9AE02/spEQIVRHIYPPUNKub6MOG940K_Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:21:c3:d5:83:29:f2:f9:f7:bf:5a:dd:5d:ff:e8:60:27:
         fb:3d:67:97:4e:5b:ac:3c:e4:80:e5:f4:7f:ed:0a:56:2e:d8:
         b2:de:ce:6e:ad:6e:96:40:a9:57:49:10:c9:41:8f:61:66:0c:
         a8:58:88:8f:fa:de:66:b9:a5:bd:96:dc:a2:33:42:65:ba:39:
         81:b5:05:ca:ef:06:d1:36:79:4c:ca:6b:1b:cd:d3:0c:f5:4d:
         b9:8c:27:00:fe:84:f0:b4:6d:ec:0b:b8:f1:ba:44:5f:0a:3d:
         dd:e2:e3:54:f5:98:c6:37:eb:c3:10:f9:d7:d3:14:f7:0a:b6:
         26:61:df:df:35:4a:b9:22:0a:5c:39:72:a7:51:fc:67:a9:e8:
         81:21:7e:2c:28:c8:78:ba:25:df:b3:11:e3:a3:9f:e4:58:9d:
         ba:33:ca:41:b7:e0:4a:dd:79:9e:62:f7:96:67:98:a8:b5:ff:
         87:8a:48:73:bc:f5:34:66:4e:39:d8:7e:06:dd:c3:06:35:79:
         9a:12:4d:d9:f1:2e:21:99:aa:2b:6f:a9:f2:c7:ea:d6:c0:e3:
         47:3b:ff:25:2e:e6:3c:f1:48:ce:19:ff:d0:99:23:34:3c:75:
         b8:f7:6b:e6:fd:95:c1:b8:27:c1:31:26:34:11:55:bc:45:27:
         44:c7:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:22 2026 by rpki-client