Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
File:                     qdfTMxZtqSYb56g2YxgPO_DskKE.mft (raw, json)
Hash identifier:          Fu8i77edHqFpDnnkJLoAvFI+cde5iRYx2lHoWb4yt44=
Subject key identifier:   9B:9B:7C:B5:45:61:6D:71:8C:D4:8A:CF:50:25:C3:39:B3:74:8F:93
Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
Certificate issuer:       /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 09:23:35 +0000
Manifest this update:     Wed 13 May 2026 09:23:35 +0000
Manifest next update:     Wed 20 May 2026 09:23:35 +0000
Files and hashes:         1: qdfTMxZtqSYb56g2YxgPO_DskKE.crl (hash: lGTFmyyxpzk2Re6QYfBr2pvt/dkLSQCnGEc9jdjXB4U=)
                          2: 773251504B5D11F1927AF905AF833773.roa (hash: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
                          rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
        Validity
            Not Before: May 13 09:23:35 2026 GMT
            Not After : May 20 09:23:35 2026 GMT
        Subject: CN=6a044317-a4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:77:1b:56:f0:85:de:12:92:2a:4f:15:50:
                    d3:0e:44:7a:16:54:58:79:85:55:79:dd:cb:3a:fa:
                    62:c1:91:a6:8a:c2:e9:e0:9c:a6:eb:90:d7:98:75:
                    e4:15:56:45:55:77:8d:5a:e4:9e:38:a9:4b:4c:22:
                    c9:d4:34:57:3d:37:34:2a:c8:0b:3d:16:88:01:b6:
                    f0:2b:41:4d:15:ac:88:63:a1:7c:62:2b:88:47:bd:
                    ff:72:9c:03:e3:09:69:e0:4e:56:3f:e5:b8:f3:5f:
                    88:45:8f:e3:a0:59:1c:88:6f:bb:39:a7:99:14:97:
                    6a:c1:99:7c:32:8e:be:b6:fa:1c:42:e1:b6:4e:36:
                    cd:89:b2:2d:f8:d3:0d:f8:29:b5:fc:e8:e2:34:ed:
                    5f:30:4c:71:93:79:99:d1:79:f0:cc:e5:d5:aa:0d:
                    42:58:a6:5a:69:98:9d:27:cd:20:50:a3:a2:11:53:
                    3e:16:f9:7a:47:a7:14:45:b3:86:0f:98:e1:79:a3:
                    23:8c:c1:a5:60:0b:80:55:3c:3a:ac:dd:78:24:2c:
                    68:a1:b1:51:36:9c:08:9a:13:50:62:93:b1:6b:5b:
                    42:cf:8d:3e:ce:9e:e6:58:ad:d3:21:f4:8d:bd:e9:
                    10:cd:a6:42:77:79:17:46:8a:ef:80:e2:fa:ab:87:
                    09:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9B:7C:B5:45:61:6D:71:8C:D4:8A:CF:50:25:C3:39:B3:74:8F:93
            X509v3 Authority Key Identifier:
                keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:85:34:95:c4:c0:49:8f:98:0a:2e:dd:cb:af:04:6a:3f:69:
         04:69:15:56:00:26:3b:b6:62:05:95:7c:ec:a9:55:4b:01:77:
         ee:f0:58:e9:bc:ea:cc:17:4c:69:ad:42:62:2a:2f:fb:ab:54:
         22:3f:c6:9e:46:0d:12:9b:01:9f:28:83:fe:33:fe:94:91:3a:
         a3:7b:05:ee:14:b7:16:08:2b:9a:42:6b:2f:13:8f:be:3c:0f:
         7c:7e:14:93:d2:3b:ca:cc:de:53:cb:15:a9:a0:f8:6e:ae:92:
         0c:77:a4:5b:81:55:5b:c0:60:71:1a:28:5e:80:15:f3:9e:8e:
         a9:73:a1:82:1d:b6:d7:73:40:cd:03:25:4a:ba:5f:1b:c8:07:
         40:f8:b6:23:13:89:47:6f:97:e6:bf:99:dc:04:4e:ce:9c:28:
         18:c1:7e:b0:43:a5:7c:37:aa:2e:db:98:e8:e7:c5:f9:a4:0d:
         7f:59:0a:28:28:91:03:8f:3f:6f:a0:4c:8a:e8:aa:39:0c:e6:
         7a:11:f6:9d:45:40:5e:c6:70:62:c7:12:d1:de:ac:c1:59:76:
         40:06:61:31:4a:84:3b:17:da:29:bf:d6:32:28:52:c6:c6:33:
         56:1f:d6:99:df:e7:92:59:b6:ae:b5:64:40:39:dc:dc:81:34:
         e9:a5:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:23 2026 by rpki-client