Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
File:                     QF5asHUAe6PYUmLWiyUZhsbp3V0.mft (raw, json)
Hash identifier:          2LDW/sEyT99HBtQAO9lhKFCAvWJFsMfsuk05XMdAD/o=
Subject key identifier:   CC:18:46:79:B0:60:5E:6C:88:9F:5B:2A:87:55:16:D0:E9:1F:BC:0E
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Certificate issuer:       /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
Manifest number:          58
Signing time:             Mon 11 May 2026 08:25:10 +0000
Manifest this update:     Mon 11 May 2026 08:25:10 +0000
Manifest next update:     Mon 18 May 2026 08:25:10 +0000
Files and hashes:         1: QF5asHUAe6PYUmLWiyUZhsbp3V0.crl (hash: cfVizvnlbERxh/p0rpV1MElWsRuxwz/8tSs8sxY/Y5E=)
                          2: E7C4738EF69011F0944A82D5396F56BC.roa (hash: FMzFZrlslBMIjQSp5kS4GLLPEkEhvoj8LXFantUsG14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
                          rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
        Validity
            Not Before: May 11 08:25:10 2026 GMT
            Not After : May 18 08:25:10 2026 GMT
        Subject: CN=6a019266-aa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:35:a3:2d:99:c6:f5:dd:82:01:1a:d6:1c:f5:
                    57:b6:ad:e7:68:30:c1:4f:f6:09:3f:e2:fd:b0:66:
                    9e:c0:74:0d:ad:9f:64:e2:02:16:9b:85:0b:a5:d5:
                    ff:6f:42:62:e9:a7:54:22:e5:27:35:70:88:2c:7d:
                    d6:0a:65:c7:15:33:43:b6:53:f8:af:f7:4c:28:62:
                    39:1d:b6:e1:87:02:6c:a5:52:3c:ae:85:8a:93:50:
                    6c:c8:6a:8b:7a:a4:9d:80:bf:eb:39:7c:f7:94:3e:
                    ee:0a:ac:52:36:91:59:0f:f6:ec:5a:d2:16:12:3e:
                    e7:4a:7f:f0:40:33:b3:02:c6:5f:71:46:4e:cd:0a:
                    88:58:68:e8:e5:80:47:8e:28:ed:9e:f6:32:74:b4:
                    7c:a5:07:0d:59:d0:2b:60:5c:a1:68:35:e6:76:69:
                    48:5a:69:26:52:b6:af:75:f1:1c:37:5d:e4:5e:75:
                    c2:59:4b:c0:d0:db:87:71:44:a3:49:b4:56:09:a9:
                    bc:88:cd:71:13:3c:31:9d:1c:13:3a:ed:d5:cb:39:
                    fc:0f:b3:ac:df:06:cf:59:9b:c9:93:70:52:05:6a:
                    38:c0:58:2f:a7:e9:62:e7:8a:be:90:0c:b0:a3:98:
                    a6:80:70:56:7d:33:54:9f:f4:75:20:17:8d:ac:6f:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:18:46:79:B0:60:5E:6C:88:9F:5B:2A:87:55:16:D0:E9:1F:BC:0E
            X509v3 Authority Key Identifier:
                keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a7:38:8f:eb:ed:17:b1:85:70:e9:12:49:c1:c4:27:9c:2c:
         56:2d:3e:e7:37:52:a4:95:08:3b:a6:5a:f7:ac:29:1f:21:e3:
         60:16:11:a5:ab:56:d3:5f:07:60:22:cc:67:51:df:18:c4:06:
         7f:36:a0:6a:38:b8:96:d1:3a:45:49:e6:95:fd:f7:c4:8c:01:
         a6:64:b0:aa:dd:72:68:92:b7:f6:b3:db:4d:68:c8:1a:13:a4:
         73:ff:0c:00:df:dc:cc:1e:3b:46:00:25:e7:cf:df:7c:f2:cb:
         45:0e:94:c6:27:2d:42:2a:8a:8c:bd:e4:69:38:7e:93:ac:e9:
         b1:df:54:9b:92:38:60:db:4e:25:95:20:b0:ba:52:5f:66:23:
         e1:ff:f8:6b:f9:67:80:5a:b9:d3:2a:26:67:f2:25:22:36:44:
         cf:ff:5f:39:0c:a3:d4:76:f9:58:53:47:39:4e:71:c6:9d:a9:
         fe:10:7b:af:aa:88:3b:5e:d4:e1:c5:8a:ab:51:fd:75:ef:67:
         29:7f:c4:1f:b6:e6:d7:b5:96:4f:7e:5e:21:88:11:19:b7:68:
         eb:eb:e3:69:9a:fc:38:44:49:c8:70:40:7e:f9:b7:ce:54:5c:
         82:55:de:21:d9:14:68:51:de:ab:82:db:f8:13:0f:8d:dd:9a:
         74:66:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:26:56 2026 by rpki-client