Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          uwZ3h+PHcO7WNnXuna75nq8Db5mBq9E7onFVk/1ZHvU=
Subject key identifier:   54:FC:D8:19:F1:CA:05:95:50:DC:A4:DE:D6:75:B2:CF:20:EB:CA:89
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2721
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1AF5
Signing time:             Tue 12 May 2026 17:32:44 +0000
Manifest this update:     Tue 12 May 2026 17:32:44 +0000
Manifest next update:     Tue 19 May 2026 17:32:44 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: 6LX9WGgEZA4nXhdWr4MV8aPwHGckGQQl8lw/NjdyFc4=)
                          2: B53FD334575411ECAA094876C4F9AE02.roa (hash: MOniPA3OWYxjKNJDubnO0OYiVfTrXRb7jdXls0wzzCE=)
                          3: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: 29+zYXuX4Jx7WwvXLyzsUGtcpp5Avkhlmy+dKXTdCrg=)
                          4: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: A2CyKDYZ86uo2gMdQ3gEpA0HjmMVcr+W92QQ9aO63X8=)
                          5: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: qbkmJ7/TUTQdrubphs2Dx/bDsl/TwmS3T9QEqj9AnVo=)
                          6: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: ckGk6YnhoYmIlN6MXCa0OzYZwJ4c+LTg67ZDBKKjmnw=)
                          7: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: dqWOzU0Hk4FU69te54sGPE+inxaGG4JuV2n7is/nqYI=)
                          8: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: K5B6HHyVQ+5YfTDkQKgqqzReSt6SI53NMwWOIIR2Lhc=)
                          9: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: xBA5ZNm2yzqLGdnAq/LcY9YV7GFaI1U9uISUgAQr5WM=)
                          10: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: SOZryTu4EW/bvslW0PH1vtDZItFz5w8nA9h/43Up0aA=)
                          11: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: 3uOLprOx1kal0PHAoU6CY+ILVwcmdUA3v/WZfKujh3Q=)
                          12: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: wWiBrsPclt2HSsmAyI8LNqC2U3qAaeghLY8UH+OtrWo=)
                          13: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: r+KX8BXPnqN4PM5h6BUZcCkuaOFh4txYx8mT4xel0+o=)
                          14: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: dIJeV3xI9IsB1+6ABWo+QrvOZFgUexy0d0Wlndpmcjc=)
                          15: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: ke3C+dNBckm90K9f3Zy0yEOSpzhDoDoy9rejOQLMU9I=)
                          16: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: Z6egvfJv4T2twr/MyysD84nkeZr42AiA4waVdxOrO/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10017 (0x2721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: May 12 17:32:44 2026 GMT
            Not After : May 19 17:32:44 2026 GMT
        Subject: CN=6a03643c-f345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:a8:15:68:08:e7:30:f4:d5:1b:f9:4f:3b:
                    bc:4c:0d:b1:ea:36:cb:d9:f1:09:c9:cb:e5:63:a5:
                    48:6a:1b:99:14:4b:b4:0e:4f:38:6e:24:ab:fa:78:
                    3f:19:3e:f4:fc:19:cb:f1:5f:e3:68:82:87:c7:09:
                    6c:18:61:e3:4f:8f:1b:f8:28:9f:66:0b:c0:a9:cc:
                    16:d8:e8:7b:32:1e:a7:45:0d:5d:c3:c1:66:96:16:
                    d2:c3:5a:1c:3e:e6:f0:ae:45:6f:35:06:5c:95:83:
                    13:c5:3a:94:d9:d3:0c:0b:28:ee:16:ee:f1:88:2e:
                    1e:37:18:23:0b:5c:72:c9:6c:4e:e0:d5:2f:e1:8b:
                    2b:3d:43:26:b1:4f:5a:c2:a4:63:cc:34:48:95:1a:
                    58:23:0f:ce:3f:cf:b8:80:39:4f:21:40:ae:cd:38:
                    51:f4:94:72:1e:3d:d7:72:79:2a:b3:eb:b9:b5:50:
                    62:80:7c:00:37:2d:53:e1:b6:79:9f:a4:a5:2e:0d:
                    bc:ff:f8:41:3a:d8:5e:81:90:ba:71:96:4e:ac:1f:
                    f5:82:e8:9e:b9:d1:6d:04:c2:4d:41:9e:22:12:7a:
                    5a:73:38:de:d2:0f:74:b2:73:0f:cb:58:02:ae:74:
                    b8:90:5f:4d:36:ab:a0:11:9b:03:ed:1a:b9:78:f2:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FC:D8:19:F1:CA:05:95:50:DC:A4:DE:D6:75:B2:CF:20:EB:CA:89
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:2c:9e:5f:24:96:86:89:92:b3:af:1f:ab:83:99:c4:80:
         c0:24:9f:45:99:ee:36:c8:24:d8:2c:8c:ca:67:60:54:5c:42:
         a2:c8:c5:ea:64:16:c9:c7:2c:7b:b4:39:a0:d2:f1:07:52:66:
         22:3d:e7:90:05:1a:50:48:73:35:1f:04:53:f7:f2:d2:95:09:
         a7:84:f9:40:52:bd:44:03:cf:fd:c8:16:3e:ac:a9:54:73:d1:
         d6:22:63:05:ad:38:26:48:6c:c0:12:81:b6:6e:3a:5c:19:03:
         8b:c1:b3:22:bf:1b:64:31:26:da:14:a9:68:a0:28:14:53:6a:
         24:9d:3b:83:b6:15:8a:3c:30:66:a3:1b:9a:0d:00:a1:e8:2f:
         39:ee:f6:59:69:ed:f2:37:a3:1e:5e:6d:c0:1d:c1:c6:30:2b:
         b6:7b:b1:de:59:3b:ef:7c:df:44:d6:6c:e6:8a:62:22:34:1f:
         05:85:0c:29:1b:54:b6:22:7d:53:2a:e5:1a:45:73:6e:c1:11:
         2f:5f:e8:d0:d2:d5:f3:11:8a:99:aa:4f:77:8d:07:ce:0c:64:
         85:f3:fc:19:a5:4d:57:4f:90:fe:db:46:d9:bd:d6:73:be:39:
         ec:a6:38:19:52:62:72:ef:6f:8d:b2:3f:be:0c:90:5e:cb:34:
         23:af:66:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjYwNTEyMTczMjQ0WhcNMjYwNTE5MTczMjQ0WjAYMRYwFAYD
VQQDEw02YTAzNjQzYy1mMzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtquoFWgI5zD01Rv5Tzu8TA2x6jbL2fEJycvlY6VIahuZFEu0Dk84biSr+ng/
GT70/BnL8V/jaIKHxwlsGGHjT48b+CifZgvAqcwW2Oh7Mh6nRQ1dw8FmlhbSw1oc
PubwrkVvNQZclYMTxTqU2dMMCyjuFu7xiC4eNxgjC1xyyWxO4NUv4YsrPUMmsU9a
wqRjzDRIlRpYIw/OP8+4gDlPIUCuzThR9JRyHj3Xcnkqs+u5tVBigHwANy1T4bZ5
n6SlLg28//hBOthegZC6cZZOrB/1guieudFtBMJNQZ4iEnpaczje0g90snMPy1gC
rnS4kF9NNqugEZsD7Rq5ePKPEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFT82Bnx
ygWVUNyk3tZ1ss8g68qJMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjgwNS9GODA3NkI4QTdCN0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENy
Q1E2MkFlMnpONXdOUFlwdEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg88snl8kloaJkrOvH6uDmcSAwCSfRZnuNsgk2CyMymdgVFxCosjF6mQWyccs
e7Q5oNLxB1JmIj3nkAUaUEhzNR8EU/fy0pUJp4T5QFK9RAPP/cgWPqypVHPR1iJj
Ba04JkhswBKBtm46XBkDi8GzIr8bZDEm2hSpaKAoFFNqJJ07g7YVijwwZqMbmg0A
oegvOe72WWnt8jejHl5twB3BxjArtnux3lk773zfRNZs5opiIjQfBYUMKRtUtiJ9
UyrlGkVzbsERL1/o0NLV8xGKmapPd40HzgxkhfP8GaVNV0+Q/ttG2b3Wc7457KY4
GVJicu9vjbI/vgyQXss0I69mQQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:38:35 2026 by rpki-client