Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File:                     qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier:          S8IoSLhglJYHaQPPh02r7nzxfqhrFoIJRA8Cub5vd80=
Subject key identifier:   53:55:2C:3F:9D:66:25:CE:ED:2F:58:14:3E:16:D8:9B:2A:AF:0C:5A
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer:       /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number:          9E
Signing time:             Mon 11 May 2026 07:34:02 +0000
Manifest this update:     Mon 11 May 2026 07:34:01 +0000
Manifest next update:     Mon 18 May 2026 07:34:01 +0000
Files and hashes:         1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: gSYTJiP4HhagsTLBtunEhPzD8ANuQeokOgIaeeVUrO0=)
                          2: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: 0FADNXeUq1T4cmPNbX+0C9rpDsYY6TULXCq/1v19c/4=)
                          3: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: 1uwYIweKNIY1EejwHRX9/epxqujJUSa33C/FoQ3Fbz4=)
                          4: A73E47B6646611F092E66D56C4F9AE02.roa (hash: Jt3QbCBmPs1SUBic9BqvudNkMTSb9O8hdsUiuIKph7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
                          rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
        Validity
            Not Before: May 11 07:34:01 2026 GMT
            Not After : May 18 07:34:01 2026 GMT
        Subject: CN=6a018669-7101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:34:6e:9c:48:2b:48:73:9b:46:0b:d3:3e:
                    94:f4:14:13:56:dc:fb:c1:db:28:a9:5b:57:a6:8a:
                    67:9e:af:bf:c3:36:4d:7e:7b:f1:3e:6c:29:76:be:
                    e3:46:9f:49:46:88:14:a0:60:c5:55:6f:89:6f:67:
                    d3:c9:1a:6d:d0:2a:5a:bd:3e:a9:29:fa:0c:19:44:
                    42:6d:80:3a:0b:02:ab:fa:dd:60:77:48:1b:33:a5:
                    6a:3b:1a:66:9c:28:95:00:f7:71:d3:26:5a:19:74:
                    f5:6f:4b:5b:f3:53:65:b7:fd:dc:45:27:8c:60:12:
                    75:2f:94:37:c4:41:ae:a4:70:f2:e7:81:05:f5:0d:
                    d9:75:b4:16:0d:e3:ae:f4:8d:15:ad:4b:58:ce:d2:
                    fb:da:58:e9:f1:53:4c:1c:18:69:0d:e2:36:9d:46:
                    e0:b1:83:30:7d:ae:d1:7b:0f:fc:41:09:a8:7d:d9:
                    4d:54:b5:c8:74:4e:6d:b9:7a:8e:6b:38:2f:be:65:
                    15:d6:32:a9:77:8d:4a:6f:86:59:da:0c:eb:57:d5:
                    7f:2a:87:77:d7:1c:de:ee:d5:78:4a:af:f0:24:16:
                    85:65:cf:5f:37:f8:6f:a5:3f:a5:d0:a5:3a:48:98:
                    a9:43:cb:95:be:dc:a7:64:6e:4c:6a:11:40:33:68:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:55:2C:3F:9D:66:25:CE:ED:2F:58:14:3E:16:D8:9B:2A:AF:0C:5A
            X509v3 Authority Key Identifier:
                keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b4:f5:4c:0b:73:80:09:30:1f:cd:7f:74:9a:51:8a:54:30:
         ee:c1:f6:d6:a6:1c:0c:87:a4:ee:76:f2:83:fc:f8:8d:60:61:
         f4:fe:be:c6:93:4e:f0:6c:cf:a4:19:7c:80:86:be:54:b4:67:
         e7:c7:f8:e2:17:99:7f:e3:e1:4c:ad:79:0d:f6:1a:2d:c4:17:
         29:03:45:94:52:98:60:4b:e5:0e:6c:18:3c:8c:46:9e:bb:dd:
         e9:d3:4d:52:f1:d3:32:a0:1e:d3:29:b1:13:ce:08:e3:a1:7c:
         80:89:cd:fb:9a:41:ff:7d:78:f6:94:bb:04:67:a0:eb:5d:75:
         36:da:4a:82:3f:8d:14:ef:ae:a6:83:11:aa:d8:f5:ca:13:ec:
         f8:c7:ab:2a:ff:f7:3e:82:2b:81:70:59:ac:64:a8:e9:79:e3:
         4e:77:cd:40:8f:58:f5:a1:53:14:38:a4:4c:dd:f8:a9:a0:58:
         8e:31:0c:98:f2:2f:32:00:ba:4d:d9:3d:d2:5e:a1:f0:c9:1a:
         21:fc:5a:19:35:32:70:72:f1:6e:53:be:c5:af:fc:72:ef:90:
         2c:a4:b4:53:ae:62:c8:34:10:f2:bc:ad:e1:b1:c8:3f:66:48:
         86:e1:ac:75:68:84:c6:a1:e2:ea:d2:6d:57:06:a0:b5:6a:4b:
         bd:85:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:28:09 2026 by rpki-client