Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
File:                     3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json)
Hash identifier:          63LS6IBeG+/Tet6/aGskzFEwq2eW48nE0KrFhj3CA0c=
Subject key identifier:   89:1D:5E:34:0B:EB:1A:4E:73:CD:27:A2:F0:A5:B3:2D:6F:AE:D8:89
Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0
Certificate issuer:       /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
Manifest number:          C5
Signing time:             Mon 11 May 2026 07:14:20 +0000
Manifest this update:     Mon 11 May 2026 07:14:20 +0000
Manifest next update:     Mon 18 May 2026 07:14:20 +0000
Files and hashes:         1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: Wcl5qZtEXUiv6c0xqndLRlG5CwSG0cWgL3vDgv8HMdQ=)
                          2: 375E8232C13411F0A297231CC4F9AE02.roa (hash: Rcvi6yejJNqA4Zq2UKAey1CzzI6dgFF00kMlDMOnfRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl
                          rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
        Validity
            Not Before: May 11 07:14:20 2026 GMT
            Not After : May 18 07:14:20 2026 GMT
        Subject: CN=6a0181cc-6a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:ed:07:3a:1b:de:5f:79:1b:03:93:e0:9a:
                    2f:ce:b9:84:af:ab:00:cb:02:9b:29:20:27:1e:d4:
                    a4:9b:d5:42:12:6f:a3:42:06:3c:a8:2a:15:94:95:
                    c8:a7:d3:cf:d7:80:aa:56:9a:9f:45:42:1a:36:b5:
                    ba:12:c8:60:20:d0:3f:85:0d:74:af:bf:31:d7:de:
                    dc:88:b5:dd:f8:7f:a0:72:80:16:69:7d:9b:82:20:
                    e1:60:be:b8:0c:6b:c0:eb:5b:78:69:54:cb:14:65:
                    41:a4:70:89:f7:a7:93:a5:23:8d:8f:7a:75:30:35:
                    27:48:10:92:8f:20:8c:29:d6:29:ce:48:ca:cb:5f:
                    00:6d:08:1b:71:7e:6f:4e:b7:98:4f:2f:34:bb:e5:
                    5a:16:05:ca:6a:dc:fa:0b:01:ad:6b:f3:9f:d2:22:
                    fe:13:72:77:70:53:c1:a3:8c:fe:9f:18:f1:71:06:
                    2f:04:48:64:7e:9a:31:56:ef:f1:77:72:9c:51:ef:
                    51:d1:20:6a:24:3e:47:06:12:ab:d2:29:59:9a:8a:
                    14:47:5b:46:3b:9e:3b:e4:53:cc:aa:82:1f:f9:c1:
                    d9:bd:59:48:bd:22:eb:ec:42:ee:08:88:37:f0:de:
                    2c:38:d2:f6:2d:c3:71:53:ee:c6:9c:c1:d2:b6:07:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1D:5E:34:0B:EB:1A:4E:73:CD:27:A2:F0:A5:B3:2D:6F:AE:D8:89
            X509v3 Authority Key Identifier:
                keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:08:91:c8:3d:e0:06:1f:48:cb:36:7c:bf:c8:ea:36:d3:21:
         42:89:65:a2:c7:c0:6c:bd:b6:92:25:e1:76:44:c1:bd:52:51:
         4b:ee:13:ef:ee:49:ca:16:6c:10:0c:ba:1f:77:2b:48:f7:f3:
         8f:f5:33:ba:0a:61:01:b6:78:aa:e7:8e:e2:a2:d8:67:91:7d:
         45:b7:aa:e1:cc:07:c7:1a:a4:62:14:30:7b:28:27:25:91:73:
         40:3c:c7:9a:fd:97:c7:95:50:11:f8:4a:d1:93:44:7a:be:e7:
         cc:f6:93:56:be:00:1d:e7:9b:ac:b3:52:fa:c0:40:c2:e3:7e:
         6e:de:ab:db:40:57:4b:cb:b5:26:ef:47:65:4e:8a:97:1e:d2:
         dc:ab:df:b2:4a:8e:b8:47:f2:ee:8d:28:18:e6:45:6f:fb:c4:
         65:43:28:61:a9:b6:c4:95:94:ef:39:e3:1c:c4:56:96:61:1e:
         8f:67:60:12:8d:9d:70:5d:93:22:c1:7b:d8:f9:46:84:db:f0:
         be:b3:a1:f0:82:a8:2c:e7:03:9d:53:a1:98:6d:8c:23:65:40:
         d9:dc:98:72:b8:74:77:eb:1b:48:f8:27:19:da:c7:7f:2e:64:
         b0:d3:02:f3:28:26:8e:21:12:13:c3:76:a9:26:a7:5e:10:02:
         e9:94:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:39 2026 by rpki-client