Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
File:                     qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json)
Hash identifier:          6GxxeQVamYj7QyBiDnk8ozFGEDBRFbdtl3tzcFgk74M=
Subject key identifier:   F2:1C:01:AD:C6:EA:F1:6D:80:94:48:7E:79:5F:43:F1:ED:B6:B3:7F
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Certificate issuer:       /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial:       2D82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
Manifest number:          2D48
Signing time:             Tue 12 May 2026 15:31:23 +0000
Manifest this update:     Tue 12 May 2026 15:31:22 +0000
Manifest next update:     Tue 19 May 2026 15:31:22 +0000
Files and hashes:         1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: CAPUXh7mwHGQcqHpkJE4/e/MhkugLjzLrISqaFXnOtI=)
                          2: 8FFA11F41B4A11EFB2A0D360C4F9AE02.roa (hash: o3Mwhp/lGZJZN6p8Sqo/StNY796IswQpJX8T7rJIJpo=)
                          3: 70FD3F6A5B1811F0B719DE67C4F9AE02.roa (hash: C09oV5jQIUq6pmxrsM/hlngK2BpYRakMeU6YGhYQJhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
                          rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11650 (0x2d82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916216D, serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
        Validity
            Not Before: May 12 15:31:22 2026 GMT
            Not After : May 19 15:31:22 2026 GMT
        Subject: CN=6a0347cb-f47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c5:54:5a:b7:12:a0:5d:c2:21:21:42:f6:29:
                    13:1c:5f:bc:4f:07:94:32:b9:b7:d6:7f:10:5c:1a:
                    a3:d9:7f:15:50:22:0b:12:9f:76:02:99:b5:71:4a:
                    32:4a:e6:5c:36:34:aa:03:43:df:b0:c4:f6:6f:da:
                    1f:49:3f:aa:ce:89:ca:85:1c:89:a3:8e:e3:13:6e:
                    de:89:b2:35:81:69:51:e8:09:ae:cf:f1:6c:08:63:
                    cb:75:2e:2f:b2:be:44:1f:56:d1:7d:48:83:8b:ee:
                    15:9b:10:57:9a:5e:66:b9:80:1b:c5:98:86:5c:fb:
                    dc:12:7d:ba:1f:0c:0f:96:b3:c1:8a:30:c9:31:6d:
                    8a:4d:b7:11:a7:1e:33:84:a5:79:24:0d:68:f1:ec:
                    f3:cf:11:1c:4a:47:22:bf:c5:2d:40:cf:9f:26:0a:
                    84:a4:08:1a:be:a1:21:ce:95:a2:46:86:e3:03:f1:
                    1e:ed:46:d4:ad:8b:7a:54:f1:11:21:b7:12:2c:77:
                    68:9c:44:a6:df:f0:82:e2:be:97:d6:32:a2:8c:8a:
                    bf:9a:1f:5b:5a:de:4d:76:af:31:a0:99:39:3c:53:
                    26:0d:4a:0b:53:a7:c6:ff:bc:8d:c2:32:04:2c:d1:
                    e9:cb:39:62:73:03:e7:ae:12:db:22:6c:f3:8e:37:
                    b1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:01:AD:C6:EA:F1:6D:80:94:48:7E:79:5F:43:F1:ED:B6:B3:7F
            X509v3 Authority Key Identifier:
                keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:95:df:f0:80:80:8e:24:c0:e5:04:e0:b8:5c:8b:95:0f:0d:
         14:50:8f:e4:2c:77:3a:87:e8:90:62:32:66:ba:5a:18:1c:70:
         df:a0:a6:8c:c4:7e:76:a3:08:03:bf:57:ea:d9:90:e4:89:c9:
         d7:e8:1d:18:fa:fe:9e:f2:10:12:6b:32:31:68:ab:1e:14:47:
         85:18:d5:fd:66:ac:88:69:d7:11:12:be:02:74:66:bd:91:ed:
         21:03:f3:04:45:89:1e:93:22:a5:66:e7:5e:4e:c6:cc:1a:b2:
         28:65:39:b9:df:de:2a:8a:84:d9:04:91:88:b0:ca:4e:96:31:
         e6:66:81:4b:38:87:62:19:65:6e:b9:bb:36:cd:5e:a3:c7:fe:
         fa:a8:05:84:6e:86:50:f2:d3:3c:89:5d:b8:1f:dd:4d:f9:e0:
         f0:6a:59:79:b3:af:ed:1b:77:b8:2a:51:52:c0:ca:6a:24:9a:
         12:7d:10:e9:03:f7:28:78:ba:a3:88:33:f0:7b:4b:d3:2e:6a:
         60:e4:e0:b1:cd:0d:48:62:cc:5b:83:1e:40:37:bb:a1:45:91:
         e1:e3:2a:aa:e2:2d:e0:f3:27:09:ce:d9:35:ff:04:e7:82:5f:
         61:e6:29:1b:8a:7b:6c:a3:67:93:73:15:a5:aa:ba:36:dc:d8:
         8d:02:ba:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIxNkQxMTAvBgNVBAUTKEFBRkZCQUYyNjVBQUNBNEM5NTE3QUZFQjdGNTRGQ0NC
MEZCMURDMUIwHhcNMjYwNTEyMTUzMTIyWhcNMjYwNTE5MTUzMTIyWjAYMRYwFAYD
VQQDEw02YTAzNDdjYi1mNDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAicVUWrcSoF3CISFC9ikTHF+8TweUMrm31n8QXBqj2X8VUCILEp92Apm1cUoy
SuZcNjSqA0PfsMT2b9ofST+qzonKhRyJo47jE27eibI1gWlR6Amuz/FsCGPLdS4v
sr5EH1bRfUiDi+4VmxBXml5muYAbxZiGXPvcEn26HwwPlrPBijDJMW2KTbcRpx4z
hKV5JA1o8ezzzxEcSkciv8UtQM+fJgqEpAgavqEhzpWiRobjA/Ee7UbUrYt6VPER
IbcSLHdonESm3/CC4r6X1jKijIq/mh9bWt5Ndq8xoJk5PFMmDUoLU6fG/7yNwjIE
LNHpyzlicwPnrhLbImzzjjexgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIcAa3G
6vFtgJRIfnlfQ/HttrN/MB8GA1UdIwQYMBaAFKr/uvJlqspMlRev639U/MsPsdwb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjE2RC9BMzk5MUUyNEI3
QzAxMUUzQjQ5OUYxMzI1OTExRUEzMi9xdi02OG1XcXlreVZGNl9yZjFUOHl3LXgz
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F2LTY4bVdxeWt5VkY2X3JmMVQ4eXcteDNCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjE2RC9BMzk5MUUyNEI3QzAxMUUzQjQ5OUYxMzI1OTExRUEzMi9xdi02OG1XcXlr
eVZGNl9yZjFUOHl3LXgzQnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIpXf8ICAjiTA5QTguFyLlQ8NFFCP5Cx3OofokGIyZrpaGBxw36CmjMR+dqMI
A79X6tmQ5InJ1+gdGPr+nvIQEmsyMWirHhRHhRjV/WasiGnXERK+AnRmvZHtIQPz
BEWJHpMipWbnXk7GzBqyKGU5ud/eKoqE2QSRiLDKTpYx5maBSziHYhllbrm7Ns1e
o8f++qgFhG6GUPLTPIlduB/dTfng8GpZebOv7Rt3uCpRUsDKaiSaEn0Q6QP3KHi6
o4gz8HtL0y5qYOTgsc0NSGLMW4MeQDe7oUWR4eMqquIt4PMnCc7ZNf8E54JfYeYp
G4p7bKNnk3MVpaq6NtzYjQK6cw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:30:08 2026 by rpki-client