Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
File:                     Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json)
Hash identifier:          ohDzQj8Ycmpv56dA7A7si1AVss6tLmruwg+xhPcLlns=
Subject key identifier:   EE:AC:B6:E4:1D:16:8C:D3:04:C0:29:BA:7D:F9:A3:DF:2B:42:F6:6F
Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
Certificate issuer:       /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
Manifest number:          01D4
Signing time:             Wed 13 May 2026 03:39:07 +0000
Manifest this update:     Wed 13 May 2026 03:39:07 +0000
Manifest next update:     Wed 20 May 2026 03:39:07 +0000
Files and hashes:         1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: YZh/ClmQG4dYND+3Ejzlm/MyZh0L2/46W9xcKxIrmyo=)
                          2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: gEpkbZAOCiAGZqrCOuhhWC5OkOPHde0fYqgs1m5gseY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
                          rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
        Validity
            Not Before: May 13 03:39:07 2026 GMT
            Not After : May 20 03:39:07 2026 GMT
        Subject: CN=6a03f25b-9d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:f4:ca:55:bf:03:87:7f:65:34:87:aa:2e:
                    8b:b2:d1:2c:ba:08:17:69:f1:37:5c:61:7b:f0:38:
                    7e:7f:93:dc:fd:db:22:1e:e3:ec:4b:dd:19:6c:c0:
                    c6:a0:09:65:26:b4:a4:2f:87:20:f2:c9:b1:4c:4b:
                    7a:44:b1:e5:de:6d:64:cd:4c:9f:db:56:db:f2:e2:
                    44:18:ef:4c:ef:e1:a3:ef:33:7d:44:e6:f6:a2:e4:
                    53:dc:54:cb:bb:24:0a:cd:ca:9e:71:e7:f7:8a:f4:
                    bf:bf:92:23:57:fa:24:eb:06:35:4e:30:02:bb:f7:
                    d3:1f:bc:49:ec:8a:d0:16:4e:8b:ec:b2:c2:d3:75:
                    17:03:33:a5:f8:13:ea:51:e9:58:eb:30:d4:7e:0a:
                    19:9d:27:46:57:1a:68:d6:09:8b:f9:94:c6:9d:cf:
                    cc:93:50:08:ec:7e:fa:ca:c3:9b:d9:07:45:d6:3c:
                    c6:be:4c:c8:23:88:be:72:7c:3d:e4:25:48:54:5f:
                    0a:9c:21:53:df:04:20:52:b4:e2:15:c5:0c:35:db:
                    48:0b:81:56:fb:44:95:83:c1:a8:08:d2:20:06:48:
                    eb:c1:a9:20:b3:a2:d0:32:04:95:83:92:8f:fb:f0:
                    0a:bd:e9:2f:f3:2d:8b:49:97:ac:0f:1f:fc:ab:02:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AC:B6:E4:1D:16:8C:D3:04:C0:29:BA:7D:F9:A3:DF:2B:42:F6:6F
            X509v3 Authority Key Identifier:
                keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a7:f9:f3:1d:db:72:d4:ee:65:1c:a8:4a:ad:e4:8e:31:08:
         48:a4:17:93:28:76:62:ce:b8:b4:22:cd:58:9b:d4:bb:6e:0e:
         bb:f8:9b:eb:26:ca:f1:69:95:b4:ec:42:45:89:88:95:fd:8f:
         d6:a0:16:2d:1a:db:92:18:86:fc:e0:01:01:d4:6d:ea:2e:53:
         d2:5a:ce:d3:22:50:e3:90:a5:e7:86:9d:f1:e1:79:7e:5a:14:
         b1:76:5b:79:28:d3:a7:36:d3:30:55:37:c1:0c:23:bb:1c:76:
         7e:e1:cc:98:77:c2:8a:3e:d7:4b:9a:d7:89:72:79:1b:d7:39:
         54:7e:04:f1:9e:c0:65:c2:81:2a:22:e7:a5:22:73:f0:6b:7d:
         4d:4f:61:30:95:a3:e4:4e:6c:38:a2:74:ba:19:4b:cc:4a:5b:
         15:97:f5:e7:b1:f4:39:45:31:e0:c9:b9:6b:5e:11:42:0e:0e:
         77:ab:74:b0:f1:03:71:dc:13:94:b4:8f:4d:dd:53:b0:4c:fb:
         14:99:de:06:9c:ac:b4:99:f0:65:0c:9a:32:55:ec:76:7e:1a:
         e8:88:ae:3f:a8:dd:2a:8c:f5:4c:db:12:42:dc:8e:6d:2f:35:
         39:88:fb:bc:d6:c7:96:f2:ac:dd:fd:73:9a:ea:f0:70:34:b0:
         44:96:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:47:23 2026 by rpki-client