Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File:                     QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier:          9eW8bmTkUK8QQ79h/coygTGE2KZzaRYHJWYxt4SgwXE=
Subject key identifier:   F6:E6:EE:38:3A:38:5C:1B:11:7F:B1:1E:47:7F:E5:52:3E:7A:3D:65
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer:       /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial:       06C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number:          06C4
Signing time:             Tue 12 May 2026 22:24:29 +0000
Manifest this update:     Tue 12 May 2026 22:24:29 +0000
Manifest next update:     Tue 19 May 2026 22:24:29 +0000
Files and hashes:         1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: XES+D1/alnYoNuWYtfLbe2WozQiOZOafP806avM9Bws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
        Validity
            Not Before: May 12 22:24:29 2026 GMT
            Not After : May 19 22:24:29 2026 GMT
        Subject: CN=6a03a89d-51a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9b:86:27:b1:37:53:ce:46:5e:e2:90:c2:14:
                    04:18:6f:a3:74:4e:e3:b6:bb:98:29:f9:4e:6b:d0:
                    09:27:d3:1d:b2:0b:e5:6b:4e:eb:a1:3e:70:7a:8f:
                    ac:fc:1e:fe:db:4d:2c:9a:f1:57:b8:32:81:19:6d:
                    bf:0b:3c:a6:ae:8b:3b:89:ef:3f:6d:1f:33:62:f6:
                    de:65:0a:01:31:34:eb:38:cf:37:5b:ae:af:40:7d:
                    f9:db:0e:cb:2d:5d:e2:1d:05:27:c3:f8:54:93:3c:
                    f7:9d:d4:59:21:c4:74:ee:e1:c8:b1:c8:04:fb:f9:
                    e0:18:62:5b:d0:b6:44:7a:fb:63:ad:68:5f:d4:57:
                    82:55:d3:19:0f:f1:3a:29:f0:0d:c4:ef:a4:4f:3f:
                    91:eb:12:22:55:fb:b8:cf:3e:d9:a2:9e:de:c3:80:
                    88:2b:15:31:06:60:11:80:d0:45:d1:7d:14:0a:d2:
                    08:e7:91:bb:79:93:dd:8e:8d:ed:b3:01:02:2f:16:
                    fc:3e:a1:8e:8b:54:6d:af:01:33:04:ff:de:5a:c8:
                    ba:a9:a3:7a:8a:15:46:a3:0e:75:ee:38:9c:27:da:
                    6d:b4:e5:3f:47:05:cc:13:a5:5f:58:d5:e6:1e:9b:
                    65:e3:1b:30:69:85:e2:d9:0e:87:72:96:f1:56:bc:
                    69:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:EE:38:3A:38:5C:1B:11:7F:B1:1E:47:7F:E5:52:3E:7A:3D:65
            X509v3 Authority Key Identifier:
                keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6b:d1:d8:19:ee:18:f2:73:52:95:ea:8a:9d:fc:56:18:50:
         75:7d:09:7a:d1:e3:aa:18:7f:77:53:56:29:7e:9b:2b:d2:6d:
         11:55:c6:20:8d:29:7c:d1:db:58:73:5e:2a:3b:8d:a7:93:f3:
         75:56:8f:f6:e3:bc:bb:9c:65:7a:e9:a9:9e:8a:20:3e:46:12:
         ca:2a:bc:c8:d2:7f:4c:fc:84:1e:6a:2a:cc:04:fd:f4:5b:9d:
         4d:87:4f:8a:d6:be:06:3e:01:ca:aa:70:2a:44:2a:12:e9:50:
         2f:4a:da:35:cb:16:bf:d9:c6:ce:df:83:aa:90:79:87:e3:62:
         eb:b1:bb:61:9e:0b:59:f9:66:6f:c3:0e:9b:ab:fa:c3:9e:a5:
         12:fb:89:6d:cc:db:31:bb:44:58:52:58:78:78:2e:e8:82:b0:
         d6:61:f2:0b:53:47:e4:34:ed:bc:24:94:8b:80:f0:09:72:84:
         6e:4f:e4:a3:64:9c:d1:ba:f6:1c:77:04:50:d0:99:ed:5d:1b:
         5a:80:e0:ad:19:93:36:36:0c:df:5f:13:bb:3c:cc:0a:a8:32:
         92:82:d2:5a:55:c3:09:07:71:fe:e6:7f:9f:8b:d1:67:14:76:
         3b:1e:0f:41:5f:64:62:89:b4:e7:a2:50:f0:8d:54:88:b7:db:
         a0:08:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:10:37 2026 by rpki-client