Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
File:                     QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft (raw, json)
Hash identifier:          Q7uR0ua20QZFK0D74etE9Sq1bDk4Ak4dF/9SsQgide4=
Subject key identifier:   54:1A:08:23:DD:52:D7:53:82:85:DE:10:EE:DB:DA:AF:BF:86:2B:45
Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
Certificate issuer:       /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
Manifest number:          0119
Signing time:             Mon 11 May 2026 05:59:06 +0000
Manifest this update:     Mon 11 May 2026 05:59:06 +0000
Manifest next update:     Mon 18 May 2026 05:59:06 +0000
Files and hashes:         1: QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl (hash: jEXke2nlQozow7oWvArzvulYclNQQ8OyxrcFNGvukBg=)
                          2: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (hash: nWtabR7nOhGufvq+gkx3bXJFQRRyMbogt12nPEsCiOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
                          rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
        Validity
            Not Before: May 11 05:59:06 2026 GMT
            Not After : May 18 05:59:06 2026 GMT
        Subject: CN=6a01702a-9cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:16:84:92:43:a7:b2:1c:3d:d6:fa:7b:26:
                    bc:08:03:6a:9a:f8:57:d5:33:9a:88:c5:ee:46:6a:
                    ac:e1:47:d3:70:61:f8:13:b1:98:86:29:72:c6:15:
                    f4:31:99:f2:47:95:84:1f:42:3a:e0:b9:44:a3:50:
                    46:8c:14:26:da:00:93:58:7f:73:17:9f:e9:5a:dc:
                    7f:2e:b2:65:7f:ad:e9:1f:4e:e6:85:c2:ad:47:2c:
                    47:2c:a9:de:87:ce:81:50:f7:72:c1:4d:73:d3:5a:
                    3e:92:b5:1d:2d:14:57:1d:ee:59:ff:49:80:c5:fe:
                    2b:87:fc:59:60:97:1d:2a:3a:ff:a8:8c:e8:02:1e:
                    61:7e:da:c1:8c:4f:78:90:b1:7c:cb:e1:5a:e7:a8:
                    14:19:ad:00:6f:fb:7e:dd:46:32:52:8f:1d:24:19:
                    b5:67:48:3d:ba:45:3f:61:c5:35:ed:0d:a9:1f:74:
                    a5:b7:fc:2a:74:4d:f4:4d:64:34:c9:0b:f4:98:dd:
                    9f:9c:b6:5e:02:7e:58:6d:ba:d0:5f:49:bf:2b:dc:
                    67:71:ad:f0:04:fd:56:dd:72:b5:c0:2e:77:c4:24:
                    7c:10:9d:92:8e:c4:37:0b:7e:11:c1:ea:ec:e4:c4:
                    4f:35:42:08:e6:86:1f:dc:9e:7e:d6:ee:be:61:c9:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1A:08:23:DD:52:D7:53:82:85:DE:10:EE:DB:DA:AF:BF:86:2B:45
            X509v3 Authority Key Identifier:
                keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:6b:44:c5:07:4e:80:de:f1:87:b6:af:d6:4a:9e:07:1f:
         11:91:9b:00:20:9e:d3:59:a1:db:1f:46:40:fe:ba:6f:23:26:
         16:82:32:cc:c5:8d:b2:a8:64:7f:78:1f:87:4c:0e:e5:13:2c:
         7c:e1:14:c9:6f:00:5a:d5:66:9c:e3:d1:ce:c3:ea:1b:49:79:
         b1:73:e2:96:26:8d:b1:fc:20:1d:86:81:9f:a8:90:6f:e7:26:
         66:b5:55:e7:5c:87:af:e2:00:a1:2d:67:8a:0e:d2:e6:b3:f9:
         84:46:2e:05:59:b5:5f:cd:75:c6:02:90:2d:da:f6:74:1b:5a:
         39:60:08:04:61:62:74:f3:f7:58:06:36:9a:5d:3c:c8:bb:f8:
         e5:d4:02:ad:d4:8c:53:2d:7a:28:be:58:7e:4d:20:4f:95:0c:
         f1:ec:2a:a5:c6:1e:4d:c1:1e:12:ae:4f:8b:69:77:3f:97:76:
         75:91:71:5a:18:b1:fe:63:50:85:be:09:8d:e2:ac:9b:0f:81:
         9c:6e:d3:eb:96:7c:79:48:8f:75:c0:9f:a4:c0:88:0f:a0:bd:
         cc:c2:c0:61:2f:33:8a:45:b0:06:ce:b4:ae:ee:1d:e8:de:58:
         3f:df:6c:f1:d6:95:bf:ca:ab:82:91:73:20:60:84:ca:29:d4:
         02:93:99:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMzMUMxMTAvBgNVBAUTKDQwRkFBNzBGOEEyM0EwM0QxNkExMTA4NkRCRTUwMkU4
NjIxNjQ5NjcwHhcNMjYwNTExMDU1OTA2WhcNMjYwNTE4MDU1OTA2WjAYMRYwFAYD
VQQDEw02YTAxNzAyYS05Y2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtaEWhJJDp7IcPdb6eya8CANqmvhX1TOaiMXuRmqs4UfTcGH4E7GYhilyxhX0
MZnyR5WEH0I64LlEo1BGjBQm2gCTWH9zF5/pWtx/LrJlf63pH07mhcKtRyxHLKne
h86BUPdywU1z01o+krUdLRRXHe5Z/0mAxf4rh/xZYJcdKjr/qIzoAh5hftrBjE94
kLF8y+Fa56gUGa0Ab/t+3UYyUo8dJBm1Z0g9ukU/YcU17Q2pH3Slt/wqdE30TWQ0
yQv0mN2fnLZeAn5YbbrQX0m/K9xnca3wBP1W3XK1wC53xCR8EJ2SjsQ3C34Rwers
5MRPNUII5oYf3J5+1u6+YclElQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQaCCPd
UtdTgoXeEO7b2q+/hitFMB8GA1UdIwQYMBaAFED6pw+KI6A9FqEQhtvlAuhiFkln
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzMxQy9GMTA3REExMEE2
Q0YxMUVGQjJGQkI1N0RDNEY5QUUwMi9RUHFuRDRvam9EMFdvUkNHMi1VQzZHSVdT
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FQcW5ENG9qb0QwV29SQ0cyLVVDNkdJV1NXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzMxQy9GMTA3REExMEE2Q0YxMUVGQjJGQkI1N0RDNEY5QUUwMi9RUHFuRDRvam9E
MFdvUkNHMi1VQzZHSVdTV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqFFrRMUHToDe8Ye2r9ZKngcfEZGbACCe01mh2x9GQP66byMmFoIyzMWNsqhk
f3gfh0wO5RMsfOEUyW8AWtVmnOPRzsPqG0l5sXPiliaNsfwgHYaBn6iQb+cmZrVV
51yHr+IAoS1nig7S5rP5hEYuBVm1X811xgKQLdr2dBtaOWAIBGFidPP3WAY2ml08
yLv45dQCrdSMUy16KL5Yfk0gT5UM8ewqpcYeTcEeEq5Pi2l3P5d2dZFxWhix/mNQ
hb4JjeKsmw+BnG7T65Z8eUiPdcCfpMCID6C9zMLAYS8zikWwBs60ru4d6N5YP99s
8daVv8qrgpFzIGCEyinUApOZOQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:01:32 2026 by rpki-client