Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
File:                     QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json)
Hash identifier:          bNoBAIBrZuIAPK4+vq1fIGGbiHHP860fMHi+IiDpDjA=
Subject key identifier:   49:3C:79:9D:9B:10:76:F0:A6:DA:9F:61:97:E2:98:3F:7A:54:A0:DE
Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91
Certificate issuer:       /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
Manifest number:          0257
Signing time:             Wed 13 May 2026 02:24:09 +0000
Manifest this update:     Wed 13 May 2026 02:24:08 +0000
Manifest next update:     Wed 20 May 2026 02:24:08 +0000
Files and hashes:         1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: ng2YEUKygA/WXDWi28txNoMgvCKZHg9I49kk+MOAjgc=)
                          2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: iuEGM5sJyxTcHsJjbcci7wnj/yq4o+HmmSlZprFPloE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl
                          rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CEC7, serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
        Validity
            Not Before: May 13 02:24:08 2026 GMT
            Not After : May 20 02:24:08 2026 GMT
        Subject: CN=6a03e0c9-ff6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:60:4f:81:7d:1f:71:10:b8:00:22:a9:ee:
                    92:0c:f8:43:a0:35:60:14:18:94:ee:71:10:4f:a6:
                    1b:7d:3f:7c:9e:c5:33:3b:82:36:2a:cf:ef:35:c8:
                    0b:94:f7:bd:1a:28:c1:ce:b6:41:c3:0e:d0:4c:29:
                    53:d8:f6:ba:f2:7e:9b:93:a0:b2:9c:fc:43:af:7c:
                    ae:87:19:88:2b:2c:11:99:c7:e4:f9:e0:60:c6:dd:
                    46:61:28:5c:32:50:03:c8:fb:76:40:85:f7:ec:28:
                    2e:7c:9f:09:da:e0:5d:6c:f5:f0:fa:55:b9:13:68:
                    ec:b5:3e:36:be:96:1c:f8:d3:b1:ee:9e:19:ca:2d:
                    9a:e1:cf:e9:72:0a:a8:e4:c1:d3:4e:7d:8b:b2:f0:
                    79:9d:30:73:9e:3d:06:f3:78:ac:96:ee:42:4a:19:
                    9e:c9:2a:d7:36:e5:ea:ed:29:32:a7:03:4d:c4:aa:
                    8d:83:ac:9e:e5:df:0b:0d:16:51:84:da:38:7b:94:
                    47:30:80:70:33:3a:e0:08:b9:56:55:99:5f:92:fa:
                    f4:75:82:94:37:2c:61:73:ed:a5:67:d3:4a:db:a9:
                    47:08:3e:99:63:9e:54:de:08:7e:ac:d3:77:a2:c9:
                    81:7c:47:34:8b:bd:fd:cd:41:78:7f:8b:9e:28:47:
                    c1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3C:79:9D:9B:10:76:F0:A6:DA:9F:61:97:E2:98:3F:7A:54:A0:DE
            X509v3 Authority Key Identifier:
                keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:10:ed:66:56:00:34:c0:e2:a6:e1:a7:bf:28:9a:69:90:fe:
         d2:d5:8d:14:ce:9a:80:6c:f6:d4:8a:82:ab:5f:38:e5:aa:0a:
         d6:4b:a3:1f:d0:41:7b:cb:94:41:8a:14:77:62:1d:c6:f5:90:
         ca:1e:40:9a:70:cb:10:df:c8:fc:3b:71:66:37:68:20:eb:93:
         40:0e:0a:34:34:80:63:e4:d3:71:5f:6b:88:92:4c:f9:85:26:
         8a:7f:79:a4:3a:22:41:7c:73:f8:8a:4e:56:6f:e0:16:91:4a:
         ec:a0:4b:30:2b:8c:0c:02:02:1d:de:cb:5d:1f:5a:47:05:3c:
         73:e0:c4:95:95:42:0b:2b:ee:40:3f:a4:f8:b4:68:c8:c5:65:
         fb:dd:11:07:af:8c:d0:8b:a2:a2:3d:5a:5f:2e:f0:15:47:2f:
         19:2a:3d:b0:2c:44:3d:ec:e9:1b:61:08:23:5b:55:3b:22:10:
         d9:58:64:ae:30:0d:94:ca:72:48:52:cf:08:19:a6:45:b3:3e:
         5e:4e:38:41:91:b3:8e:6b:6a:28:82:dd:a0:70:dc:0e:64:d6:
         5f:8f:a4:2f:6d:fd:85:ee:5f:c5:03:39:ee:41:9d:c9:cf:68:
         45:17:79:78:5d:8c:1c:81:45:71:35:91:bb:07:1d:c1:74:4b:
         9d:18:77:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENFQzcxMTAvBgNVBAUTKDQxNjE4QUUxM0E0MUY5OTlDNTc5MDQyOEI3MTZGQ0FF
NTQyNEE4OTEwHhcNMjYwNTEzMDIyNDA4WhcNMjYwNTIwMDIyNDA4WjAYMRYwFAYD
VQQDEw02YTAzZTBjOS1mZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5pgT4F9H3EQuAAiqe6SDPhDoDVgFBiU7nEQT6YbfT98nsUzO4I2Ks/vNcgL
lPe9GijBzrZBww7QTClT2Pa68n6bk6CynPxDr3yuhxmIKywRmcfk+eBgxt1GYShc
MlADyPt2QIX37CgufJ8J2uBdbPXw+lW5E2jstT42vpYc+NOx7p4Zyi2a4c/pcgqo
5MHTTn2LsvB5nTBznj0G83islu5CShmeySrXNuXq7SkypwNNxKqNg6ye5d8LDRZR
hNo4e5RHMIBwMzrgCLlWVZlfkvr0dYKUNyxhc+2lZ9NK26lHCD6ZY55U3gh+rNN3
osmBfEc0i739zUF4f4ueKEfBUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEk8eZ2b
EHbwptqfYZfimD96VKDeMB8GA1UdIwQYMBaAFEFhiuE6QfmZxXkEKLcW/K5UJKiR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0VDNy85QkI0RUFCNEM4
N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1abkZlUVFvdHhiOHJsUWtx
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FXR0s0VHBCLVpuRmVRUW90eGI4cmxRa3FKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0VDNy85QkI0RUFCNEM4N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1a
bkZlUVFvdHhiOHJsUWtxSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApBDtZlYANMDipuGnvyiaaZD+0tWNFM6agGz21IqCq1845aoK1kujH9BBe8uU
QYoUd2IdxvWQyh5AmnDLEN/I/DtxZjdoIOuTQA4KNDSAY+TTcV9riJJM+YUmin95
pDoiQXxz+IpOVm/gFpFK7KBLMCuMDAICHd7LXR9aRwU8c+DElZVCCyvuQD+k+LRo
yMVl+90RB6+M0Iuioj1aXy7wFUcvGSo9sCxEPezpG2EII1tVOyIQ2VhkrjANlMpy
SFLPCBmmRbM+Xk44QZGzjmtqKILdoHDcDmTWX4+kL239he5fxQM57kGdyc9oRRd5
eF2MHIFFcTWRuwcdwXRLnRh3Nw==
-----END CERTIFICATE-----
Generated at Wed May 13 16:06:49 2026 by rpki-client