Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
File:                     Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft (raw, json)
Hash identifier:          SMvt4gkJSKuEkmldvnOuYhfSDiF9N1rUzQbpaRs8RQw=
Subject key identifier:   55:C7:68:F2:E8:20:3B:CB:EC:DF:A6:FC:EE:17:7A:0D:06:5A:AE:2C
Authority key identifier: 43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85
Certificate issuer:       /CN=A91988EB/serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
Manifest number:          49
Signing time:             Wed 13 May 2026 08:29:50 +0000
Manifest this update:     Wed 13 May 2026 08:29:50 +0000
Manifest next update:     Wed 20 May 2026 08:29:50 +0000
Files and hashes:         1: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl (hash: +oFxYRQuikMCZyiJ+HFrCjtSgsD2bLfM5k9XYiT+78M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl
                          rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91988EB, serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685
        Validity
            Not Before: May 13 08:29:50 2026 GMT
            Not After : May 20 08:29:50 2026 GMT
        Subject: CN=6a04367e-42d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:e0:ad:aa:ca:1b:f9:9e:00:ae:9c:2a:2f:
                    59:cd:80:f4:0f:7c:76:e1:45:70:4a:46:20:c9:81:
                    bc:6e:2a:64:ee:a3:56:c6:7f:95:de:2b:af:a5:70:
                    e0:cf:35:20:02:3c:11:bd:23:83:59:87:d0:5e:ea:
                    50:4b:90:4e:6f:6b:cc:b1:6a:b1:82:df:dd:d4:8a:
                    bb:27:db:c8:4f:6f:d3:95:11:33:81:2a:dd:70:44:
                    d3:3b:f9:9f:cf:4b:99:72:17:9a:7c:cf:78:51:02:
                    76:bf:8f:18:d2:77:cb:99:2b:62:f1:1d:19:a3:8e:
                    ff:08:93:15:9e:15:3f:ed:f6:e7:5c:22:de:4c:77:
                    42:99:ce:d8:61:13:f3:41:90:23:86:d2:28:2e:2c:
                    ab:0e:21:52:aa:fe:4f:cf:a3:51:ff:97:d7:8f:2f:
                    63:6c:48:39:6b:40:21:09:0f:3d:3b:e0:b5:13:25:
                    50:34:d6:2d:6f:b3:9a:3e:a2:5d:44:b0:82:71:40:
                    be:85:55:ca:58:cf:2d:a4:67:b5:49:f2:46:87:83:
                    b1:bd:9d:9b:8e:5b:e6:00:e3:ae:bf:be:28:e5:fc:
                    4b:63:5c:c9:0b:90:4e:1f:d7:cb:26:bb:71:be:b6:
                    02:0e:df:85:30:c1:13:bf:4b:ec:93:7e:c6:9f:89:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C7:68:F2:E8:20:3B:CB:EC:DF:A6:FC:EE:17:7A:0D:06:5A:AE:2C
            X509v3 Authority Key Identifier:
                keyid:43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:66:8a:42:6d:e2:c3:01:df:ab:67:ed:5a:fd:75:ac:ba:2f:
         6d:33:92:e1:0b:ad:30:70:53:3f:ff:55:ad:6f:2a:13:38:d9:
         08:3d:e0:3b:0f:f8:e1:7b:c9:c0:fb:13:d6:fe:c6:75:ce:41:
         76:c3:87:f1:56:ee:13:5c:02:04:ae:e6:ec:2c:47:fd:0a:d4:
         c3:d9:e6:72:97:d9:b9:54:64:aa:96:9f:f2:77:24:fa:c9:2e:
         2e:27:85:3d:c7:14:e4:45:78:3f:01:d2:85:73:ad:48:a9:91:
         94:af:38:59:a1:5c:11:4d:80:56:48:ce:02:dd:7e:1d:6d:59:
         73:ae:0d:6b:eb:8d:c2:e1:30:52:56:3c:37:94:f3:fc:6d:d7:
         05:e4:a0:2d:a6:b0:39:b8:85:a3:f3:89:3d:05:8b:3a:d7:1f:
         89:ee:8d:1f:2b:0c:e8:ce:67:0d:9c:fd:b1:cc:00:5f:10:8a:
         75:a5:7b:d1:7f:02:41:2a:fa:f3:bb:f8:be:cb:c6:75:31:47:
         59:23:3e:6b:93:63:a3:a2:76:3c:2e:ad:0a:79:21:93:50:df:
         cf:00:9b:73:53:74:85:cc:95:58:1d:a3:d4:6b:b1:bf:d6:8c:
         81:17:99:b5:7e:57:2c:50:e8:03:1f:1f:04:a0:ef:e5:01:b5:
         41:ec:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:29:01 2026 by rpki-client