Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
File:                     QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft (raw, json)
Hash identifier:          y0eGKzh0YOmyMr6TD2mCSyZpuHqoPfivIkV4weOlruA=
Subject key identifier:   13:E5:F6:07:E0:B0:4E:0A:B3:6D:07:15:24:A9:43:CC:A6:CB:15:EB
Authority key identifier: 41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
Certificate issuer:       /CN=A91A25DF/serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
Manifest number:          9E
Signing time:             Mon 11 May 2026 07:29:44 +0000
Manifest this update:     Mon 11 May 2026 07:29:43 +0000
Manifest next update:     Mon 18 May 2026 07:29:43 +0000
Files and hashes:         1: QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl (hash: FIWWXB72Bwuui5GJhiJgfFhxg/pBpjgnpXIPKd8DMS8=)
                          2: C5B717905EDA11F0A5EAB579C4F9AE02.roa (hash: vV//1EEbPUz/O65Gy1tJMCCtU1GCZgX+F9nxMGWvmXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
                          rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A25DF, serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
        Validity
            Not Before: May 11 07:29:43 2026 GMT
            Not After : May 18 07:29:43 2026 GMT
        Subject: CN=6a018567-26e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:1d:04:f5:66:4b:0b:ef:bc:09:27:c8:0b:
                    7d:2c:3f:c0:df:50:c1:d2:bf:54:e1:f7:1a:14:cb:
                    d5:34:b4:1e:90:11:43:ba:5b:8a:76:98:56:00:23:
                    fc:5d:2e:91:6f:ae:69:13:aa:1d:be:51:e1:3f:8b:
                    6f:81:63:75:7d:47:46:3c:79:16:df:d4:7c:2d:4e:
                    fe:49:c9:8a:1d:61:a7:44:cb:9b:8f:16:7a:2b:6d:
                    6f:ba:9d:fb:a9:6e:f2:ff:e5:de:62:2e:8a:ce:a2:
                    60:6f:a6:d8:0d:f2:29:5d:81:10:99:5e:be:99:73:
                    9d:d6:c4:ee:47:16:6d:0c:08:03:3d:8d:0f:23:6e:
                    73:bc:d2:7d:c6:84:b4:14:0e:80:78:5f:2c:20:0d:
                    df:b9:05:f5:86:b3:4b:e8:68:79:a6:6e:65:2b:ae:
                    1c:6d:ac:25:6b:3b:64:ed:41:2f:2e:8b:7e:51:e6:
                    a8:50:73:82:45:7b:7f:8d:1d:63:4f:65:e1:04:71:
                    58:90:da:23:f4:08:f5:d6:0e:d2:35:52:ac:89:b9:
                    8c:46:ea:53:1f:22:2a:eb:d6:9d:e1:9b:64:c8:41:
                    fc:7c:ce:f5:d4:66:d2:95:6b:30:d4:d1:77:60:d1:
                    b0:e9:7a:ff:d4:06:65:42:8f:59:34:b0:23:35:72:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E5:F6:07:E0:B0:4E:0A:B3:6D:07:15:24:A9:43:CC:A6:CB:15:EB
            X509v3 Authority Key Identifier:
                keyid:41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:62:0d:5c:26:37:0d:32:f3:e6:01:00:24:bb:93:b6:94:63:
         0b:16:30:4a:67:2b:e5:a9:b4:78:e9:05:2e:fc:4a:e3:c3:9d:
         10:ad:f1:3c:8a:b0:e3:06:89:b0:66:ca:be:0a:2f:26:0d:5e:
         fb:5a:b7:af:7e:48:7a:bc:d4:83:7a:6b:b6:0e:f1:f2:bf:c2:
         f8:24:ee:60:52:74:49:d4:42:80:d1:33:6a:5b:0e:34:17:b9:
         db:ad:52:7f:a4:d4:92:68:8a:07:cd:a6:f0:35:20:48:4d:34:
         54:68:22:c8:fc:59:42:91:44:93:a5:0d:01:50:81:e0:77:bb:
         76:65:69:21:6b:64:0c:5c:20:a2:e6:75:70:30:44:33:eb:11:
         27:69:f2:3a:71:6c:e1:79:61:81:79:84:47:4f:37:6e:a5:63:
         bf:f3:4c:72:d9:13:59:cf:5e:30:61:b9:3d:16:89:8c:ba:bd:
         76:d4:03:74:e0:37:8a:bf:dc:e1:85:29:1c:12:51:f7:5a:26:
         e0:ed:79:1d:d3:d2:d0:e5:d3:17:c5:bc:7b:b7:21:d5:23:f0:
         ff:dc:2c:2d:bb:ec:63:20:2f:27:f2:82:1f:b5:0e:cb:a2:6f:
         0b:eb:86:ed:41:f7:88:e7:0c:6b:94:d2:19:65:e2:1e:9f:c7:
         95:4d:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:15 2026 by rpki-client