Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File:                     QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier:          cM5xTXjmstcaWDbNzJJF30XjyW+JfsHAEoVLGJuDIEY=
Subject key identifier:   98:88:5E:76:35:D6:B7:E1:18:D8:C7:E4:A9:F0:DC:E2:D5:2B:C5:31
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer:       /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number:          01E5
Signing time:             Mon 11 May 2026 03:26:25 +0000
Manifest this update:     Mon 11 May 2026 03:26:24 +0000
Manifest next update:     Mon 18 May 2026 03:26:24 +0000
Files and hashes:         1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: 2EcPtlPxJYZYlqfXaB803j6V9c7uVhNityM0AzXwvak=)
                          2: 294325DC699711EEB317603DC4F9AE02.roa (hash: rkdbQ97/B4DHE2WNeWD/G6YxsLNJ2wf35oDouMC90w4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
                          rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
        Validity
            Not Before: May 11 03:26:24 2026 GMT
            Not After : May 18 03:26:24 2026 GMT
        Subject: CN=6a014c61-6140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:3b:df:f6:5d:cf:ff:b9:b0:86:39:7a:25:
                    8c:2f:86:58:77:e9:a2:83:9b:55:4d:c7:e7:3d:58:
                    ef:00:e1:a4:b5:29:69:9f:9d:66:57:48:fe:86:2c:
                    6d:aa:c8:10:74:53:c2:d6:71:1d:0a:d5:8b:f1:1e:
                    fa:14:e6:2e:f8:1a:84:04:81:43:16:05:9b:7d:b2:
                    aa:7b:d3:b4:e9:38:af:39:b2:3e:8f:02:fd:20:b8:
                    6c:b4:cd:dc:48:2c:23:5d:6b:e3:53:3a:5b:b5:a8:
                    99:a2:d0:e7:dd:98:b6:32:e6:8f:55:cb:c0:c9:48:
                    f6:df:41:61:10:83:f2:43:fb:1c:16:fe:12:d5:a5:
                    a3:63:5f:be:8b:f2:10:61:e5:4c:52:ac:d4:cb:1d:
                    0c:fa:1c:a1:45:28:55:2d:02:87:18:1f:6b:da:6d:
                    d8:87:cf:1d:19:c4:e1:4c:7b:7c:b6:c2:47:f3:31:
                    26:0f:82:56:80:ba:b3:25:e5:95:5f:a5:74:05:78:
                    e9:5a:1f:42:9e:86:b3:0a:08:f5:5d:79:79:aa:60:
                    3e:d4:f3:56:17:15:2d:8e:82:b6:29:cc:92:aa:68:
                    3e:b1:7e:59:9e:ca:6b:fc:62:85:71:37:a2:26:e6:
                    6b:fc:1c:ae:a2:46:bc:fd:42:fb:51:be:01:aa:79:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:5E:76:35:D6:B7:E1:18:D8:C7:E4:A9:F0:DC:E2:D5:2B:C5:31
            X509v3 Authority Key Identifier:
                keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:19:a9:27:be:cc:6d:89:4c:4e:d9:62:7f:1e:39:5c:18:
         88:ee:c6:a9:2e:7f:21:bd:71:58:0d:9e:94:d7:db:0e:c6:e1:
         3b:5b:9d:ea:c5:8f:af:4c:25:64:d6:db:c1:af:2f:34:0e:df:
         12:16:e5:af:85:27:5a:20:f3:5f:20:86:bf:99:d5:1a:3c:f5:
         03:17:d7:ce:2d:d6:bf:af:07:55:7d:40:1b:6f:93:15:8f:65:
         e4:65:26:75:9b:9f:90:46:5f:f7:0f:be:37:da:41:c6:12:3b:
         c6:b3:4f:98:e0:b6:c3:96:2f:9a:c0:0f:68:e4:73:4c:c1:74:
         2d:fc:71:ac:37:7e:ae:93:63:7a:f5:72:e0:86:d6:df:51:0e:
         4e:e9:eb:f4:54:29:ce:90:ab:51:0f:19:cf:88:3d:61:8c:dd:
         8d:a8:35:2f:bc:55:fc:f2:61:1a:66:87:34:68:a3:27:0e:cb:
         bd:cc:02:9a:86:bb:66:b7:b8:6b:54:11:e3:9b:7c:33:16:2b:
         0b:7f:50:1b:50:8c:01:08:3f:a2:c7:9a:4b:03:4e:9a:ca:e1:
         34:09:fc:40:b5:cd:49:ec:ac:1f:c9:e3:8c:35:a3:31:54:08:
         a4:1f:4f:d9:1b:aa:d5:39:02:5d:e7:98:c4:e3:73:dc:d9:e8:
         fb:0f:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:22:51 2026 by rpki-client