Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File:                     CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier:          LhIIUY1n6nH/7p7xUHRsj7IEwtHHEmwPHdZFSck7Imc=
Subject key identifier:   13:65:65:4D:BE:25:8C:8E:D5:87:63:46:91:85:88:60:0E:12:A1:6F
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer:       /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number:          ED
Signing time:             Mon 11 May 2026 06:30:52 +0000
Manifest this update:     Mon 11 May 2026 06:30:52 +0000
Manifest next update:     Mon 18 May 2026 06:30:52 +0000
Files and hashes:         1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: qX/ZxzMidDuPwmA2VmPhlnv+xKTndp/myhKOn3Kns8Q=)
                          2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
                          rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
        Validity
            Not Before: May 11 06:30:52 2026 GMT
            Not After : May 18 06:30:52 2026 GMT
        Subject: CN=6a01779c-1efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:61:6a:03:6f:da:b7:2f:a2:e5:f7:26:09:
                    5f:e8:6c:b8:29:41:7a:25:c8:c2:3f:ab:e7:db:7f:
                    34:c0:0f:6c:70:f4:8a:c5:e0:00:a5:3b:50:42:32:
                    9d:4b:2e:67:9f:06:e8:86:fa:41:16:6f:02:e9:0d:
                    ef:a9:bc:ee:d6:7a:09:58:53:8f:88:e7:7f:0a:bd:
                    ab:3a:f0:51:4c:4b:1f:5c:04:0a:98:50:44:ae:d1:
                    74:18:21:fa:b4:5d:84:e2:ab:2b:73:6d:cf:8d:27:
                    a5:06:6e:ba:b7:7f:b9:d3:5d:52:6e:d0:3e:30:07:
                    23:fb:58:32:50:ac:b8:f2:29:25:e5:da:3f:81:90:
                    6b:d8:30:bb:16:57:04:56:c3:8c:71:f3:7b:c8:aa:
                    fa:22:68:b2:0e:2c:7f:d3:fa:b2:cb:60:13:73:b1:
                    20:85:58:14:29:09:49:be:96:85:6d:16:5e:42:eb:
                    e0:d2:64:1a:ca:bc:fc:73:5c:d4:09:da:72:68:91:
                    a3:e4:ee:03:f0:65:07:94:23:99:b7:dc:36:55:63:
                    e0:83:1a:a4:c4:f4:3e:37:ac:bb:d1:98:6d:54:2c:
                    d4:b1:59:2f:fd:eb:54:24:89:95:85:47:40:91:ac:
                    ca:a6:53:f4:f5:f6:b7:30:7e:31:8e:6e:93:4d:fe:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:65:65:4D:BE:25:8C:8E:D5:87:63:46:91:85:88:60:0E:12:A1:6F
            X509v3 Authority Key Identifier:
                keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:2a:9c:a5:c1:83:0a:20:a7:2a:a9:41:d9:a1:6d:46:e5:
         49:40:4b:d2:6f:bc:dc:0c:72:12:7e:32:a2:3a:e3:3b:53:cb:
         d9:c6:ef:01:4f:04:81:48:22:ac:91:cc:0d:4b:3a:a4:5e:eb:
         10:43:f2:5b:41:be:b1:43:9c:fe:04:5f:95:45:67:4a:ca:d2:
         72:2f:32:bb:84:a8:1a:d8:82:df:53:b8:13:58:2b:77:c0:1b:
         4d:30:b9:8d:ce:c8:ce:91:9e:b5:e1:5c:2f:5a:dd:ca:d0:c4:
         c6:23:74:1d:21:09:f6:51:b3:4c:d2:25:ea:1c:d6:5a:b8:62:
         b4:ba:fe:b3:b7:85:66:ef:cd:b8:77:6d:47:f7:8e:2c:ad:b4:
         2d:5c:47:00:40:75:4c:ea:d7:b6:dc:70:8d:cb:66:57:c1:4f:
         88:b7:00:41:b8:e0:75:d4:13:d6:e3:f5:3a:22:22:a4:47:19:
         0c:19:58:c4:71:e7:79:77:67:ec:79:dd:90:17:42:80:1a:d7:
         7b:29:48:a3:74:f5:56:15:db:f9:99:da:4e:7c:59:ce:30:62:
         ba:7c:87:71:d2:33:35:47:07:20:7b:c2:d7:48:2f:02:6d:57:
         8e:3d:24:ed:99:97:a8:41:d2:e5:83:ac:63:45:70:71:2b:ba:
         cb:12:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:00 2026 by rpki-client