Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft
File:                     qbDUr9uPeMPSyEfipHI6OFlXYoA.mft (raw, json)
Hash identifier:          Gz0ed7O56n9R8r/D+ti/2ifqgbsI2eawIOm4rh7nQws=
Subject key identifier:   3D:98:6E:52:F2:8B:18:3E:3B:6F:92:08:70:9D:12:19:AE:E4:F3:A6
Authority key identifier: A9:B0:D4:AF:DB:8F:78:C3:D2:C8:47:E2:A4:72:3A:38:59:57:62:80
Certificate issuer:       /CN=A91B0B89/serialNumber=A9B0D4AFDB8F78C3D2C847E2A4723A3859576280
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft
Manifest number:          05
Signing time:             Mon 11 May 2026 09:25:27 +0000
Manifest this update:     Mon 11 May 2026 09:25:26 +0000
Manifest next update:     Mon 18 May 2026 09:25:26 +0000
Files and hashes:         1: qbDUr9uPeMPSyEfipHI6OFlXYoA.crl (hash: Tc+RO+v4x1hx5myajMLSESSSIBHpNxHgiq1F6IyCs5U=)
                          2: 5D089144492911F1B850B010A6833773.roa (hash: 7Omr/cVEKs+waddjhiEUfhIRfZGdS9UY5db1PiEBZhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B89, serialNumber=A9B0D4AFDB8F78C3D2C847E2A4723A3859576280
        Validity
            Not Before: May 11 09:25:26 2026 GMT
            Not After : May 18 09:25:26 2026 GMT
        Subject: CN=6a01a086-0211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:4e:ab:11:b2:49:0c:f8:5a:c1:20:33:97:
                    50:82:c1:78:ec:26:a8:00:16:52:7b:cd:77:ba:3b:
                    8f:9f:02:be:44:96:09:b4:a4:c7:a1:2d:19:ec:a4:
                    24:d8:f3:5a:a8:99:93:c8:7b:0d:98:7e:10:e5:98:
                    f9:7e:3a:14:10:97:18:45:1c:dd:a9:f3:7d:39:d0:
                    53:3c:5a:dd:32:bf:a1:72:f3:a9:7f:41:1f:cc:49:
                    77:50:a3:0a:69:7d:69:f5:f2:b0:d6:5b:fb:09:f0:
                    23:3f:ea:65:6a:05:5c:d4:8d:94:ed:b6:44:b7:e8:
                    69:16:53:e4:27:04:8d:36:a3:b9:d4:af:f3:ee:93:
                    5e:07:26:38:88:c8:dd:7a:e4:03:c4:c7:a2:ec:66:
                    2a:f4:aa:57:56:a5:47:6f:56:ae:52:ed:a1:ca:86:
                    24:69:48:39:02:a6:0e:2b:b7:42:d5:22:3f:da:ed:
                    ea:1a:7b:84:20:af:73:cf:f9:bd:1e:a7:cd:cb:82:
                    8b:b0:b6:8e:44:6f:0a:90:d7:df:0f:67:fb:86:dc:
                    ea:08:6f:6f:6b:ef:31:70:d8:15:8f:f1:21:21:55:
                    41:f4:ba:0e:83:9d:86:fe:01:27:c9:74:0a:3d:08:
                    2e:77:14:5a:bf:55:fc:5a:0e:49:3b:b3:6f:e8:2a:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:6E:52:F2:8B:18:3E:3B:6F:92:08:70:9D:12:19:AE:E4:F3:A6
            X509v3 Authority Key Identifier:
                keyid:A9:B0:D4:AF:DB:8F:78:C3:D2:C8:47:E2:A4:72:3A:38:59:57:62:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:f4:22:4e:fa:90:08:54:4a:a3:e9:6a:df:2f:3f:81:27:
         7c:b3:c0:1b:85:54:dd:4f:7e:a8:7c:9f:6e:47:fc:b2:55:9a:
         c7:97:75:09:00:8e:5c:63:cf:30:69:a8:ed:b2:00:2b:14:3c:
         15:dd:42:82:aa:71:c5:1e:3a:86:47:f7:9d:d4:08:3e:2d:62:
         88:0e:b6:66:ec:af:4a:30:a5:a9:86:87:bf:73:d3:1c:e9:1f:
         d0:48:b7:e7:6d:e9:aa:54:e8:14:c7:3c:94:6a:c5:b6:c0:3e:
         5d:04:8e:ca:32:58:ab:fa:bb:34:1b:aa:93:4d:fd:31:ae:fc:
         8d:b1:ea:90:00:59:f5:ac:fa:5b:5b:22:38:a2:b3:80:fd:49:
         04:ff:86:6e:82:13:73:70:8b:22:40:1b:93:66:fa:ff:95:8e:
         17:44:e8:4e:d0:8b:30:65:41:f0:4c:b8:d7:2a:8c:cc:b8:67:
         80:d1:be:7b:e0:fd:c8:20:7d:19:4d:5c:30:9a:e9:70:15:fa:
         c3:19:fa:15:15:98:95:b0:20:91:b4:86:b0:73:7f:52:e7:4c:
         10:04:9e:5c:45:6d:55:8a:41:9a:c3:94:27:a9:88:46:b1:b1:
         29:f3:10:92:74:1d:7f:b3:5a:61:f6:c6:7d:d1:9e:f9:28:62:
         1c:ad:14:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:04 2026 by rpki-client