Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File:                     QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier:          17pekKrIYaF7pqCmGC/I+9XAR93fxUDnnOpOap+d+mM=
Subject key identifier:   54:90:B6:81:50:19:CF:A7:14:22:38:CA:C5:AC:44:07:F2:FB:03:4E
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer:       /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial:       08D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number:          08C1
Signing time:             Tue 12 May 2026 20:29:53 +0000
Manifest this update:     Tue 12 May 2026 20:29:53 +0000
Manifest next update:     Tue 19 May 2026 20:29:53 +0000
Files and hashes:         1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: fUpebq2X0OnsZGJ8G6EQ9e0svzZ5iRs2K/Tzuky2r+E=)
                          2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: D61mhla4ZKX7DfgoplRcuCG35MYNou9878EVBT40r2c=)
                          3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: tUsv3tNoQWMVfE/GiWVi84l0pY9vapkX9vPKn8R6z3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257 (0x8d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
        Validity
            Not Before: May 12 20:29:53 2026 GMT
            Not After : May 19 20:29:53 2026 GMT
        Subject: CN=6a038dc1-08bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:89:d9:fc:54:14:a3:ea:3c:84:72:c4:a1:
                    11:a5:24:d5:06:ae:4c:5e:1c:22:43:33:81:d9:c4:
                    61:7a:fd:8a:c6:ff:61:6f:03:ab:7a:f4:90:d1:ba:
                    26:39:44:c2:1e:91:92:43:4f:bf:41:00:13:e3:09:
                    72:1b:89:e6:c6:50:56:33:c7:35:d7:e9:bb:c4:10:
                    26:81:dc:f3:97:65:8a:4a:c8:3b:c4:ec:40:02:cc:
                    65:4c:5d:29:34:f6:ab:f3:22:8c:d4:e6:24:d0:dd:
                    dc:27:8e:a6:c4:7f:78:bd:d8:ce:4f:ef:47:30:b4:
                    a2:54:96:e2:9f:f5:28:95:06:a8:a9:a9:f4:fd:97:
                    68:a4:7e:9b:e0:5b:b1:68:9b:c5:28:24:2f:f2:41:
                    a0:38:89:7d:e4:37:74:d2:38:ce:37:4b:69:fc:34:
                    b4:f9:e2:f5:e6:be:8b:4f:49:bd:58:65:12:8d:f8:
                    d4:7c:a5:ec:6b:c8:3f:68:aa:4b:7e:8a:27:7a:a4:
                    cd:ba:d5:53:c0:eb:bb:a7:19:79:9e:b1:88:75:fd:
                    6b:c2:42:84:97:c5:b2:58:cd:d0:0d:d8:65:37:12:
                    05:1c:7b:02:8b:4b:9a:02:14:00:b4:62:2a:eb:c2:
                    e4:0d:8e:52:95:04:c2:e8:3b:95:3f:ff:33:be:59:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:90:B6:81:50:19:CF:A7:14:22:38:CA:C5:AC:44:07:F2:FB:03:4E
            X509v3 Authority Key Identifier:
                keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d8:f8:3d:59:63:ef:18:69:b2:87:ce:7e:ac:d5:6d:95:ba:
         86:f9:67:83:a1:f6:77:f1:f0:9f:35:5e:7b:ad:5d:7d:68:8f:
         72:cb:b3:8b:6f:cf:43:f9:1c:ec:97:86:01:be:a5:72:c2:12:
         20:c7:5d:07:8a:3c:d8:b2:08:ac:d8:0a:25:55:cd:cf:17:07:
         07:e5:53:89:39:a7:7c:99:23:ba:5e:b4:53:86:d1:fb:4f:61:
         13:11:e3:86:c9:b2:c6:08:f0:13:6e:ec:48:ba:f7:06:8b:3b:
         e5:d9:d8:fd:29:59:d7:60:9c:d1:a1:c5:49:8e:79:07:d8:58:
         68:38:98:97:55:9d:fd:39:c2:1b:02:78:f4:64:9c:75:66:ea:
         ee:fe:f4:62:69:6f:d7:ea:4e:34:24:f5:c2:1d:db:f5:97:be:
         38:db:05:cf:93:83:33:ae:dd:02:f3:b9:3c:fe:61:5d:4f:e7:
         3a:f3:53:91:95:10:86:d2:fd:81:e1:70:82:ce:b1:ad:69:d0:
         0e:fd:41:14:af:b5:a0:d5:2b:19:0e:e2:e3:2b:e1:88:03:2b:
         21:85:b3:82:46:04:2d:a5:f0:c3:e0:4b:7f:84:e5:d6:19:7b:
         27:73:8d:c5:93:d5:98:21:36:76:be:6a:0b:1d:81:20:50:c9:
         85:a7:80:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF
RjkwRTgyNkYwHhcNMjYwNTEyMjAyOTUzWhcNMjYwNTE5MjAyOTUzWjAYMRYwFAYD
VQQDEw02YTAzOGRjMS0wOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq0eJ2fxUFKPqPIRyxKERpSTVBq5MXhwiQzOB2cRhev2Kxv9hbwOrevSQ0bom
OUTCHpGSQ0+/QQAT4wlyG4nmxlBWM8c11+m7xBAmgdzzl2WKSsg7xOxAAsxlTF0p
NPar8yKM1OYk0N3cJ46mxH94vdjOT+9HMLSiVJbin/UolQaoqan0/ZdopH6b4Fux
aJvFKCQv8kGgOIl95Dd00jjON0tp/DS0+eL15r6LT0m9WGUSjfjUfKXsa8g/aKpL
fooneqTNutVTwOu7pxl5nrGIdf1rwkKEl8WyWM3QDdhlNxIFHHsCi0uaAhQAtGIq
68LkDY5SlQTC6DuVP/8zvllo+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSQtoFQ
Gc+nFCI4ysWsRAfy+wNOMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC
REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODcyQy9GMjBFNTU5NkRCREMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVf
UWhaX3Bvc3lhR2Z2a09nbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAStj4PVlj7xhpsofOfqzVbZW6hvlng6H2d/HwnzVee61dfWiPcsuzi2/PQ/kc
7JeGAb6lcsISIMddB4o82LIIrNgKJVXNzxcHB+VTiTmnfJkjul60U4bR+09hExHj
hsmyxgjwE27sSLr3Bos75dnY/SlZ12Cc0aHFSY55B9hYaDiYl1Wd/TnCGwJ49GSc
dWbq7v70Ymlv1+pONCT1wh3b9Ze+ONsFz5ODM67dAvO5PP5hXU/nOvNTkZUQhtL9
geFwgs6xrWnQDv1BFK+1oNUrGQ7i4yvhiAMrIYWzgkYELaXww+BLf4Tl1hl7J3ON
xZPVmCE2dr5qCx2BIFDJhaeA8Q==
-----END CERTIFICATE-----
Generated at Wed May 13 15:50:32 2026 by rpki-client