Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File:                     QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier:          kb02KU8jO8v4okrbuVbNw8GsZ/iEXxGzWQg8jSzCpcs=
Subject key identifier:   B7:EE:B5:09:6A:71:86:A9:85:F7:29:6B:BD:E5:CC:F4:1A:45:65:2F
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer:       /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number:          B8
Signing time:             Mon 11 May 2026 07:20:51 +0000
Manifest this update:     Mon 11 May 2026 07:20:50 +0000
Manifest next update:     Mon 18 May 2026 07:20:50 +0000
Files and hashes:         1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: lCECIXx7CyDYJWHGaBViVLEIY8u3fYTG8V96cLxULb4=)
                          2: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: kYrLbQFT1ZzGHGGu97W4fdlheMT2k3tj7Vb3H/0HdO4=)
                          3: B87594FC08B311F1954B37591C3D8C67.roa (hash: wztUnu/AtmwGJSEKvUQ+sSvPTP/4Cs6eUYir69FLSaI=)
                          4: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: cG6u0zgjdvCrRZeQ4usyXAcEzT17uS3cbK/qREEeINU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
        Validity
            Not Before: May 11 07:20:50 2026 GMT
            Not After : May 18 07:20:50 2026 GMT
        Subject: CN=6a018352-fa1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a3:10:24:f8:48:d2:ca:09:a1:4c:67:12:ed:
                    b6:dd:c5:43:21:04:93:98:4e:2d:7f:ec:e6:b2:3e:
                    1f:61:86:52:b0:49:05:7b:98:e3:04:19:67:13:d5:
                    13:67:7b:9d:e6:c3:78:8d:04:45:68:a9:51:1b:15:
                    de:e9:a2:e2:47:3e:9b:08:ff:57:b0:28:48:9e:bd:
                    73:8e:a9:62:f1:69:a8:78:68:98:01:5f:4a:0f:95:
                    a0:44:3c:72:48:ce:4c:e6:dd:d8:0e:75:ea:89:e5:
                    1e:ef:ae:ad:13:05:b2:7f:ca:8f:e3:15:b1:0b:ea:
                    af:46:5f:2a:8e:bb:4c:ba:9a:52:38:de:3a:e7:13:
                    6c:2b:ff:a5:cf:32:cc:ff:cc:ec:be:00:e9:59:43:
                    08:be:5e:36:7a:95:b8:b3:30:f0:2e:f2:31:81:67:
                    77:df:b2:7e:dd:dd:0e:56:89:66:95:93:3c:0f:b2:
                    df:84:06:2e:f1:d4:57:4d:3b:3a:a1:53:c1:5f:df:
                    c5:b5:51:67:db:3b:c9:18:ae:b8:2e:62:0e:9b:9d:
                    1a:3b:a0:a0:89:85:f5:05:d2:e5:55:af:ba:94:fd:
                    09:20:d9:22:54:6f:bf:24:1a:8b:17:21:71:e3:b1:
                    cf:56:d1:54:45:9b:30:34:35:40:a0:5a:19:15:c2:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EE:B5:09:6A:71:86:A9:85:F7:29:6B:BD:E5:CC:F4:1A:45:65:2F
            X509v3 Authority Key Identifier:
                keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:66:ed:12:2c:12:1e:2b:6b:31:5c:0d:6a:0a:87:a9:ee:22:
         83:c8:07:5d:34:e2:8e:d0:04:e9:fb:36:e1:67:99:b1:76:3a:
         07:67:bd:16:e4:60:76:23:a5:e7:35:dc:d6:c2:93:06:bf:a0:
         d0:d2:8d:3f:ff:d5:54:f9:a6:91:64:d9:00:c1:15:19:89:76:
         0b:a8:4d:63:93:d6:1f:a0:1d:40:03:63:a1:5c:52:9f:f2:a2:
         67:5f:b6:3e:a4:3b:70:39:b3:bb:bc:98:41:0f:fb:fd:5f:7c:
         97:40:d7:0a:13:6a:6f:2c:04:14:53:c4:94:4a:9c:2e:40:fe:
         17:57:02:42:fe:94:57:1b:55:87:ab:3b:5d:05:13:02:50:43:
         02:7c:03:3a:e9:a4:85:88:4e:cc:34:64:a4:2d:ae:3a:f8:81:
         26:f2:58:7b:3b:a9:01:84:f3:5e:7b:1b:82:5b:07:e8:b3:6d:
         72:b7:88:4a:b0:d0:d8:3a:57:a4:92:3c:02:55:cb:d2:98:ac:
         aa:c8:b7:2f:cc:22:fb:65:6d:ea:5c:ce:67:37:b9:a4:1c:d6:
         da:10:13:8e:85:63:01:17:5e:41:b9:14:d2:41:61:3d:0a:30:
         88:d0:ae:a0:76:8f:e8:cf:74:34:fd:1d:74:e5:af:1c:b5:26:
         a2:36:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:56 2026 by rpki-client