Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File:                     QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier:          TsjAvO57kif4YknBoG2qOm2/44gAXy0OCwHfyn6HA2g=
Subject key identifier:   F4:D4:63:DD:A4:9D:65:FD:9D:A3:59:30:36:85:89:29:8E:1D:63:7B
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer:       /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number:          B4
Signing time:             Mon 11 May 2026 07:14:48 +0000
Manifest this update:     Mon 11 May 2026 07:14:47 +0000
Manifest next update:     Mon 18 May 2026 07:14:47 +0000
Files and hashes:         1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: yg0XfyF50rAESlL0qPKXMAmup3GKWTg+zZ+hdaCeDVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
        Validity
            Not Before: May 11 07:14:47 2026 GMT
            Not After : May 18 07:14:47 2026 GMT
        Subject: CN=6a0181e8-7483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:a9:9e:bb:e6:ac:9e:49:f5:57:a3:94:50:
                    40:d4:58:be:26:02:44:f4:3a:18:f1:3a:19:dc:f1:
                    28:0f:c6:93:d3:e5:1a:7b:fd:2e:b1:b3:56:5f:61:
                    46:83:11:97:e6:dd:4b:e1:89:7d:4c:f2:24:d1:09:
                    86:13:d6:ac:b4:0a:97:56:d0:4f:ce:9d:e4:86:81:
                    75:93:2a:48:25:05:1f:2a:bb:16:5d:6d:a5:66:3b:
                    41:b4:95:18:2c:b4:17:a3:c4:4f:1c:7e:d5:5d:6d:
                    06:8c:c7:07:00:fa:25:8b:16:72:27:c7:fa:c5:92:
                    0e:b6:b3:2b:b6:48:c3:46:7f:e2:10:98:fc:1d:de:
                    6f:2a:68:2d:99:f3:70:7c:3a:a9:02:fc:67:b0:e5:
                    a4:88:f5:17:5e:da:5a:94:bf:cc:3c:8d:56:23:fe:
                    e6:92:09:84:c1:f5:84:cf:97:f3:a4:7d:36:84:79:
                    f1:01:42:c4:a5:1a:db:0f:c3:2d:fd:61:21:04:2e:
                    09:f6:0c:55:67:f9:94:09:28:56:17:f7:4e:15:34:
                    9b:22:55:05:ae:1f:96:ba:35:e0:13:d0:84:38:15:
                    2b:8c:f0:31:fe:4e:dc:7a:3f:ff:50:e7:0a:61:88:
                    1e:9a:1b:3b:9f:82:dc:5b:f0:37:cf:6a:99:60:88:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D4:63:DD:A4:9D:65:FD:9D:A3:59:30:36:85:89:29:8E:1D:63:7B
            X509v3 Authority Key Identifier:
                keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8d:f1:ef:0d:dc:0f:a2:7c:7b:50:68:77:2c:89:d9:5b:98:
         97:e7:34:d4:f1:b5:99:e7:41:6d:d0:3d:59:a3:99:63:1f:50:
         dd:1d:31:57:73:5d:b8:2e:05:8e:87:c5:19:c9:90:27:17:91:
         98:c3:4f:ef:d8:c0:de:71:a6:9a:df:54:f6:04:4a:f4:28:0c:
         e1:05:51:b7:37:58:5c:d1:42:a3:dc:ed:93:13:88:97:5c:e9:
         77:68:0f:dd:92:01:29:c7:75:31:38:3f:da:d0:bd:8c:68:35:
         69:7c:40:ff:1b:5c:ab:b3:63:ef:81:8a:ce:f2:d8:b2:b0:0d:
         62:7a:ba:f0:7f:ab:99:0f:8a:52:37:d0:0b:1b:a1:8d:90:bf:
         5d:61:79:38:22:8b:f9:c8:a0:71:51:18:d9:8f:6e:a7:05:2e:
         e3:2b:95:61:e6:b9:2d:62:3d:31:28:43:c4:fc:c0:77:3b:f4:
         f2:04:15:91:25:4b:28:5a:3b:5e:05:af:52:9c:60:03:88:81:
         0f:9c:ee:52:86:92:23:63:42:a5:92:b8:1f:2c:98:f1:54:2f:
         97:a9:ce:a7:40:9f:37:21:4f:33:33:70:06:9c:b1:8a:e3:72:
         23:98:31:b0:00:18:a1:7f:41:75:c6:c7:a3:85:4a:ed:74:a6:
         62:83:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:06 2026 by rpki-client