Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File:                     qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier:          xLFfxTI5jhnQW5acTAICQAQFx6fZNOV9YLJ+SsdF4oQ=
Subject key identifier:   1C:1E:9D:8D:96:F9:B5:9A:B2:DA:2C:8D:23:36:D9:8F:21:38:58:81
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer:       /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial:       1BEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number:          1BD0
Signing time:             Tue 12 May 2026 16:14:42 +0000
Manifest this update:     Tue 12 May 2026 16:14:42 +0000
Manifest next update:     Tue 19 May 2026 16:14:42 +0000
Files and hashes:         1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: rgPlVHTOiIJhnBPPmErSEMyalZuUCyg8JVrzmvVuXxg=)
                          2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: 7UZYPuwQDAPrdcrwJXsBYa/SwYNkxbesU3WpZSjYsEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7146 (0x1bea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
        Validity
            Not Before: May 12 16:14:42 2026 GMT
            Not After : May 19 16:14:42 2026 GMT
        Subject: CN=6a0351f2-cf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:1f:7f:79:c6:17:9a:1b:3d:95:2d:24:a7:
                    69:17:12:67:02:7a:36:be:06:55:61:24:3a:2c:02:
                    96:b9:ee:ab:65:f0:42:ec:ef:4a:ea:9c:21:22:6a:
                    8d:56:81:6d:0d:af:a8:68:21:14:ad:2d:a5:ba:2b:
                    cb:89:9c:0a:f5:c8:b3:77:aa:85:f4:c0:71:42:a6:
                    15:81:d5:18:c5:bf:86:43:a8:81:e2:5f:4a:af:8e:
                    ce:6e:a3:bd:02:78:0f:68:e7:e8:cd:1f:ed:cf:30:
                    6a:36:75:79:42:89:51:8e:e1:68:b8:5d:91:96:81:
                    63:fb:57:b9:dc:ec:c4:69:26:9b:c6:40:27:e8:97:
                    36:f8:a9:00:f4:03:9e:d7:f7:24:6a:9a:d2:f4:60:
                    a7:f9:25:63:52:17:8c:89:fa:9f:80:11:af:b4:18:
                    d8:2e:f9:18:99:56:f9:f0:ec:0d:ce:ca:89:fb:64:
                    82:0a:c5:3c:b2:cc:b5:19:69:ea:10:d8:5d:04:ae:
                    79:3f:c5:d8:e2:f1:d9:ad:6e:a2:2f:0c:47:32:52:
                    30:c6:d9:65:bb:7f:83:b1:a7:42:1d:40:b1:70:c5:
                    2e:68:ff:b6:15:93:2a:c7:3c:3d:5a:5d:29:41:6e:
                    f9:f1:8a:ea:84:7e:8d:dd:b3:42:37:39:0a:40:9e:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1E:9D:8D:96:F9:B5:9A:B2:DA:2C:8D:23:36:D9:8F:21:38:58:81
            X509v3 Authority Key Identifier:
                keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:c6:5f:bc:96:06:e8:31:a0:2e:79:53:26:70:77:44:40:
         4d:ef:f0:ee:e0:a3:97:bc:6a:57:eb:63:cd:5e:96:e5:27:a7:
         68:31:5e:18:45:20:bc:68:75:54:cf:9c:6b:b4:10:48:47:17:
         ff:54:80:ee:91:e0:14:27:29:8a:be:4c:82:2a:a9:d7:06:06:
         cc:d6:d5:b9:e3:18:a7:ef:64:fc:6c:3e:f8:c4:85:65:ac:63:
         0d:60:4e:f7:c6:9f:bb:cb:7e:3f:66:8c:e2:f0:2f:32:7e:52:
         a0:95:12:74:05:92:72:dc:a9:04:62:3e:e5:e7:d4:6c:f9:4c:
         a3:bb:ad:7b:a4:2d:35:8f:49:55:d9:81:58:5d:59:32:65:77:
         59:8b:31:8f:cf:69:57:61:4a:b0:38:39:21:1b:86:43:fe:64:
         42:2a:78:e1:9d:a5:0f:17:f4:da:a1:c0:59:41:fd:df:53:f5:
         13:48:b5:24:40:70:58:41:c4:9e:95:8c:43:da:6c:0d:bc:6b:
         ec:94:9f:77:13:34:6a:c1:91:2a:7f:cd:89:5c:20:c1:a6:f5:
         3d:a8:8e:09:75:19:ec:e2:94:46:a7:8b:e2:c2:7b:ea:d4:22:
         0b:b4:b9:70:ee:fb:86:98:41:24:6a:d9:20:9b:1d:21:9a:b6:
         aa:aa:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:34 2026 by rpki-client