Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
File:                     Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json)
Hash identifier:          3TgsAWyTAyLYiG8dohEq759y1UvA0laVUQXHp7vn6iA=
Subject key identifier:   9A:54:85:BF:17:9F:4C:25:4A:9E:CE:5F:48:43:7B:1A:7D:38:0D:F5
Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
Certificate issuer:       /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Certificate serial:       0372
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
Manifest number:          036A
Signing time:             Wed 13 May 2026 00:59:15 +0000
Manifest this update:     Wed 13 May 2026 00:59:14 +0000
Manifest next update:     Wed 20 May 2026 00:59:14 +0000
Files and hashes:         1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: LAJln0P+rIk+9QWA3S4yJDihLLZC09rZF7jT0FxQ/pY=)
                          2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: tyV63/6XwWHMEnlVNrZpKRUTH+qgqLOvrBf/JcSlvnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
                          rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503
        Validity
            Not Before: May 13 00:59:14 2026 GMT
            Not After : May 20 00:59:14 2026 GMT
        Subject: CN=6a03cce3-3412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:ec:34:19:c4:0f:10:0a:aa:b9:6e:19:3b:
                    f7:f9:50:02:96:43:c0:6a:54:86:12:20:c7:d7:86:
                    63:ce:70:4f:3c:70:8c:51:48:f0:b6:8c:12:bb:c1:
                    4b:32:d3:b8:2d:58:30:f0:0f:16:43:f5:1b:bc:c7:
                    d1:b4:f8:c0:48:71:68:fb:ef:3b:8e:cc:2b:87:fd:
                    d0:d0:24:94:76:82:6a:7c:c8:73:76:5c:1a:4d:e5:
                    7e:ee:3d:26:e4:f3:25:3d:c3:74:08:45:1e:d7:d5:
                    2a:58:2b:23:86:53:7e:17:43:bc:98:74:60:57:67:
                    83:b9:f0:f2:08:ae:2f:63:63:18:00:68:e5:09:94:
                    62:8f:22:1c:6b:a0:4a:21:f7:24:ff:89:28:ee:7e:
                    3b:e7:3b:01:81:15:ab:55:55:9e:e1:fd:6d:a9:17:
                    de:94:b7:bb:ca:54:c1:dd:9c:1a:db:af:89:8b:f3:
                    77:d2:eb:95:82:28:71:36:68:58:d8:d3:8d:5a:85:
                    0f:48:0f:7a:ff:30:f9:40:05:75:f3:30:f1:a4:10:
                    76:30:ce:eb:56:95:55:8a:8d:db:43:be:1f:62:8b:
                    80:33:9c:6f:1b:61:16:0c:cf:ff:7f:29:f5:79:cb:
                    0e:cb:6f:56:36:0b:70:ce:5c:19:e1:ef:19:33:63:
                    46:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:54:85:BF:17:9F:4C:25:4A:9E:CE:5F:48:43:7B:1A:7D:38:0D:F5
            X509v3 Authority Key Identifier:
                keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:94:84:1d:ff:61:5f:d6:7b:8a:9f:3a:cf:83:09:eb:45:a1:
         03:23:9d:7d:ad:3b:9c:83:6d:e2:20:63:ab:a2:75:35:5b:24:
         6b:9e:bd:82:8b:7c:9b:07:dd:81:47:c4:e2:66:f7:9f:3e:58:
         8c:d5:78:c8:47:40:4c:b3:fb:87:d0:54:10:57:d7:80:1a:e7:
         1a:63:de:f1:a0:6a:3a:a8:78:2f:98:ec:d6:1f:f0:0e:0b:56:
         db:dd:07:9c:78:08:c1:76:ad:80:2a:8c:97:ff:0b:14:6f:ec:
         e4:97:36:c7:4e:6a:63:a7:13:a7:1f:64:b1:c6:4e:69:98:cd:
         4c:17:9d:03:05:aa:73:fe:90:1c:db:49:24:fb:7f:8a:f2:12:
         59:aa:93:09:cb:45:ac:c5:2e:60:f2:4b:79:1b:82:c5:30:da:
         ff:ae:66:9f:b9:7d:c8:75:06:1e:95:02:1a:a2:29:63:42:38:
         a6:be:e5:bc:f2:44:ff:e8:9d:a6:9f:57:0e:da:9c:df:9c:aa:
         19:04:c6:7e:f1:aa:e0:e2:d9:db:88:fe:eb:d1:fe:bf:06:55:
         e4:a4:1f:a6:b1:e1:4a:86:81:5a:de:b5:b9:6f:f6:7c:79:3c:
         04:b0:c9:9d:10:08:99:19:08:c2:d4:fb:41:69:c4:71:bd:ab:
         e8:34:b9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:26:18 2026 by rpki-client