Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File:                     QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier:          tWlX7O0De5aBDocoi4XJ9cUcaTbZoAMioTJ/WMp9yyM=
Subject key identifier:   63:44:7B:8F:1A:99:B4:2C:38:81:DE:03:5B:CD:D9:98:AA:59:2E:F3
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer:       /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial:       0489
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number:          047A
Signing time:             Wed 13 May 2026 00:13:38 +0000
Manifest this update:     Wed 13 May 2026 00:13:37 +0000
Manifest next update:     Wed 20 May 2026 00:13:37 +0000
Files and hashes:         1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: zaLQXl8rA2STGrk26Cj9QEYC7c/h9v8KAFU0fYqIINI=)
                          2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: rGGje0FS4AvgaHfWy61oWrz45FxmRS+DVJtlEpZvXeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
                          rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
        Validity
            Not Before: May 13 00:13:37 2026 GMT
            Not After : May 20 00:13:37 2026 GMT
        Subject: CN=6a03c231-7233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:b1:e4:74:2b:55:e7:3d:bf:54:e7:70:29:
                    ae:50:27:34:38:6e:c2:73:34:b8:f7:fb:e9:9c:eb:
                    fb:6d:cf:86:13:45:db:02:51:b3:d7:67:a6:58:d5:
                    d0:0e:00:7b:00:db:bc:07:f2:ce:33:ba:17:6a:92:
                    e7:bd:b0:19:67:d5:f0:39:c1:bb:04:0e:07:7d:11:
                    d8:7d:d4:9a:2f:8f:ed:aa:88:4f:b7:25:a5:29:c5:
                    9f:a2:ab:ae:dc:3e:18:1d:fd:3a:dc:9b:6b:4a:05:
                    5d:9f:81:83:13:92:7c:57:c7:15:13:2b:be:97:46:
                    a7:45:7d:78:af:42:f9:d4:fc:b3:4e:16:14:1e:65:
                    5f:8c:f1:c7:9e:5f:20:9a:47:7e:2c:a8:40:36:2b:
                    1f:fc:97:ba:0f:9a:97:9b:92:b5:47:9a:6f:3f:ae:
                    39:91:45:6c:b8:a8:f7:94:d6:9f:7b:7f:0e:c6:f9:
                    fb:ce:c8:64:60:9d:e3:73:54:29:7e:ce:fa:d2:69:
                    14:45:a7:5d:fa:21:aa:57:ec:72:66:f6:fe:6b:e1:
                    28:b1:31:eb:75:c0:4b:16:13:f0:fc:d6:3f:06:66:
                    82:ef:b7:11:78:3a:b4:8e:f3:48:38:ca:7e:e8:76:
                    5d:9a:e2:1c:b9:db:fc:4a:fc:aa:3a:5e:67:f3:d5:
                    ac:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:44:7B:8F:1A:99:B4:2C:38:81:DE:03:5B:CD:D9:98:AA:59:2E:F3
            X509v3 Authority Key Identifier:
                keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:0f:2e:09:86:b6:97:fb:7d:e0:26:37:0a:9b:59:84:f8:
         23:fb:c0:a5:62:f1:62:45:fe:9d:31:6a:1b:75:61:8f:83:b1:
         07:c3:f0:6e:96:cd:f5:a3:69:38:67:bb:1f:52:67:b7:2e:65:
         d2:db:26:b3:eb:b8:40:0b:48:23:aa:c3:41:0b:af:4e:ba:93:
         f3:5b:67:1c:b4:bc:45:be:82:cb:49:74:8a:64:e5:64:e7:42:
         d1:56:df:78:e1:3c:be:d5:b3:99:22:c7:38:e6:90:b0:9e:8b:
         ef:ef:5c:c6:96:36:97:a7:1b:95:e3:36:2b:11:e7:47:f5:64:
         46:c0:4b:4f:84:85:80:b4:48:9a:f8:a7:86:de:79:7d:4d:fb:
         6b:ba:84:38:5a:63:78:26:4f:81:07:51:de:59:48:9b:d2:15:
         3a:5d:b7:fd:11:2e:64:68:76:dd:fc:a1:4e:59:d6:af:85:f1:
         4d:b0:f5:de:43:7d:9d:cc:ff:b9:6b:9d:58:9c:80:ca:28:2d:
         75:fa:3b:e0:98:96:28:ef:cd:b7:cf:fa:48:43:e0:26:35:22:
         17:a5:db:03:31:92:e2:15:ec:ce:f1:ba:69:7b:51:b0:14:a4:
         55:c4:11:54:bc:bf:a9:c1:fe:ac:33:a0:78:1d:03:69:5c:94:
         ea:b6:0c:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx
MkYyMEI4NjIwHhcNMjYwNTEzMDAxMzM3WhcNMjYwNTIwMDAxMzM3WjAYMRYwFAYD
VQQDEw02YTAzYzIzMS03MjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1fGx5HQrVec9v1TncCmuUCc0OG7CczS49/vpnOv7bc+GE0XbAlGz12emWNXQ
DgB7ANu8B/LOM7oXapLnvbAZZ9XwOcG7BA4HfRHYfdSaL4/tqohPtyWlKcWfoquu
3D4YHf063JtrSgVdn4GDE5J8V8cVEyu+l0anRX14r0L51PyzThYUHmVfjPHHnl8g
mkd+LKhANisf/Je6D5qXm5K1R5pvP645kUVsuKj3lNafe38Oxvn7zshkYJ3jc1Qp
fs760mkURadd+iGqV+xyZvb+a+EosTHrdcBLFhPw/NY/BmaC77cReDq0jvNIOMp+
6HZdmuIcudv8SvyqOl5n89WsmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNEe48a
mbQsOIHeA1vN2ZiqWS7zMB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG
QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1
R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L
RW5aWEtENjd3V3dTOGd1R0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAB8PLgmGtpf7feAmNwqbWYT4I/vApWLxYkX+nTFqG3Vhj4OxB8PwbpbN9aNp
OGe7H1Jnty5l0tsms+u4QAtII6rDQQuvTrqT81tnHLS8Rb6Cy0l0imTlZOdC0Vbf
eOE8vtWzmSLHOOaQsJ6L7+9cxpY2l6cbleM2KxHnR/VkRsBLT4SFgLRImvinht55
fU37a7qEOFpjeCZPgQdR3llIm9IVOl23/REuZGh23fyhTlnWr4XxTbD13kN9ncz/
uWudWJyAyigtdfo74JiWKO/Nt8/6SEPgJjUiF6XbAzGS4hXszvG6aXtRsBSkVcQR
VLy/qcH+rDOgeB0DaVyU6rYMNQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:57:41 2026 by rpki-client