Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
File:                     QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft (raw, json)
Hash identifier:          BsQomzV2lQUr8OKAUksC5/cNau2WvlycAs6/+NpJ1k0=
Subject key identifier:   50:19:F1:C0:22:9F:81:F4:B3:3B:BB:4B:BD:08:6B:54:F2:A3:FC:A7
Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD
Certificate issuer:       /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
Certificate serial:       03B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
Manifest number:          03AD
Signing time:             Wed 13 May 2026 00:49:36 +0000
Manifest this update:     Wed 13 May 2026 00:49:36 +0000
Manifest next update:     Wed 20 May 2026 00:49:36 +0000
Files and hashes:         1: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl (hash: Zif7lIZFAB/AaSqax8pnSchHcWGbbmDVxhzTYAkukf8=)
                          2: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (hash: /VYSBqRbhRZL//G1w9ShC2Js/tBJ1zXCex0aZezen6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC, serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
        Validity
            Not Before: May 13 00:49:36 2026 GMT
            Not After : May 20 00:49:36 2026 GMT
        Subject: CN=6a03caa0-0681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:60:4b:96:8d:da:db:99:23:53:ed:46:18:
                    64:35:97:46:ed:93:36:fe:c2:36:8e:43:7f:1f:70:
                    46:42:b9:17:9a:05:5a:7d:b0:56:3b:5b:da:2a:6c:
                    ef:a4:ba:73:f6:c0:5b:c2:91:1d:dc:7b:e0:cc:56:
                    f9:5f:1f:05:69:f5:47:d6:09:18:f7:12:97:32:b7:
                    97:49:5e:7d:b8:51:34:53:bd:7b:87:92:e3:be:9a:
                    57:49:8b:ce:b5:e2:32:5c:0c:6f:4f:e5:27:35:af:
                    1b:2f:11:ec:e2:1b:2d:cf:33:69:ec:8e:3d:6f:68:
                    6f:78:77:f8:cf:08:64:34:8f:43:e7:75:dd:ab:9f:
                    ed:87:34:10:d3:15:2a:66:a3:d4:f7:94:1a:3c:09:
                    8d:91:20:9d:30:be:f0:d0:4a:f3:ea:5b:cd:12:8c:
                    dd:80:22:89:02:12:70:0a:f3:d9:f7:c8:3a:d6:bf:
                    b5:df:52:f0:43:42:88:16:cc:55:73:a9:3c:21:ec:
                    29:cd:3f:50:46:21:d5:d6:15:81:a3:49:e7:c8:74:
                    ca:91:fb:75:63:21:76:83:a8:91:32:97:e4:50:43:
                    ee:79:2d:77:bb:88:69:00:28:4a:af:4e:b0:00:c9:
                    8e:f3:0e:92:aa:ac:61:e4:62:ff:11:b2:81:4c:7c:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:19:F1:C0:22:9F:81:F4:B3:3B:BB:4B:BD:08:6B:54:F2:A3:FC:A7
            X509v3 Authority Key Identifier:
                keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:36:07:87:51:f7:38:36:df:b6:39:f9:41:1e:1c:66:ff:
         fb:36:75:e5:71:38:b2:aa:8e:62:cb:ba:bd:47:f4:82:48:76:
         66:40:07:9d:d8:e6:72:db:6b:39:c9:68:c5:7d:76:61:b5:c0:
         97:bf:dd:9a:28:43:6b:52:5c:ed:d9:50:11:e1:0c:50:9b:c6:
         4b:74:ab:9e:27:05:2d:e3:ab:ef:a3:fb:79:95:12:cf:41:60:
         ac:e5:7b:fd:89:3f:06:62:4b:ea:7b:cb:43:c6:99:dc:43:e1:
         df:14:76:d8:2a:55:d8:8b:6f:8d:7d:31:70:7f:f6:04:4f:81:
         df:87:a2:9f:cc:4f:ee:af:eb:7d:b6:b8:81:63:b0:bb:9d:1d:
         b9:eb:fe:c4:1c:80:9b:f0:cf:4e:bb:96:c5:fb:29:8d:68:51:
         23:d6:29:fc:83:b3:f0:e4:a2:74:b0:13:cb:f5:b4:7a:a3:78:
         85:f9:66:80:da:57:54:08:aa:91:86:25:f9:ea:90:b3:9d:63:
         37:41:ca:9c:46:e1:fd:e1:df:b4:c2:e1:8f:fd:69:de:41:e6:
         9f:66:5d:67:ad:05:7c:fd:b3:e3:39:40:0a:47:66:48:c6:26:
         75:f2:67:64:70:43:de:e2:26:3d:0b:cc:bc:85:7e:d3:80:1a:
         dd:9f:43:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkxQkMxMTAvBgNVBAUTKDQxNEZCNjE3ODg2OTEzMEY4MjZFOUUzMEMwQjc5NDA4
NEQ5NzYwREQwHhcNMjYwNTEzMDA0OTM2WhcNMjYwNTIwMDA0OTM2WjAYMRYwFAYD
VQQDEw02YTAzY2FhMC0wNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzA1gS5aN2tuZI1PtRhhkNZdG7ZM2/sI2jkN/H3BGQrkXmgVafbBWO1vaKmzv
pLpz9sBbwpEd3HvgzFb5Xx8FafVH1gkY9xKXMreXSV59uFE0U717h5LjvppXSYvO
teIyXAxvT+UnNa8bLxHs4hstzzNp7I49b2hveHf4zwhkNI9D53Xdq5/thzQQ0xUq
ZqPU95QaPAmNkSCdML7w0Erz6lvNEozdgCKJAhJwCvPZ98g61r+131LwQ0KIFsxV
c6k8IewpzT9QRiHV1hWBo0nnyHTKkft1YyF2g6iRMpfkUEPueS13u4hpAChKr06w
AMmO8w6Sqqxh5GL/EbKBTHz4FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAZ8cAi
n4H0szu7S70Ia1Tyo/ynMB8GA1UdIwQYMBaAFEFPtheIaRMPgm6eMMC3lAhNl2Dd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BNEU2NzNDQURC
RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3LUNicDR3d0xlVUNFMlhZ
TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FVLTJGNGhwRXctQ2JwNHd3TGVVQ0UyWFlOMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTFCQy9BNEU2NzNDQURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3
LUNicDR3d0xlVUNFMlhZTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHQ42B4dR9zg237Y5+UEeHGb/+zZ15XE4sqqOYsu6vUf0gkh2ZkAHndjmcttr
OcloxX12YbXAl7/dmihDa1Jc7dlQEeEMUJvGS3SrnicFLeOr76P7eZUSz0FgrOV7
/Yk/BmJL6nvLQ8aZ3EPh3xR22CpV2ItvjX0xcH/2BE+B34ein8xP7q/rfba4gWOw
u50duev+xByAm/DPTruWxfspjWhRI9Yp/IOz8OSidLATy/W0eqN4hflmgNpXVAiq
kYYl+eqQs51jN0HKnEbh/eHftMLhj/1p3kHmn2ZdZ60FfP2z4zlACkdmSMYmdfJn
ZHBD3uImPQvMvIV+04Aa3Z9D3A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:22:38 2026 by rpki-client