Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File:                     qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier:          7b/RQy6r3XB0+bueu8rS5JtTcn/oqzqHXBIM+ZHC0EE=
Subject key identifier:   4B:3F:A7:72:0C:98:E9:60:48:54:B2:42:ED:01:79:CD:17:ED:6A:D7
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer:       /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number:          01A1
Signing time:             Mon 11 May 2026 04:18:37 +0000
Manifest this update:     Mon 11 May 2026 04:18:37 +0000
Manifest next update:     Mon 18 May 2026 04:18:37 +0000
Files and hashes:         1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: 7wj9amk0uwx1BZgLHKPblj+okJpgytKsthqHeOdfpmY=)
                          2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: PAkdiPUOa/hZ21DhoJPT77EObUJ8xzL2z4kBUhn+7Zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
        Validity
            Not Before: May 11 04:18:37 2026 GMT
            Not After : May 18 04:18:37 2026 GMT
        Subject: CN=6a01589d-ddb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:9d:e3:ed:69:e7:43:ed:ba:04:9a:38:3e:
                    e3:38:48:61:03:63:d8:78:0e:67:51:73:82:3f:14:
                    ac:57:e2:34:f1:31:34:91:7a:2e:78:08:a1:e6:27:
                    8d:0c:82:c0:09:b6:2f:07:5f:42:80:24:7a:64:5c:
                    9e:94:52:cb:45:4e:2f:ac:d2:36:d2:94:3e:a4:86:
                    98:cc:b2:8b:a7:e4:5f:49:14:56:33:4a:3f:2d:ec:
                    3a:94:3a:38:94:1d:85:7f:e8:1b:bf:bd:b5:07:3a:
                    14:24:d6:68:7a:34:32:23:37:0d:77:ac:72:ab:5d:
                    b4:ea:f2:c1:fd:72:f4:13:09:5b:32:58:79:84:3f:
                    c7:4b:46:1a:79:5e:a2:7e:51:b5:56:98:b5:9c:65:
                    7e:6a:85:41:4c:21:64:61:f4:8d:77:41:63:2a:63:
                    21:c1:54:e5:80:92:5a:fa:38:fc:c7:d5:d9:53:78:
                    63:54:d6:a1:82:11:a8:36:75:7d:cc:09:43:d3:8d:
                    29:6d:e0:91:31:ed:c4:c1:59:eb:f4:66:98:b3:c9:
                    51:be:23:4a:bd:86:9a:45:23:8f:ee:ec:5a:c0:c0:
                    32:f3:2e:d5:37:d6:8d:06:39:16:a0:3b:79:0f:d5:
                    7e:46:71:af:52:a7:a0:28:f3:af:34:19:57:b3:dd:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:A7:72:0C:98:E9:60:48:54:B2:42:ED:01:79:CD:17:ED:6A:D7
            X509v3 Authority Key Identifier:
                keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ca:37:3c:f1:e0:36:cb:fd:a3:42:d3:ea:d3:e6:46:4a:77:
         ff:0d:0f:1b:76:b0:86:0e:d1:0e:51:ba:58:37:1b:7d:36:3c:
         cb:09:28:38:20:6b:fb:19:a4:a0:c5:e0:a7:e5:cb:4d:4f:0f:
         02:aa:ef:71:2a:5f:44:20:8e:0f:a4:68:8a:39:c8:27:28:3a:
         40:66:90:1a:da:44:77:a3:8d:64:77:71:75:51:f2:54:1a:de:
         68:cc:50:16:2d:ff:ea:66:7a:34:a3:17:86:a7:33:25:fc:77:
         4a:be:86:8f:d5:7d:63:71:1a:ac:f6:88:8c:fa:2d:7c:90:ba:
         67:7d:97:7f:c5:4d:8b:c7:0b:8b:fb:85:7f:a1:e4:7c:f9:e6:
         23:5d:b9:a0:e0:ec:48:cb:f7:6b:83:0e:54:50:ed:08:16:9a:
         02:ed:e1:4b:60:52:0e:1e:99:1e:b4:e9:5a:02:77:f8:40:5b:
         58:e0:5d:77:a3:8a:a6:cd:ba:99:bc:85:de:f2:b9:de:a6:2b:
         69:6e:f5:94:86:1c:da:c1:a3:c6:4a:0a:47:33:ac:0b:ce:e0:
         20:ea:e1:46:98:17:42:47:fa:d3:38:ff:de:2d:bc:82:60:ae:
         d3:1b:92:53:1d:ba:87:1e:84:73:48:2d:19:49:c6:06:09:95:
         3a:52:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:22 2026 by rpki-client