Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
File:                     QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json)
Hash identifier:          wBkxC0pe0DxUDjlnIeb3ZQq7nNVFfhv3K2lxRTcJrfc=
Subject key identifier:   DD:8A:78:1B:73:7D:CE:F7:88:5E:E0:89:84:4E:10:19:8D:02:75:E3
Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
Certificate issuer:       /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Certificate serial:       0B10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
Manifest number:          0B06
Signing time:             Tue 12 May 2026 19:23:47 +0000
Manifest this update:     Tue 12 May 2026 19:23:47 +0000
Manifest next update:     Tue 19 May 2026 19:23:47 +0000
Files and hashes:         1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: dAUckh4CGvYXU/o+hKXGww8Y+Mm63Rpa5HHCkz6rRVY=)
                          2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: r0lCb8PmrHuRVFml8CXtx2AwxypyCR8m21BT5Lcfkrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
                          rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2832 (0xb10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
        Validity
            Not Before: May 12 19:23:47 2026 GMT
            Not After : May 19 19:23:47 2026 GMT
        Subject: CN=6a037e43-5802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:15:4b:3b:32:64:ab:09:60:a3:f8:a7:d2:
                    48:d0:d2:6f:a6:6e:bb:64:0f:79:46:ef:f3:26:33:
                    b8:f1:ad:8c:c3:15:04:5c:69:00:65:3b:c4:bb:fd:
                    d4:ac:1d:8a:55:e7:81:29:52:d1:c8:c0:d8:20:a3:
                    38:02:e4:cb:a9:86:ba:b9:25:5d:07:56:92:14:a6:
                    fa:07:b0:3f:b8:bc:c4:c7:2f:1c:4e:14:ab:03:17:
                    25:fc:19:a8:33:60:bb:8f:8d:bb:f5:42:f1:4f:a8:
                    1d:4d:14:4b:72:75:7e:f8:a1:00:9c:84:97:b4:bd:
                    37:20:e0:13:31:8a:12:e0:9b:56:82:e9:5a:8e:58:
                    d3:f8:cd:15:35:31:fa:8b:3d:10:fa:84:8d:09:39:
                    90:32:f9:7f:ea:bf:8c:6b:f3:7c:93:0a:02:f2:55:
                    e3:03:fa:06:64:73:b1:23:e5:fd:ea:f2:d8:0f:81:
                    29:6a:3e:fa:eb:0e:14:50:a3:d5:5e:24:84:bf:2e:
                    1e:38:c6:59:57:cc:1e:44:03:a7:31:e5:12:51:c3:
                    0f:8c:ad:1d:c8:1b:95:0c:c4:a9:01:b2:c8:84:b1:
                    4c:24:ec:b6:c6:19:39:90:8c:45:a1:6c:dc:92:8b:
                    35:e9:31:65:e7:15:0f:63:b3:b7:e9:cd:01:50:2d:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8A:78:1B:73:7D:CE:F7:88:5E:E0:89:84:4E:10:19:8D:02:75:E3
            X509v3 Authority Key Identifier:
                keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:02:3f:d0:6d:a1:46:75:83:66:b0:d3:bc:ca:60:6e:02:78:
         7f:a1:a0:2b:86:81:d5:19:7f:18:d3:a3:86:1f:83:5e:4b:85:
         e4:e3:f8:a0:af:c7:20:28:4e:e7:f8:13:48:7f:fe:a4:b7:a1:
         40:06:cf:31:53:c7:32:85:d6:8f:52:f9:60:ec:02:05:17:b1:
         42:a7:9f:cf:f5:9c:1a:86:8a:a7:43:6e:bb:87:58:1c:02:15:
         a0:bf:78:3c:89:2e:32:22:65:e4:70:18:5c:fc:dd:f6:e6:7f:
         d9:36:08:e1:24:36:b5:2d:4c:f3:34:07:6a:cb:60:08:ea:8c:
         80:15:04:1a:c9:38:45:7d:55:8d:37:c2:7d:52:f1:09:38:db:
         7d:d4:0f:bc:4c:aa:ea:61:7b:5e:55:a3:be:e0:6b:c4:30:9f:
         98:a7:28:ff:7f:6f:33:e2:17:eb:1c:50:a3:de:f8:cf:35:7e:
         f0:6a:00:b6:7d:49:94:46:01:a6:58:93:26:a8:da:1a:a7:b8:
         93:e2:a8:b5:90:e1:9c:0b:3a:e0:76:96:78:b0:3f:ef:26:02:
         6f:b7:8b:dc:29:36:dc:17:e9:7e:57:7c:c2:d9:95:d3:3a:e7:
         61:36:3f:1e:86:b0:2d:d7:66:42:d0:b5:d7:eb:4c:21:21:56:
         a3:0a:ca:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUNEOTgxMTAvBgNVBAUTKDQxQzY1QzAwRjBBNkIwN0QzQzBGNkIxMjkwNTY0RkJG
ODM4MkRBNzMwHhcNMjYwNTEyMTkyMzQ3WhcNMjYwNTE5MTkyMzQ3WjAYMRYwFAYD
VQQDEw02YTAzN2U0My01ODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkvEVSzsyZKsJYKP4p9JI0NJvpm67ZA95Ru/zJjO48a2MwxUEXGkAZTvEu/3U
rB2KVeeBKVLRyMDYIKM4AuTLqYa6uSVdB1aSFKb6B7A/uLzExy8cThSrAxcl/Bmo
M2C7j4279ULxT6gdTRRLcnV++KEAnISXtL03IOATMYoS4JtWgulajljT+M0VNTH6
iz0Q+oSNCTmQMvl/6r+Ma/N8kwoC8lXjA/oGZHOxI+X96vLYD4Epaj766w4UUKPV
XiSEvy4eOMZZV8weRAOnMeUSUcMPjK0dyBuVDMSpAbLIhLFMJOy2xhk5kIxFoWzc
kos16TFl5xUPY7O36c0BUC2MLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2KeBtz
fc73iF7giYROEBmNAnXjMB8GA1UdIwQYMBaAFEHGXADwprB9PA9rEpBWT7+Dgtpz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0Q5OC83ODAyMDQ4QTY2
QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNIMDhEMnNTa0ZaUHY0T0My
bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FjWmNBUENtc0gwOEQyc1NrRlpQdjRPQzJuTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Q0Q5OC83ODAyMDQ4QTY2QTQxMUVBOEZDQjJCNkZDNEY5QUUwMi9RY1pjQVBDbXNI
MDhEMnNTa0ZaUHY0T0Mybk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARQI/0G2hRnWDZrDTvMpgbgJ4f6GgK4aB1Rl/GNOjhh+DXkuF5OP4oK/HIChO
5/gTSH/+pLehQAbPMVPHMoXWj1L5YOwCBRexQqefz/WcGoaKp0Nuu4dYHAIVoL94
PIkuMiJl5HAYXPzd9uZ/2TYI4SQ2tS1M8zQHastgCOqMgBUEGsk4RX1VjTfCfVLx
CTjbfdQPvEyq6mF7XlWjvuBrxDCfmKco/39vM+IX6xxQo974zzV+8GoAtn1JlEYB
pliTJqjaGqe4k+KotZDhnAs64HaWeLA/7yYCb7eL3Ck23Bfpfld8wtmV0zrnYTY/
HoawLddmQtC11+tMISFWowrKYg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:02:00 2026 by rpki-client