Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
File:                     QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json)
Hash identifier:          I9AS6N9+zRbSGID7pdeA8DtWGX+OQunH0gtfKXpYz0c=
Subject key identifier:   05:94:DB:84:F8:5D:96:F2:6C:15:46:24:77:CF:C1:97:4C:41:3B:A8
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Certificate issuer:       /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial:       04FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
Manifest number:          04F8
Signing time:             Tue 12 May 2026 23:49:13 +0000
Manifest this update:     Tue 12 May 2026 23:49:12 +0000
Manifest next update:     Tue 19 May 2026 23:49:12 +0000
Files and hashes:         1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: 3xts48appZb9v+oFE+YmLb0CalOt8eBia6gKisyr8YA=)
                          2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: F+I43DaEg4RPjKbDgo7LbT/oq9DuBWqE4SqCTrHW1b0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
                          rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
        Validity
            Not Before: May 12 23:49:12 2026 GMT
            Not After : May 19 23:49:12 2026 GMT
        Subject: CN=6a03bc79-2252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:db:05:55:54:17:de:82:0b:24:aa:2f:32:
                    77:f4:8e:b8:67:e5:c0:65:d9:c0:19:8f:bc:5d:da:
                    17:48:08:05:61:6e:9b:ee:a3:6d:5c:30:ad:44:a7:
                    c9:51:3b:e3:3b:7d:ba:af:36:0b:65:62:48:3e:80:
                    ba:f4:70:c1:71:a1:86:55:18:c1:ba:11:ee:d1:8d:
                    06:2d:a9:10:95:89:c4:fe:09:ae:0c:db:8f:08:30:
                    40:81:3a:0d:c5:02:8f:6c:c8:e4:dc:26:0e:21:89:
                    a7:4a:f0:f6:83:dd:df:5f:86:cd:ca:bb:a2:1d:86:
                    3e:dd:4f:cb:77:ee:2d:43:82:2e:97:4f:cd:db:4c:
                    97:8d:24:2c:86:38:31:27:e6:4e:bf:cc:24:8d:5f:
                    9b:40:3b:b8:66:9f:62:99:79:b7:23:e7:95:a0:82:
                    56:62:ac:b6:10:dc:70:d3:8e:ab:2d:d9:d2:cb:29:
                    cd:26:d0:95:91:10:ca:5c:7f:76:49:80:2a:90:fe:
                    f9:81:61:02:0b:06:4e:13:b8:c4:5e:2c:41:29:ad:
                    1f:2a:54:1b:ed:bd:15:32:dc:81:24:6c:33:5d:e0:
                    59:f9:b1:6c:e6:0f:82:88:63:3d:b6:db:5b:b3:2c:
                    69:8b:bd:a7:77:09:3b:85:9b:0d:f7:1c:da:d7:3b:
                    92:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:94:DB:84:F8:5D:96:F2:6C:15:46:24:77:CF:C1:97:4C:41:3B:A8
            X509v3 Authority Key Identifier:
                keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:30:90:88:66:a5:70:bb:9b:32:1e:61:69:d2:98:e9:ac:
         a1:12:26:c9:a5:39:cf:06:3e:d7:13:3c:bf:a7:ca:1c:76:0b:
         4b:60:e9:ef:9b:7e:05:4b:38:17:62:c8:b5:fd:79:09:3f:a1:
         f0:b2:83:67:93:a3:a1:2c:6f:54:e2:eb:d9:e4:6b:45:c1:7b:
         ea:99:8c:6e:7c:45:31:3c:67:de:0f:b5:a4:3a:ae:c3:d5:e6:
         1f:cd:24:32:7e:bb:80:1e:0f:ff:32:8e:62:f4:66:6e:e2:a0:
         aa:b6:3a:11:fc:ed:54:63:b7:94:9d:fb:d3:6c:9b:df:83:17:
         0b:77:74:41:ab:b3:41:a6:49:35:7a:90:72:52:18:4e:2c:ec:
         c2:4c:51:ae:cc:69:b6:2f:52:3d:d8:17:0e:90:9d:fb:a9:53:
         b6:3a:71:1a:6e:ab:01:d9:45:77:99:5f:3b:6a:6c:97:02:65:
         77:50:f0:da:f7:11:7b:30:ab:5b:54:32:95:cc:24:6b:30:d9:
         58:68:13:b5:56:d8:da:29:79:ba:7b:eb:82:77:86:c9:e5:bc:
         b5:c5:05:c5:fd:5a:a6:11:79:f9:5d:da:ab:a7:19:d7:87:cf:
         d4:cd:54:64:4a:28:b5:a2:19:f6:36:9f:24:66:6d:06:e9:6b:
         71:87:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:18 2026 by rpki-client