Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File:                     QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier:          4vLSYHBuQ3uxA0EpQSSRZNbSaiRGJ95YES+xoP/eB7I=
Subject key identifier:   7B:64:3E:7E:E7:AC:FF:92:5B:9B:D5:59:EC:C0:68:B3:DF:0E:57:FF
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer:       /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial:       19B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number:          1975
Signing time:             Tue 12 May 2026 16:26:20 +0000
Manifest this update:     Tue 12 May 2026 16:26:20 +0000
Manifest next update:     Tue 19 May 2026 16:26:20 +0000
Files and hashes:         1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: 05DuTA4ksP7q4O5uNq0ONuWVw3QYr1SM39DLCMhxb7o=)
                          2: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: mnfTgIuPlsM7FOE7wG43XOpMDWMOBSC6RbV4JXFx0HM=)
                          3: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=)
                          4: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
                          rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6584 (0x19b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
        Validity
            Not Before: May 12 16:26:20 2026 GMT
            Not After : May 19 16:26:20 2026 GMT
        Subject: CN=6a0354ac-5cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:98:05:e4:8f:d4:14:ae:e2:f3:ff:dc:d5:
                    3a:ff:1d:0f:11:ca:82:c1:ed:af:23:94:a7:e7:1f:
                    47:07:9e:b7:b1:db:62:a1:41:ba:05:33:3b:26:71:
                    4b:b2:4e:7e:2b:ec:41:3c:70:51:04:42:cf:16:26:
                    53:11:81:4f:e3:64:2b:a8:46:7b:f5:e9:de:c2:49:
                    e1:1c:e0:8b:71:0e:bc:de:7c:ee:8c:2c:91:d3:45:
                    c2:53:44:70:96:aa:08:62:fe:6c:8f:66:6d:5c:07:
                    5c:1e:21:5e:3e:f3:a3:07:b7:92:b3:5f:5a:49:37:
                    33:6c:0e:70:fd:1f:fd:09:c3:11:ef:72:01:23:d1:
                    d4:a5:62:25:a0:e2:f4:60:27:28:ed:ce:1a:fa:56:
                    f5:a7:4c:22:55:a8:10:61:1e:30:c3:ff:58:89:be:
                    99:23:b4:e0:25:ba:4b:eb:d6:9a:fa:72:03:c0:1d:
                    43:1c:29:d8:44:20:e8:44:8d:c0:91:f2:79:6c:25:
                    ec:4a:c0:b1:78:b2:1d:4a:9e:7c:e1:51:89:18:0c:
                    ce:9e:f9:72:71:e4:5a:5c:0d:6e:f5:50:62:51:f9:
                    38:83:7d:a7:14:08:a7:6b:61:5d:58:06:64:3e:62:
                    16:37:fb:13:a7:c3:ce:75:dd:cb:08:8a:80:3d:53:
                    ed:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:64:3E:7E:E7:AC:FF:92:5B:9B:D5:59:EC:C0:68:B3:DF:0E:57:FF
            X509v3 Authority Key Identifier:
                keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:50:fa:02:f6:4f:1a:61:f0:27:03:da:b8:11:72:a1:62:30:
         8a:b7:04:67:48:ee:f7:a2:af:ce:34:69:0c:21:07:b9:a3:1a:
         2d:28:7e:06:48:b2:96:2c:9a:25:30:d8:54:39:73:5a:15:95:
         05:e8:76:35:30:72:a4:84:6a:d1:f0:20:45:00:e5:ba:2c:30:
         63:8b:b3:fc:9b:6a:d0:b2:a6:ea:b9:d2:0f:c0:ec:41:f5:31:
         91:2c:f9:5e:a7:de:b6:55:5d:ca:ab:d6:ad:bd:6f:1c:d3:8b:
         0e:75:50:bf:8d:78:ac:94:24:d3:4f:9c:d3:87:70:18:1d:95:
         01:93:c8:53:0b:34:a4:2f:7b:db:8b:9f:3a:de:68:8b:d0:e2:
         9e:5f:28:d4:da:55:30:0c:9c:92:55:87:bb:75:1a:31:ca:79:
         e7:b8:6c:24:40:e3:89:87:52:bc:20:1d:4a:a6:22:61:a5:2a:
         4b:fa:ab:7f:0c:f4:34:01:5e:0c:bd:fe:2e:a9:84:e9:52:1c:
         92:6a:e3:6c:11:d9:a2:df:e7:e9:b8:9c:a0:5c:03:f6:18:05:
         32:69:b9:cd:af:21:07:f9:00:69:1f:9a:16:ea:76:72:0e:5a:
         00:de:b4:33:97:20:86:09:5f:c2:8b:64:d9:f9:96:df:5a:f2:
         da:b3:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:16 2026 by rpki-client