Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
File:                     qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json)
Hash identifier:          AupgQA3+FIpZEpsgrXCj2AmUL/rwxnFbaW5LFXN5jng=
Subject key identifier:   27:3E:A2:B1:86:20:87:61:45:8F:63:71:8B:95:1C:F2:BB:13:3C:AC
Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
Certificate issuer:       /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
Certificate serial:       0296
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
Manifest number:          028E
Signing time:             Wed 13 May 2026 01:51:10 +0000
Manifest this update:     Wed 13 May 2026 01:51:09 +0000
Manifest next update:     Wed 20 May 2026 01:51:09 +0000
Files and hashes:         1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: DJjLWQjipLgPkEsML94WpfCs+COtJbUEMmkROH21sww=)
                          2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: CcNczHQOW8yB5Q317lvbnzk6vw5R1G1tvlVbiwaOecw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl
                          rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
        Validity
            Not Before: May 13 01:51:09 2026 GMT
            Not After : May 20 01:51:09 2026 GMT
        Subject: CN=6a03d90e-a7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:5b:9b:e5:b5:28:bc:f7:a4:56:b3:35:f4:
                    c7:7c:03:ac:ae:1d:d0:95:97:36:12:d5:6b:88:51:
                    fa:d5:79:f9:35:3b:2f:01:3d:9e:af:ce:c4:de:20:
                    8c:74:cc:2f:41:f3:9e:9c:42:dc:f4:2c:e3:c3:be:
                    51:5b:2d:19:0e:0a:9f:46:ab:ce:ea:f9:f2:4d:9c:
                    e4:4c:7f:a3:73:dc:82:2a:09:48:a4:23:e6:78:1e:
                    ab:7e:04:a1:ce:04:61:6f:32:0d:0c:98:c8:d4:91:
                    c2:60:59:a8:44:b9:af:dd:e2:03:a9:4c:03:e1:58:
                    5b:9b:55:82:41:6b:5a:41:22:da:f4:16:b9:59:77:
                    29:8a:41:26:93:38:23:67:f1:02:32:db:a5:ae:27:
                    c4:a6:d9:cc:d4:b5:86:51:6a:7d:bf:e8:bd:da:78:
                    44:1d:25:85:77:72:1d:d6:81:ac:59:23:e4:93:d6:
                    7e:94:49:ae:26:86:12:3b:04:96:b9:1a:67:8a:9b:
                    00:aa:d9:6d:8e:60:4b:f2:bd:8b:a6:0e:e4:6f:b1:
                    63:82:e1:5f:9e:f2:69:dd:5a:39:6e:c9:82:d6:e4:
                    1f:6d:bd:56:90:40:69:38:96:33:2f:c6:44:04:78:
                    6c:a8:9e:25:02:ee:a2:78:1b:f9:b3:d4:ac:97:16:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3E:A2:B1:86:20:87:61:45:8F:63:71:8B:95:1C:F2:BB:13:3C:AC
            X509v3 Authority Key Identifier:
                keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d7:16:da:f3:b7:df:7a:d9:cd:77:de:65:d4:aa:35:8b:7e:
         d5:65:90:0e:a4:fb:ec:2e:9e:12:55:0f:3d:ba:45:e7:d0:c1:
         0d:fd:cc:28:4f:1b:a8:e5:ea:59:bc:b6:e1:d7:af:d7:31:3e:
         d5:5b:af:e8:33:1f:ce:14:a7:1b:b6:3a:e8:4c:50:03:30:38:
         92:9d:5b:e4:74:05:77:24:6b:b2:3f:71:ad:11:cf:44:a1:85:
         04:bc:48:b9:bf:34:12:7b:33:de:49:d5:b2:ad:84:3b:d4:2e:
         a3:ef:a7:34:75:e4:43:19:d8:85:95:30:c4:61:5e:76:ae:e6:
         a9:e1:1a:76:9f:52:ab:fe:21:3a:c3:a4:30:02:66:7d:e5:6d:
         82:a9:bc:6e:ae:30:84:08:b6:c6:f7:dc:4e:f4:8d:ac:d5:32:
         b7:41:b6:71:e2:f0:b6:7c:2e:3c:cd:a0:22:e5:82:f5:d5:69:
         31:d7:59:dd:32:ae:c8:28:c0:da:55:25:c2:da:d2:cc:84:fc:
         be:44:4c:5e:b0:ce:73:73:df:c0:bd:b8:b7:bb:7c:c5:20:99:
         d3:e8:9a:54:f2:ab:a3:57:11:82:2f:a5:a0:89:65:1d:63:0d:
         f8:b9:2c:87:c9:9f:d4:4c:df:3c:ec:31:11:de:10:28:8f:50:
         5e:80:13:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0
NUVFOTYzQjUwHhcNMjYwNTEzMDE1MTA5WhcNMjYwNTIwMDE1MTA5WjAYMRYwFAYD
VQQDEw02YTAzZDkwZS1hN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjA5bm+W1KLz3pFazNfTHfAOsrh3QlZc2EtVriFH61Xn5NTsvAT2er87E3iCM
dMwvQfOenELc9Czjw75RWy0ZDgqfRqvO6vnyTZzkTH+jc9yCKglIpCPmeB6rfgSh
zgRhbzINDJjI1JHCYFmoRLmv3eIDqUwD4Vhbm1WCQWtaQSLa9Ba5WXcpikEmkzgj
Z/ECMtulrifEptnM1LWGUWp9v+i92nhEHSWFd3Id1oGsWSPkk9Z+lEmuJoYSOwSW
uRpnipsAqtltjmBL8r2Lpg7kb7FjguFfnvJp3Vo5bsmC1uQfbb1WkEBpOJYzL8ZE
BHhsqJ4lAu6ieBv5s9SslxZLtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCc+orGG
IIdhRY9jcYuVHPK7EzysMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF
MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh
Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnNcW2vO333rZzXfeZdSqNYt+1WWQDqT77C6eElUPPbpF59DBDf3MKE8bqOXq
Wby24dev1zE+1Vuv6DMfzhSnG7Y66ExQAzA4kp1b5HQFdyRrsj9xrRHPRKGFBLxI
ub80Ensz3knVsq2EO9Quo++nNHXkQxnYhZUwxGFedq7mqeEadp9Sq/4hOsOkMAJm
feVtgqm8bq4whAi2xvfcTvSNrNUyt0G2ceLwtnwuPM2gIuWC9dVpMddZ3TKuyCjA
2lUlwtrSzIT8vkRMXrDOc3PfwL24t7t8xSCZ0+iaVPKro1cRgi+loIllHWMN+Lks
h8mf1EzfPOwxEd4QKI9QXoAT4Q==
-----END CERTIFICATE-----
Generated at Wed May 13 04:18:06 2026 by rpki-client