Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
File:                     QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json)
Hash identifier:          sNaCzexGA1+StJ2d9Tujhrw93V5fI1ZCxX1pufCwMvY=
Subject key identifier:   97:6E:B6:E3:82:B2:09:32:7F:D7:05:C5:A7:E7:2A:B3:FC:1B:3E:50
Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
Certificate issuer:       /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Certificate serial:       04F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
Manifest number:          04F0
Signing time:             Tue 12 May 2026 23:50:16 +0000
Manifest this update:     Tue 12 May 2026 23:50:15 +0000
Manifest next update:     Tue 19 May 2026 23:50:15 +0000
Files and hashes:         1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: gJcYrOxOcvweiTGM65c6bHKmm8N1raP4BmyAhGRWVOM=)
                          2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: 8WBT2mYpXItDKfO9g6OLEzS6VivEAPbuFf/SLXRWDPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
                          rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271 (0x4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
        Validity
            Not Before: May 12 23:50:15 2026 GMT
            Not After : May 19 23:50:15 2026 GMT
        Subject: CN=6a03bcb8-a0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:c4:8d:a5:ff:83:45:ea:d2:56:1e:89:5c:
                    5f:69:d0:80:6f:ae:95:5c:66:38:79:bc:e0:6d:b5:
                    61:a8:66:71:90:87:75:45:4b:43:55:35:47:de:b9:
                    94:da:90:55:b8:df:ae:7c:26:1d:b3:81:be:4a:fd:
                    f9:ea:0f:db:52:ec:25:18:3c:8d:3b:ff:09:bb:e9:
                    f1:44:74:9e:4a:14:7d:3b:e0:69:36:bb:45:87:73:
                    72:73:05:99:da:0a:e8:58:9c:e5:81:88:df:ee:e7:
                    14:cb:8f:03:b7:c0:dd:c0:13:c0:9d:27:14:5e:65:
                    ab:be:b7:11:13:5f:a8:1a:2f:4e:ba:b9:b1:c6:7b:
                    a2:a1:e7:93:e1:21:3c:7f:4c:3f:95:a1:5b:51:39:
                    65:68:2b:63:70:0f:bf:49:d9:0a:00:ae:32:d6:8b:
                    9a:ad:d7:a0:4e:98:97:1d:ae:2f:7c:db:e7:b0:d7:
                    63:3f:69:82:61:f2:d7:31:eb:90:d5:d8:b0:40:94:
                    8f:69:46:ba:0a:34:f7:a6:18:0b:5f:52:05:0f:4d:
                    af:dc:22:b3:20:48:c3:f9:3f:08:75:0a:cc:c7:de:
                    0d:d6:54:a0:95:d1:40:ca:49:6d:a1:73:d7:64:c0:
                    01:34:4c:bd:04:22:1e:58:e3:a0:fe:42:a7:4f:4b:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:B6:E3:82:B2:09:32:7F:D7:05:C5:A7:E7:2A:B3:FC:1B:3E:50
            X509v3 Authority Key Identifier:
                keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:98:ea:50:75:6f:0d:5b:a8:e8:23:d1:04:58:43:0d:73:2c:
         55:cd:58:df:48:4e:4a:7d:1e:bf:f1:51:36:a6:c9:93:d8:5a:
         2d:39:d8:50:b1:6c:aa:e5:5c:b0:05:84:88:14:b8:90:28:d4:
         d9:2c:50:aa:56:0e:5e:b5:e9:00:4d:b3:24:11:44:36:cd:95:
         a2:be:a3:30:d5:da:bb:2a:c9:1b:40:e8:88:04:f6:cf:25:86:
         34:d9:ab:c7:4c:40:31:66:94:05:c4:64:1b:b2:c7:33:fd:09:
         30:44:ee:2c:2d:11:05:aa:3b:20:a8:ae:85:0c:16:8f:50:cc:
         a8:5f:35:7c:a2:84:b4:24:ed:b1:ca:7c:31:10:77:34:04:f3:
         36:3f:0d:8b:42:89:85:08:56:10:6e:cf:a6:11:07:6d:c2:45:
         4a:f8:f5:0d:19:57:09:62:cc:a1:5d:d2:61:72:1e:e7:28:4e:
         49:a3:46:9d:9e:4c:49:0e:e6:1e:b7:a4:ab:60:46:c7:63:ef:
         47:17:3d:ae:5e:74:63:09:92:d0:0f:13:dd:1b:3c:33:6e:ea:
         33:f5:e9:73:c7:c1:b7:51:95:68:78:b3:8c:62:47:1f:31:b0:
         03:3c:c1:cb:2d:7b:4b:28:fe:f0:d7:a2:f9:ef:b3:cb:0e:8f:
         f5:10:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:51 2026 by rpki-client