Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
File:                     Q03xGF63GUxktwjMLSVjSCTiTh4.mft (raw, json)
Hash identifier:          7mD3F44k2A3+30p/LbKhajjFGYCZQsJ4uVBozsZlBDU=
Subject key identifier:   FD:03:9F:B8:77:96:34:CE:FC:A6:1F:52:AC:02:2E:34:00:4E:4A:60
Authority key identifier: 43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E
Certificate issuer:       /CN=A911CC94/serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
Manifest number:          27
Signing time:             Tue 19 May 2026 08:40:38 +0000
Manifest this update:     Tue 19 May 2026 08:40:37 +0000
Manifest next update:     Tue 26 May 2026 08:40:37 +0000
Files and hashes:         1: Q03xGF63GUxktwjMLSVjSCTiTh4.crl (hash: oFRN0q09iqCJS+EoSlU4DwhNTnmyZnwy0Vdk7h17TPI=)
                          2: DB87563A1C5711F1811E0EC90A3D8C67.roa (hash: Uot0wKL2V+rres779GpUT7rmL47pZ4/zXDcozOfp2iU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl
                          rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CC94, serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E
        Validity
            Not Before: May 19 08:40:37 2026 GMT
            Not After : May 26 08:40:37 2026 GMT
        Subject: CN=6a0c2206-775f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:eb:e9:f8:1d:90:5a:32:70:a7:fd:3a:29:
                    b6:01:99:b9:3e:83:c0:80:a1:8f:ae:9f:cb:9b:29:
                    da:b4:ac:62:1d:d7:ee:f0:24:18:9b:ae:97:78:3e:
                    93:8a:a0:ea:90:90:9d:0d:37:b5:0e:e1:c7:71:67:
                    35:47:9d:64:3b:2d:35:60:64:ab:84:bb:1f:e5:5f:
                    07:34:7a:f5:fd:5b:8e:ff:eb:4f:69:3f:ea:81:93:
                    27:08:e9:99:c5:5e:09:65:43:f3:ad:19:20:2a:68:
                    af:25:21:3d:5e:68:3c:d1:1a:72:99:b4:b7:84:0a:
                    dd:f5:15:ed:d9:2a:85:a4:36:78:9d:06:0c:48:c7:
                    bc:e4:10:f2:48:e5:a6:07:ed:31:27:d6:fb:ce:1d:
                    82:a6:e0:95:1c:1f:fc:35:cf:7f:0c:47:fe:b7:5b:
                    70:ee:9f:0b:2a:5a:c6:61:3b:fd:33:04:45:bf:75:
                    b0:4a:90:6d:d0:e2:33:f3:65:29:09:bd:72:19:7c:
                    42:a2:c4:5b:86:29:ff:59:9f:ae:86:d3:1c:80:09:
                    3c:83:fe:74:59:5d:14:ed:17:e7:cf:02:2e:d4:e0:
                    bc:91:b8:a1:9d:22:d0:2b:db:df:32:63:46:91:38:
                    df:28:f7:12:2b:e0:33:d1:b9:18:a7:c3:f9:2e:88:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:03:9F:B8:77:96:34:CE:FC:A6:1F:52:AC:02:2E:34:00:4E:4A:60
            X509v3 Authority Key Identifier:
                keyid:43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6e:da:43:18:54:4e:bb:1d:24:45:f2:31:9b:ad:6b:f9:a7:
         4a:c9:f7:97:d3:d3:16:8a:c0:27:65:95:1b:5d:59:fb:47:57:
         9d:c9:a3:a7:78:f9:19:d6:7f:c3:96:5f:4b:e6:ff:38:63:7a:
         a5:3e:02:e2:00:fe:04:33:3b:de:63:e0:f5:17:ac:c6:42:1a:
         7a:5b:f2:0c:a5:14:a5:4f:d5:4d:30:29:a9:df:fa:73:cc:6e:
         ab:9b:01:89:c9:a5:88:5a:18:ab:5c:27:f7:4a:df:83:bc:ce:
         b2:f5:99:8c:2b:41:d0:a3:d3:fb:ba:b3:db:57:96:ce:2f:b0:
         8e:1f:f7:80:05:81:90:eb:fe:5b:f7:05:43:92:5b:32:9f:cb:
         2e:9b:5f:3f:0f:a3:33:63:91:22:4d:df:a8:90:5f:4c:29:ea:
         17:e4:6e:cb:e3:d9:5f:71:38:75:82:1f:40:03:fd:da:1c:e4:
         55:54:19:11:8f:79:b4:b0:88:29:70:66:62:80:7b:cd:b9:eb:
         ae:ef:9a:03:71:0c:ea:27:56:10:e8:e6:45:a9:a7:ae:ad:7b:
         50:51:eb:91:2c:f3:b1:32:75:b6:c5:ec:85:8d:71:fd:9d:3b:
         a7:4f:fb:17:97:ab:53:8b:03:28:00:3f:8d:33:b0:1a:2b:0a:
         2d:6e:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:52 2026 by rpki-client