Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          fJh+mHxFdjmO4RAeAR+iLIjQIIM2XwU7V+vIhjf1/i0=
Subject key identifier:   7E:77:A9:DD:0C:F2:B2:14:C3:80:07:9C:31:6F:31:7E:E2:A7:B3:5B
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       271D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1AF1
Signing time:             Mon 04 May 2026 17:30:51 +0000
Manifest this update:     Mon 04 May 2026 17:30:51 +0000
Manifest next update:     Mon 11 May 2026 17:30:51 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: iXCDyU5lVfdnFsJXn2LQ7tUHQ69jchFpl5ZxqX+YGrI=)
                          2: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: dqWOzU0Hk4FU69te54sGPE+inxaGG4JuV2n7is/nqYI=)
                          3: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: A2CyKDYZ86uo2gMdQ3gEpA0HjmMVcr+W92QQ9aO63X8=)
                          4: B53FD334575411ECAA094876C4F9AE02.roa (hash: MOniPA3OWYxjKNJDubnO0OYiVfTrXRb7jdXls0wzzCE=)
                          5: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: 29+zYXuX4Jx7WwvXLyzsUGtcpp5Avkhlmy+dKXTdCrg=)
                          6: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: dIJeV3xI9IsB1+6ABWo+QrvOZFgUexy0d0Wlndpmcjc=)
                          7: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: r+KX8BXPnqN4PM5h6BUZcCkuaOFh4txYx8mT4xel0+o=)
                          8: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: xBA5ZNm2yzqLGdnAq/LcY9YV7GFaI1U9uISUgAQr5WM=)
                          9: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: qbkmJ7/TUTQdrubphs2Dx/bDsl/TwmS3T9QEqj9AnVo=)
                          10: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: ke3C+dNBckm90K9f3Zy0yEOSpzhDoDoy9rejOQLMU9I=)
                          11: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: 3uOLprOx1kal0PHAoU6CY+ILVwcmdUA3v/WZfKujh3Q=)
                          12: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: ckGk6YnhoYmIlN6MXCa0OzYZwJ4c+LTg67ZDBKKjmnw=)
                          13: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: SOZryTu4EW/bvslW0PH1vtDZItFz5w8nA9h/43Up0aA=)
                          14: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: Z6egvfJv4T2twr/MyysD84nkeZr42AiA4waVdxOrO/o=)
                          15: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: K5B6HHyVQ+5YfTDkQKgqqzReSt6SI53NMwWOIIR2Lhc=)
                          16: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: wWiBrsPclt2HSsmAyI8LNqC2U3qAaeghLY8UH+OtrWo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10013 (0x271d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: May  4 17:30:51 2026 GMT
            Not After : May 11 17:30:51 2026 GMT
        Subject: CN=69f8d7cb-332c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:93:d2:10:56:7c:4d:c1:ad:31:ef:1a:b9:
                    c9:cb:7c:56:60:a3:ca:60:04:03:25:23:5a:7e:5f:
                    3b:67:e0:0a:9e:81:89:50:02:5c:9c:da:a8:03:47:
                    fd:2b:ad:2e:df:f7:80:4b:0e:af:08:96:77:93:50:
                    96:4a:d1:01:ce:03:34:7a:0d:c7:60:c5:25:f0:4a:
                    6f:4c:9f:5f:36:98:92:04:b9:0b:29:bc:c8:c7:49:
                    b9:42:32:e8:42:ea:e9:2f:a1:f5:f2:60:f7:4c:bc:
                    51:37:93:7a:92:ee:d0:bb:d7:c2:b0:36:7d:5a:93:
                    be:6b:0b:9b:f2:cf:dd:71:82:5e:8c:81:13:37:f3:
                    0f:a6:c0:73:1f:02:19:4f:2d:fd:c6:56:d7:84:e8:
                    fd:2b:e3:f1:6e:25:21:43:68:bc:7b:5a:41:91:15:
                    16:ad:7f:51:0c:7f:5b:b2:36:88:5d:2a:1d:14:02:
                    0b:10:18:26:ef:1d:f8:db:9a:2d:f0:5f:08:92:3a:
                    4e:28:e5:e5:18:4a:27:04:f1:2d:57:ad:48:93:3e:
                    76:c7:54:1e:74:2a:98:78:de:20:23:45:fe:e9:b7:
                    20:d6:1a:12:6d:de:f7:45:5c:88:90:b3:71:6d:32:
                    79:e5:c9:fa:b0:23:48:96:fe:ba:8d:a2:a4:6b:d4:
                    7a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:77:A9:DD:0C:F2:B2:14:C3:80:07:9C:31:6F:31:7E:E2:A7:B3:5B
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:dc:09:b3:72:b5:73:fc:10:bf:ed:63:de:17:c7:34:e6:ab:
         bc:d5:c3:9c:42:e4:45:ea:31:d8:99:a8:98:11:6c:2f:52:6e:
         67:0f:e5:6d:fc:ed:d0:8d:a1:f3:72:c0:48:ba:98:ca:bd:6c:
         e4:3d:ac:43:54:53:2f:5c:e9:7c:71:f2:da:94:4c:96:01:50:
         d9:91:de:a5:be:38:ea:0c:95:02:f0:8c:1a:09:eb:25:cc:de:
         e9:72:c2:53:39:9a:62:63:17:31:77:ab:ba:62:87:28:57:d2:
         7b:8c:c6:93:fc:fa:62:5d:bd:c8:52:89:75:ce:c6:24:1a:cf:
         b6:4c:e2:2b:09:82:d8:03:02:0e:d5:8f:0b:34:36:05:b9:a6:
         6a:44:18:41:70:53:67:38:05:f1:9f:5d:4c:e1:ef:8e:5a:2c:
         cd:dc:1c:7d:c3:92:ab:5e:d6:53:fb:57:01:34:2e:bb:1f:ff:
         07:09:5b:f6:42:fc:3a:c0:90:53:74:a8:e7:2b:e7:f5:4e:fa:
         b7:a5:e1:cc:b3:3b:7a:ce:4a:29:d4:e6:80:9c:f6:4d:d1:09:
         e8:03:9e:48:6b:91:ad:6f:ca:56:05:e6:60:d0:29:d0:2b:ca:
         fd:5c:0c:24:10:bb:65:ba:d1:a7:43:69:4a:98:7d:da:49:07:
         44:1f:b0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 02:43:08 2026 by rpki-client