Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
File:                     Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json)
Hash identifier:          AHAGMTGeJ5hQvjonRitTe8gEEMq79f9OiFrdlIZLmuI=
Subject key identifier:   B3:90:58:6A:3D:73:B1:88:FF:EE:54:7A:9C:4D:0E:9A:AE:A0:AF:20
Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
Certificate issuer:       /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Certificate serial:       01DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
Manifest number:          01D8
Signing time:             Thu 21 May 2026 03:34:56 +0000
Manifest this update:     Thu 21 May 2026 03:34:56 +0000
Manifest next update:     Thu 28 May 2026 03:34:56 +0000
Files and hashes:         1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: IcDyxCVKGHi0noNZCE+xQ0/oGvVDMSSL90gzvR8kqIk=)
                          2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: gEpkbZAOCiAGZqrCOuhhWC5OkOPHde0fYqgs1m5gseY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
                          rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
        Validity
            Not Before: May 21 03:34:56 2026 GMT
            Not After : May 28 03:34:56 2026 GMT
        Subject: CN=6a0e7d60-daa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:5f:72:cd:b2:ab:16:be:aa:b3:8b:c6:87:
                    37:d4:84:ae:ef:7c:9c:f2:2c:c9:41:3e:ba:67:ee:
                    b2:e2:57:80:d8:11:ed:cb:b2:f9:71:94:d2:7c:4c:
                    31:0b:79:b1:01:47:30:bc:01:d8:ec:cf:47:ab:53:
                    f2:9e:75:32:e0:ff:b9:b9:6e:60:6f:69:52:22:2a:
                    53:ae:52:66:9e:fb:ee:dc:0b:6d:e7:9a:48:31:af:
                    bb:71:51:2f:04:74:af:80:fc:f4:70:aa:be:4a:d7:
                    91:6d:92:b1:1b:17:4e:fe:ed:9e:eb:8a:75:1d:1a:
                    a5:db:ed:b3:7e:03:2a:dd:e3:40:cb:af:36:15:11:
                    32:8d:15:18:ba:5c:c3:b9:e0:28:87:07:3d:a1:f4:
                    89:16:53:8b:89:b2:79:f6:66:4a:75:55:ff:bb:a6:
                    5f:13:2d:84:18:3b:d2:13:08:67:cc:20:3f:36:1e:
                    e4:39:fa:98:79:2d:ce:b7:02:68:1f:f6:fb:2f:d3:
                    8a:6f:3f:87:20:65:9f:45:2f:03:2b:92:7d:c2:f6:
                    6b:a7:27:83:a1:b1:28:48:a3:47:a3:0e:19:4f:87:
                    b1:04:c5:1e:00:c4:ee:ed:9f:2a:66:7f:d8:72:3d:
                    49:17:45:fd:37:ea:47:29:46:21:e4:60:64:96:59:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:90:58:6A:3D:73:B1:88:FF:EE:54:7A:9C:4D:0E:9A:AE:A0:AF:20
            X509v3 Authority Key Identifier:
                keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:18:af:dd:b4:a0:f9:28:c7:b3:8e:9f:57:85:99:6c:be:
         00:15:0e:a3:39:ac:b5:a2:6a:12:89:ef:28:ce:ba:1e:8b:5d:
         bf:c9:01:99:5b:a2:aa:01:78:8f:84:5e:82:9c:43:20:11:f1:
         a1:d2:3e:c5:37:7c:04:23:d9:ee:46:f7:9b:8e:f4:4e:bc:e5:
         b1:07:26:74:9b:8a:c8:60:ff:fe:79:f5:b1:72:8f:1b:81:2c:
         92:0c:6a:93:a7:6f:4a:7c:26:dd:55:d8:2d:67:ab:49:cc:09:
         20:cd:98:5d:cf:5c:ae:65:20:b1:19:98:a7:f7:cb:10:d5:13:
         a8:1c:ee:60:e0:21:dd:a7:31:9e:ef:1d:a8:ea:9c:0d:90:f0:
         ca:4f:fa:72:53:25:f5:5a:73:69:4e:8e:28:51:57:c0:7e:59:
         6f:7e:4c:9a:45:e8:e4:a3:cb:93:ac:a1:e6:01:42:f9:c3:5a:
         66:d5:7a:d6:51:7a:58:43:37:19:a9:b3:9c:a6:76:98:cc:7e:
         5f:d3:45:90:9e:48:92:9c:c5:da:71:b3:35:01:9d:4e:b7:ca:
         33:32:f3:7e:e0:10:86:ad:d6:e2:1a:85:9c:94:ec:5d:5c:e2:
         af:cf:a6:f3:d2:eb:73:28:a6:1a:8c:50:21:65:14:08:38:ac:
         46:b0:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:30 2026 by rpki-client