Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
File:                     QIyZnDwewBZElFs0d6nyI061eRw.mft (raw, json)
Hash identifier:          4HvIHu2qCjz7+fy91DI39XoYKOU+bCoI5KVEoRK7Uv8=
Subject key identifier:   C8:E9:2B:CB:9D:BF:2E:D6:3D:27:FD:DE:51:12:93:E5:C0:70:77:41
Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
Certificate issuer:       /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Certificate serial:       2579
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
Manifest number:          254D
Signing time:             Tue 02 Jun 2026 15:45:49 +0000
Manifest this update:     Tue 02 Jun 2026 15:45:48 +0000
Manifest next update:     Tue 09 Jun 2026 15:45:48 +0000
Files and hashes:         1: QIyZnDwewBZElFs0d6nyI061eRw.crl (hash: Om8J0VrhKYTRHvTGH0AosJDwkB9mRcTsmxkp2QporNc=)
                          2: 50A2F64264BC11E8ACC7951EC4F9AE02.roa (hash: 6oC3s9zXSmCynBY9z0T8TeaSrJ6gHinauk9Zr2y+ucg=)
                          3: 2486E806F0E311EAA1C58D62C4F9AE02.roa (hash: l+zP+x/ZY9cq3nbV4r5XpYolKqUr/0Lu8hDJSfvQgkI=)
                          4: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (hash: /w4t5dhbmQEa84JEDJ39VitjjFskPm/mEpnYuZ0T6wQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
                          rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9593 (0x2579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
        Validity
            Not Before: Jun  2 15:45:48 2026 GMT
            Not After : Jun  9 15:45:48 2026 GMT
        Subject: CN=6a1efaad-7da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:5f:f9:e4:16:4b:1f:3d:e7:69:aa:06:15:
                    36:0c:7a:7d:46:f3:ad:c6:eb:44:75:fd:82:ad:52:
                    79:fd:fc:cd:10:74:a4:fe:40:dd:f0:44:f1:c7:04:
                    9e:c9:f3:07:5d:48:24:2f:d3:bd:8b:6a:c3:31:5d:
                    84:1c:da:c4:0f:8a:87:3b:c9:a2:da:31:9c:9b:24:
                    ac:f5:cd:7b:fe:f5:0f:05:c0:13:ba:45:e1:ad:9f:
                    fe:b6:15:b0:a7:ae:d0:db:bb:a3:73:78:1c:ad:89:
                    53:20:44:a3:98:a6:65:a3:47:7f:2b:3c:f8:79:5c:
                    fb:53:6b:1f:de:3c:19:c5:41:8d:8c:b3:17:bf:d2:
                    57:23:a6:6e:c3:5e:5f:d5:75:5d:32:25:02:28:19:
                    89:72:2b:7c:de:8a:53:e3:83:c0:33:d0:1d:31:76:
                    c6:46:79:01:a9:5b:2f:58:ba:70:f5:75:11:a8:a2:
                    7f:c7:e6:3d:02:37:4b:95:45:2d:db:bc:14:fe:d6:
                    fb:69:b4:1c:44:2d:9e:44:58:c9:11:6f:85:eb:75:
                    88:f3:5f:e5:f1:7f:8a:48:87:96:1e:2c:df:63:03:
                    b3:a7:3c:cb:fb:c2:db:2f:1b:49:da:01:ff:53:a9:
                    2b:66:2c:21:ce:7d:fa:0d:d2:c9:35:07:ad:31:42:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E9:2B:CB:9D:BF:2E:D6:3D:27:FD:DE:51:12:93:E5:C0:70:77:41
            X509v3 Authority Key Identifier:
                keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e1:4d:b6:fb:89:62:c8:ea:09:5e:d4:dc:e8:ed:1d:55:1b:
         91:47:25:c1:50:1c:87:87:7e:33:e1:6c:8e:52:34:56:5c:83:
         4c:21:35:2c:10:c9:b1:d0:01:e9:c4:44:66:7a:f9:46:e5:d7:
         24:42:3e:93:67:d0:47:a1:4c:45:7a:06:15:0a:c5:f5:3f:1d:
         82:51:d9:f6:ac:91:75:29:c1:b8:8f:2c:75:07:9b:03:a0:cc:
         29:df:87:20:6a:a7:06:ca:34:52:bf:31:96:d4:13:51:13:69:
         37:fa:95:46:f2:b3:11:22:d5:7a:0d:ff:87:6c:6d:c5:84:26:
         aa:18:82:fd:ec:92:03:92:01:cf:59:fb:c6:58:3b:45:59:6b:
         14:50:28:b6:53:ff:66:af:9b:b1:0d:61:3b:3d:f0:23:d2:d1:
         a7:11:f7:fd:42:c2:d4:a2:03:2d:a8:06:6a:34:15:3c:ba:43:
         c0:52:74:3c:91:00:c2:bd:15:90:53:73:87:d5:5c:7d:d0:1f:
         a5:35:fa:10:fe:9d:98:ae:71:0c:67:1f:f8:e8:cd:d6:10:86:
         77:17:0b:23:b8:88:c1:71:77:64:6b:46:19:ef:4b:0c:52:7f:
         42:d1:c8:c0:8f:bb:e2:75:59:4f:fb:aa:39:8b:43:66:23:3a:
         64:bc:57:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:31:07 2026 by rpki-client