Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
File:                     QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json)
Hash identifier:          +8qI+g+CLOll5RQyokWtVQPH9UeLxToaVaKEVxt3ljE=
Subject key identifier:   10:0B:CF:76:10:55:3C:78:5A:88:D8:32:1D:65:86:38:6C:1E:C4:F4
Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
Certificate issuer:       /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Certificate serial:       108C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
Manifest number:          275C
Signing time:             Wed 20 May 2026 16:38:20 +0000
Manifest this update:     Wed 20 May 2026 16:38:19 +0000
Manifest next update:     Wed 27 May 2026 16:38:19 +0000
Files and hashes:         1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: a2oURTFVfijxnUY9Q/ak5rAMIktTZkVVrt1ghjwxgng=)
                          2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: 9GKBxAqwPTAO+hWMiV5oav3VDxVKz2FMAbeDwl8q3ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl
                          rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4236 (0x108c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
        Validity
            Not Before: May 20 16:38:19 2026 GMT
            Not After : May 27 16:38:19 2026 GMT
        Subject: CN=6a0de37b-64d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:e9:11:eb:13:c7:27:ee:03:d9:07:89:10:
                    0c:a4:40:6e:86:05:55:40:b7:49:73:99:43:29:e4:
                    a6:38:a4:4c:33:55:b4:ce:92:7d:13:1a:e2:9d:1a:
                    a0:90:5c:13:06:48:aa:e1:3c:13:58:d5:a1:cf:30:
                    1e:8c:61:a2:45:b1:6a:f8:7a:22:f3:ec:4e:a4:48:
                    c3:a9:07:44:66:81:49:be:59:ea:b2:e0:9f:09:8a:
                    c4:89:5f:4b:65:61:13:b5:d0:a0:d9:0d:9d:a5:53:
                    c6:57:fe:2a:18:cc:8d:e4:75:c3:73:fb:73:67:64:
                    4d:0e:8f:0a:a8:c9:88:50:9b:3d:5d:5e:32:c3:91:
                    74:b1:86:b8:5a:10:76:99:70:d5:b0:ab:6d:ce:88:
                    08:29:53:61:73:70:fe:28:fe:b0:bf:ed:a8:74:5b:
                    c2:91:5b:eb:d6:b7:cc:26:37:50:e0:a7:a5:7a:b6:
                    74:ab:f0:ac:48:a3:34:5a:46:ca:c3:63:99:6e:c1:
                    f3:16:98:83:92:68:6a:d4:04:f9:e6:df:77:36:22:
                    7b:63:72:d8:50:dc:55:52:d8:4e:eb:3a:da:fc:cb:
                    8a:39:f3:87:3e:59:21:41:27:70:e3:ed:ad:2d:49:
                    11:15:6d:a3:5f:b2:3d:c9:b6:2d:42:c5:8d:c4:3d:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0B:CF:76:10:55:3C:78:5A:88:D8:32:1D:65:86:38:6C:1E:C4:F4
            X509v3 Authority Key Identifier:
                keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1a:ea:1e:34:c9:63:1f:03:2d:0e:98:40:98:41:8e:41:5a:
         e3:ed:a2:06:73:75:ac:8b:f6:67:35:9b:19:dc:8a:2a:5e:10:
         ed:09:8b:c0:e6:3c:27:f5:44:99:90:9c:ba:6a:0e:19:42:88:
         da:ea:90:e6:26:97:e1:73:06:8f:2f:55:7c:de:98:f3:28:b1:
         df:52:ea:cf:1e:83:6a:e5:fa:74:36:3f:56:d2:3d:2b:a1:a9:
         11:6f:69:bc:ef:ff:7a:16:d6:a2:a2:20:b0:71:47:2b:4e:cb:
         23:56:00:c9:b8:3a:ae:4f:d4:08:33:64:b8:67:25:b2:26:76:
         20:ab:25:2c:e2:6d:a5:e2:f4:4a:09:42:d8:80:e7:83:4f:5e:
         31:c5:b8:6d:b4:cd:73:6f:2e:f9:30:50:55:dd:46:04:45:3a:
         af:92:05:2d:d2:3f:f7:64:95:7a:29:7d:75:4b:78:91:66:7f:
         d1:64:43:4f:e0:05:dc:e3:92:0d:35:28:b8:f4:cf:1d:48:10:
         01:d4:ca:3a:c2:8d:bd:eb:56:f6:bd:2d:0b:e5:d1:8b:3b:5f:
         48:b0:86:68:ba:31:f2:f7:7e:df:29:2a:43:ac:83:5a:59:63:
         02:73:be:a6:dc:86:d7:b3:df:43:64:9c:b0:6e:d3:91:ed:45:
         f0:28:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:50 2026 by rpki-client