Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
File:                     QeXcIVUGn_MX5e44x1t4icIhl-M.mft (raw, json)
Hash identifier:          rCp8K19wsul0BOz+FTDNMfk65vogM4Sny4rSEecU8vY=
Subject key identifier:   41:2D:BB:15:0F:6B:4F:62:63:C4:78:53:52:DA:5D:01:E6:43:F4:97
Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
Certificate issuer:       /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Certificate serial:       04FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
Manifest number:          04E5
Signing time:             Wed 20 May 2026 23:54:51 +0000
Manifest this update:     Wed 20 May 2026 23:54:51 +0000
Manifest next update:     Wed 27 May 2026 23:54:51 +0000
Files and hashes:         1: QeXcIVUGn_MX5e44x1t4icIhl-M.crl (hash: vpeAabXkHYkexIc3ZTc0dy70KQxbRSJLTmc2PSNedqs=)
                          2: 4FD9C050F53411EFBF7FCA34C4F9AE02.roa (hash: 4j2H8uU7/aRuPDnI28o6Sv8nL9kjvWfBPDjQZsso1iI=)
                          3: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (hash: 0Bo2hHPRP76nejRj/EVVT9FzU9vQs0YDaVNN7sh0ZdQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
        Validity
            Not Before: May 20 23:54:51 2026 GMT
            Not After : May 27 23:54:51 2026 GMT
        Subject: CN=6a0e49cb-954e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:80:7b:1b:ac:dd:d1:bb:8f:af:ed:55:fe:
                    bf:f9:27:d5:9a:85:e1:0c:7a:d6:63:d4:25:b9:64:
                    8a:ed:78:da:32:48:06:f2:2b:2e:5c:2e:b2:4b:1b:
                    f4:5a:9c:00:21:b2:b6:6f:ad:5a:a7:73:37:16:6c:
                    2d:45:84:d2:10:98:ee:0d:4b:7a:3b:2e:0c:11:e0:
                    1e:61:66:e4:02:36:80:e4:79:a4:78:6f:76:b6:e5:
                    b5:84:0a:65:6d:d9:71:cf:83:43:61:c5:fe:7d:1f:
                    fb:4a:a4:b6:35:3a:4e:b8:e6:04:0a:58:96:ae:b9:
                    f7:0e:37:6e:93:1c:a8:66:b2:05:48:29:6f:81:6d:
                    64:6a:ea:e8:db:85:1f:1a:10:59:68:7c:e1:b9:61:
                    c0:c2:cf:91:88:ef:01:39:c7:4a:5a:83:92:b3:d5:
                    15:48:51:93:f6:52:dc:19:79:b3:e8:33:79:18:f7:
                    f6:80:55:5c:48:d9:1a:f0:3d:ea:cf:70:2a:4a:85:
                    c3:89:98:ec:6b:2a:37:73:70:67:75:f0:63:48:80:
                    34:0a:a8:6d:61:83:37:ec:a1:53:37:04:fd:45:98:
                    4e:04:ad:43:91:52:80:40:29:f3:23:6c:ca:79:56:
                    93:d5:48:3a:e8:64:a9:87:db:78:70:8b:fe:d6:3f:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2D:BB:15:0F:6B:4F:62:63:C4:78:53:52:DA:5D:01:E6:43:F4:97
            X509v3 Authority Key Identifier:
                keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:99:ef:72:19:04:9f:33:cc:72:61:53:54:93:a0:9f:d4:
         66:4a:62:c7:dd:6f:61:c1:de:47:80:7d:14:cb:51:d7:f8:9d:
         66:2f:dd:7a:be:d9:21:88:d7:bd:f5:f1:4c:58:5a:bb:4b:94:
         a2:01:3b:b3:e5:a0:61:a0:25:9f:12:de:81:42:20:82:ea:bd:
         ed:f1:fe:12:01:66:6a:ac:dd:1a:dd:c2:f7:b7:90:8c:b2:6c:
         17:08:9a:d9:bb:57:06:2a:dd:54:da:6d:e5:66:77:54:3c:5a:
         f3:4f:bd:d3:71:48:a1:02:11:e6:f8:e6:cc:26:3e:51:21:b2:
         e1:5f:12:09:87:09:7e:e2:be:d5:77:ce:e4:62:a7:0d:7e:e1:
         b1:bd:08:fa:1f:cd:1b:44:92:c0:8a:fe:be:e7:c0:3c:b6:1f:
         49:84:f4:44:84:48:55:65:18:99:4d:5e:63:b6:88:4a:7c:0f:
         3c:40:0a:99:59:69:f3:11:ac:c7:04:d6:f8:fb:ce:ac:d8:aa:
         aa:8a:17:98:33:ce:4d:5b:54:de:e8:89:fd:49:1a:fa:81:9e:
         1a:b9:c4:60:23:2b:69:3a:3c:43:8c:9d:0d:54:3a:19:61:69:
         2f:be:13:89:2a:4c:23:29:19:98:28:07:b2:9d:c0:e0:5a:ec:
         0c:2d:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:15 2026 by rpki-client