Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File:                     QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier:          ADoQXJRQoZUaDE2qLlSGzM1kAKtlckOkJoXg5rnYN9M=
Subject key identifier:   84:30:D1:7F:66:1E:16:80:3E:FC:44:44:B3:D5:A2:41:55:2D:B3:1B
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer:       /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial:       08D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number:          08C5
Signing time:             Wed 20 May 2026 20:26:54 +0000
Manifest this update:     Wed 20 May 2026 20:26:53 +0000
Manifest next update:     Wed 27 May 2026 20:26:53 +0000
Files and hashes:         1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: uqcenDPR7scrQ0vUy3cS6Ruyq+bKgKTtpuLm9KNrm9c=)
                          2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: D61mhla4ZKX7DfgoplRcuCG35MYNou9878EVBT40r2c=)
                          3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: tUsv3tNoQWMVfE/GiWVi84l0pY9vapkX9vPKn8R6z3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261 (0x8d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
        Validity
            Not Before: May 20 20:26:53 2026 GMT
            Not After : May 27 20:26:53 2026 GMT
        Subject: CN=6a0e190e-8177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3b:48:8e:48:2a:bd:5b:0c:80:ce:ed:47:a0:
                    10:d9:94:0e:9d:50:94:38:d7:73:15:4c:13:81:7e:
                    21:74:df:0e:8f:85:c9:c5:a1:c9:f4:49:a7:d3:3f:
                    57:f0:14:b9:33:e0:84:95:e0:25:c1:dd:9e:6d:cc:
                    ef:6e:68:6d:6e:7f:a6:e5:53:fc:da:be:be:2b:ab:
                    5b:93:1c:5a:a2:81:8d:a4:31:1a:23:a9:3a:49:5d:
                    d4:83:69:88:04:4b:c6:21:49:34:0f:a4:06:d2:2e:
                    21:26:38:f3:ac:f8:0a:09:21:38:6c:bb:28:6c:5f:
                    d3:19:10:e0:4d:eb:95:03:65:3e:67:6c:61:c5:77:
                    46:52:90:46:46:42:a5:07:f5:8b:b2:a5:bd:e0:13:
                    b2:b1:5c:f8:e8:fc:a9:05:ba:82:6e:df:96:e9:7a:
                    c5:0f:9d:d3:29:07:0c:75:29:88:b2:a4:4d:9a:24:
                    95:7a:19:4e:c6:b1:e4:5a:24:42:e5:1f:49:3d:f5:
                    f0:0d:c0:d0:ac:3d:ea:5f:6d:c7:33:03:82:cb:45:
                    b1:c2:47:f2:d3:bb:b1:75:94:13:98:cd:49:80:36:
                    c1:74:dc:6f:37:41:9d:eb:ac:69:f9:d9:d1:41:5a:
                    dc:c6:91:d2:6f:00:be:4d:2e:4f:f9:18:f3:1a:c1:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:30:D1:7F:66:1E:16:80:3E:FC:44:44:B3:D5:A2:41:55:2D:B3:1B
            X509v3 Authority Key Identifier:
                keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:88:bf:9b:0e:b6:63:89:d7:a0:2e:5f:9e:77:b8:d0:57:8b:
         a8:a6:f0:2a:f1:1d:55:0e:bb:df:27:cf:6d:9f:12:1b:d9:6a:
         67:eb:78:fe:2b:7f:79:e6:3b:94:1a:f6:9c:32:1c:ee:98:4b:
         29:0c:b7:ef:d2:61:9c:1c:94:31:4a:a4:8d:50:a6:d5:ee:63:
         40:c3:0c:b8:71:dd:b3:5a:cf:4a:aa:37:7f:23:3d:dc:6c:d7:
         d2:3e:d8:69:3c:83:c1:1d:f2:a1:48:94:4b:7a:57:a8:eb:3a:
         f8:5b:3d:d8:a2:c7:e1:38:d7:d8:49:51:e0:a4:82:22:77:69:
         2c:b6:f6:e7:2f:0c:7b:6c:bb:2e:b6:f9:7d:b9:17:3d:f6:b9:
         45:52:1f:95:d4:f9:e7:a7:b2:cc:0c:d5:dc:fd:7f:4a:52:d2:
         3c:5c:5d:c8:e2:a3:22:63:fa:23:20:d6:13:fb:d6:98:0e:68:
         81:a7:8b:9c:78:be:9b:c9:5a:36:bb:a9:cc:3b:ca:54:d5:4b:
         25:8b:a4:f5:7b:ac:ba:08:d1:ae:32:dd:5a:d8:44:e7:32:40:
         9b:82:2e:26:45:a2:1e:68:5d:93:7f:a3:0d:17:b9:81:c0:20:
         76:1c:75:ea:63:0f:e1:e4:9e:83:78:94:19:22:64:32:2a:f2:
         76:34:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:52 2026 by rpki-client