Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier:          ra0Jq/m9csgUygHeaa/Jx20YswbxtRrVeqqfPQXo4T4=
Subject key identifier:   D1:93:C2:05:BB:8D:DB:C8:A1:09:5A:66:46:F7:11:3B:C6:E2:F2:0E
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1C57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number:          1C3A
Signing time:             Fri 22 May 2026 16:11:46 +0000
Manifest this update:     Fri 22 May 2026 16:11:45 +0000
Manifest next update:     Fri 29 May 2026 16:11:45 +0000
Files and hashes:         1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: eAWewDjJrFLuGHMiEV/qHoOyrMuvIkv7Rb/d9xdqLLs=)
                          2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=)
                          3: C98708BE477711EBB4044E31C4F9AE02.roa (hash: Bq4dDyNuryVKgCHn3kt6G7S6oGEDro1j46GJUBDoNaA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 16:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7255 (0x1c57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: May 22 16:11:45 2026 GMT
            Not After : May 29 16:11:45 2026 GMT
        Subject: CN=6a108042-de3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:1f:9a:50:44:be:78:49:ab:55:6a:79:65:
                    f2:60:35:5e:04:fd:2b:e9:c9:44:74:f8:c5:a9:75:
                    ec:7f:4a:fc:a8:14:f0:bb:16:19:16:d6:97:1b:1e:
                    3b:b4:a8:27:8e:22:19:04:83:a6:53:ee:86:8b:f5:
                    92:1b:14:e8:80:0f:a9:ce:1b:c7:01:16:66:ce:9d:
                    bd:3a:3f:e6:83:4b:2e:e8:43:6b:4b:05:00:1d:d3:
                    12:93:2e:3b:71:44:37:b8:24:9a:a9:94:6f:65:89:
                    7b:ab:8f:3f:a6:f4:39:44:fb:b8:6d:f4:9b:fb:88:
                    24:63:3d:fe:47:7c:06:3a:de:1b:8e:1f:ff:0b:61:
                    7a:3c:00:ad:30:ef:b1:ef:40:c3:aa:8b:2c:a8:06:
                    85:0f:06:30:3a:23:ea:40:21:75:01:75:16:ad:5e:
                    67:d7:3b:e1:c5:7c:85:69:61:e3:ec:84:a3:78:cd:
                    44:26:06:2a:17:b3:53:b9:56:e3:fc:ac:df:e1:7f:
                    c3:fe:61:2b:7a:05:7e:b3:18:40:da:37:d1:cf:9e:
                    01:ef:22:f2:40:35:41:30:ec:c6:a0:46:cb:68:51:
                    41:0c:b6:5e:bf:09:78:d3:21:32:e5:e9:3f:06:d5:
                    30:a2:28:86:31:1b:87:09:c0:00:4d:fc:f8:65:4d:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:93:C2:05:BB:8D:DB:C8:A1:09:5A:66:46:F7:11:3B:C6:E2:F2:0E
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4c:6c:0b:02:c6:7d:76:58:e9:60:0d:ae:91:e8:dc:58:a1:
         c8:a4:60:3e:7c:ee:60:ca:23:6f:f6:e5:5e:ff:6e:6f:65:12:
         15:85:30:ec:9e:9e:f1:e6:03:4f:7d:42:85:d3:54:cd:97:01:
         f5:ad:e4:e2:63:58:87:3d:c8:fb:f7:50:c6:77:df:3e:5d:62:
         21:80:0a:f1:2a:48:f0:51:96:45:ef:5d:4a:ef:a3:59:78:58:
         7e:2c:90:36:1b:12:33:ff:bc:9a:3e:77:15:5a:e6:5f:fe:16:
         77:78:f0:a6:40:8b:c6:30:35:16:76:05:5c:53:00:9e:eb:ba:
         1e:35:c4:da:e6:76:f1:83:4d:52:6b:55:20:58:1e:40:d1:24:
         13:3d:d0:e2:56:a6:ba:e5:f8:48:a1:14:2b:05:97:c7:47:d1:
         b0:1c:02:5a:47:9e:8b:53:36:b6:ae:63:7d:ec:f1:a2:77:b8:
         ce:62:30:9c:e2:bb:fe:10:cf:74:a3:4e:71:28:1c:75:57:ac:
         e2:7c:70:21:53:77:a0:61:33:7a:da:8c:0a:95:3f:8f:85:d8:
         d6:92:9b:9e:ef:6d:1a:22:1e:06:db:e4:82:34:b4:c0:0a:b4:
         64:63:fd:7b:05:5a:2b:63:3e:50:96:99:4b:c9:28:4f:d3:a7:
         20:d3:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:04:16 2026 by rpki-client