Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File:                     QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier:          +aJRrvEkHdVX9l+zd5mwiSrTKYKqNyqg3jvVGdJeMB0=
Subject key identifier:   18:37:34:A7:52:35:82:A6:F0:2C:30:E8:B5:19:3D:0E:93:CF:73:24
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer:       /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number:          C5
Signing time:             Mon 01 Jun 2026 07:51:26 +0000
Manifest this update:     Mon 01 Jun 2026 07:51:25 +0000
Manifest next update:     Mon 08 Jun 2026 07:51:25 +0000
Files and hashes:         1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: rTc0PDtc7QxAVw/4Kn8BktBawl7HBcrPSfqYFDKJ2TE=)
                          2: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: XTg2evwkR4VvSVQWu251hii2ssGz9ZlroApKBF0azrE=)
                          3: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: 2rQsXi5kIwQ2IE+rYx9M2psZsNK3ECigUyxfaVNd7kI=)
                          4: B87594FC08B311F1954B37591C3D8C67.roa (hash: H6vYE+gxhuAKlVgXnsRMmqmTt0CZdQJgg6x87GzOftE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
        Validity
            Not Before: Jun  1 07:51:25 2026 GMT
            Not After : Jun  8 07:51:25 2026 GMT
        Subject: CN=6a1d39fe-0838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:0a:0b:97:88:28:1d:ae:4c:d4:e8:50:68:
                    74:2c:47:35:a8:ed:87:27:f8:4d:45:d4:f1:d7:cc:
                    a3:6b:51:9c:04:76:97:5f:72:22:5c:83:a8:31:fa:
                    ba:09:98:f7:ea:41:05:98:c1:50:3e:d5:23:12:d0:
                    de:0c:de:03:d0:39:67:34:7d:2e:74:71:42:ee:6b:
                    87:48:2c:ff:0c:50:ea:92:2f:bf:08:16:a2:b2:e6:
                    0e:4b:45:02:19:8e:04:d2:ae:37:a8:e5:14:92:30:
                    69:f5:8c:a6:e1:d6:ef:ad:9b:a7:3d:68:b0:5a:2e:
                    f9:2d:20:de:35:16:26:d3:6d:7b:3e:2e:f4:4a:ac:
                    1e:16:c5:32:83:60:58:9d:23:b4:f8:38:30:0e:d8:
                    b8:1a:3f:52:40:00:23:d1:fc:b3:eb:f6:b5:35:83:
                    db:37:02:39:2f:86:c3:79:de:69:39:23:07:c6:bf:
                    95:d7:38:d0:b9:da:fa:d7:45:57:6f:51:3a:bf:a3:
                    86:d9:9d:69:ec:19:46:e7:af:8e:0e:c3:dd:a8:66:
                    ff:0a:3c:f8:29:e1:04:5f:47:e1:8e:7f:27:19:e0:
                    92:00:38:3b:87:25:33:2a:2a:f2:48:88:02:58:18:
                    52:dc:47:59:81:6e:fe:26:8c:27:f3:14:e0:0a:25:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:37:34:A7:52:35:82:A6:F0:2C:30:E8:B5:19:3D:0E:93:CF:73:24
            X509v3 Authority Key Identifier:
                keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:a9:dc:2f:54:ff:29:00:5a:32:3f:ce:5e:b1:0a:74:05:ba:
         0b:ac:99:79:0b:56:83:9b:d0:68:67:ea:e6:73:2c:97:38:e8:
         61:f6:ba:24:68:73:07:2b:60:0c:e3:d3:67:1d:a0:1a:9e:a2:
         05:f3:b1:8f:bd:64:bd:9e:de:07:38:61:e3:dd:d3:7a:44:3c:
         5f:07:ef:0e:cd:28:76:eb:7e:78:17:4b:51:ae:f0:a7:f7:c8:
         cb:f9:77:31:83:b2:73:66:84:60:ed:bc:22:0c:54:fd:b7:16:
         6f:f9:68:62:16:ad:33:89:6f:26:c8:4e:2d:cb:05:64:3b:21:
         3c:df:b0:5d:67:5a:7a:71:e8:5b:8b:7e:0a:79:12:42:50:03:
         64:2f:12:40:a4:37:85:7b:ef:fc:bb:da:c1:bf:4b:4d:09:3a:
         d3:7c:20:74:90:e0:83:82:5a:e4:ef:b6:46:22:3b:93:86:4e:
         e3:64:3a:6c:a8:37:60:09:0e:5a:b5:65:e5:ee:16:9b:88:ad:
         4d:21:b4:eb:9a:fa:14:12:82:c7:a1:71:fb:6f:59:84:f2:0e:
         46:c2:cb:1a:b7:b0:b9:0b:24:ca:45:9e:89:40:7b:41:0d:f8:
         85:1e:32:c6:bb:0c:17:c3:07:f2:a8:32:dd:1c:81:52:b7:79:
         fb:5a:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:48 2026 by rpki-client