Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File:                     QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier:          7mlU+qPpvzeD+oskX4bcmLgQJRHwxG3lSyW5rSC72EY=
Subject key identifier:   3D:4B:C7:7D:45:9D:4B:A0:82:7C:12:4A:07:2F:20:C8:24:3F:36:75
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer:       /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number:          026D
Signing time:             Thu 21 May 2026 02:05:29 +0000
Manifest this update:     Thu 21 May 2026 02:05:29 +0000
Manifest next update:     Thu 28 May 2026 02:05:29 +0000
Files and hashes:         1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: pCipenbxGRnPz9vYnizxy71UT2cWbyDU0KG/EmGyiLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
                          rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
        Validity
            Not Before: May 21 02:05:29 2026 GMT
            Not After : May 28 02:05:29 2026 GMT
        Subject: CN=6a0e6869-f9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ad:62:6e:74:cc:5c:c0:7b:46:98:f0:d9:40:
                    f3:df:1f:25:65:ba:a6:6c:36:1f:ed:ff:a2:85:20:
                    4c:09:71:81:53:ae:a6:04:f9:6a:34:de:40:c6:1b:
                    d4:42:c0:29:b0:bd:1f:01:6f:1c:c2:e1:7a:41:fc:
                    24:f2:80:37:f6:e5:77:11:56:a3:58:d9:b2:2b:cd:
                    48:37:6b:5b:84:01:db:75:0d:d0:b9:e3:b8:0a:85:
                    ff:f9:fc:72:e3:4a:74:0f:15:21:51:27:45:20:87:
                    49:ee:df:7d:a6:04:66:f2:c0:95:a9:1c:34:58:b3:
                    8b:73:5e:0f:2f:e2:78:34:62:c1:b2:47:65:72:db:
                    6c:b8:1e:eb:32:0c:0d:f6:9e:51:fe:02:98:47:11:
                    2e:4c:98:11:86:67:30:28:96:1a:c0:02:25:08:6b:
                    65:88:af:8c:16:83:62:e0:84:f3:cf:ca:f1:6c:62:
                    3f:3c:ac:ff:2c:94:ae:82:35:55:e4:33:e6:a7:2c:
                    16:04:6e:86:3b:6d:45:65:36:fa:15:f4:67:9d:b3:
                    1d:be:8b:c4:39:26:13:d2:a4:08:49:59:47:de:8e:
                    fe:e9:16:cd:57:d4:26:93:70:a7:0f:0e:9c:e3:ba:
                    ed:84:09:a1:4a:22:40:69:90:f4:22:2b:32:8f:cc:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4B:C7:7D:45:9D:4B:A0:82:7C:12:4A:07:2F:20:C8:24:3F:36:75
            X509v3 Authority Key Identifier:
                keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:04:c8:c7:75:02:87:4d:24:4e:ec:ea:53:1f:dd:b0:00:8b:
         a1:f0:48:d5:53:19:8e:0a:0f:2d:44:1d:ce:6a:76:a4:a1:23:
         b8:c3:4d:7f:9f:59:d2:7f:43:58:96:ac:09:91:4e:7f:55:c0:
         66:28:d2:d0:84:75:74:72:06:94:0e:fd:c5:c1:92:a9:1f:08:
         92:40:4d:1a:62:22:4b:da:0b:9a:58:c8:09:ca:d3:24:9a:36:
         9a:64:76:44:53:da:49:c0:36:ec:3c:95:cd:7c:60:17:96:78:
         3a:e5:f4:8b:82:b8:84:15:64:bc:89:67:27:1d:0d:fc:a2:cf:
         07:14:0d:34:ba:97:e7:c9:bd:ed:15:13:f8:e9:a0:82:84:21:
         11:01:8e:c4:64:a2:78:19:67:5a:eb:06:cb:e2:41:25:e8:92:
         35:f4:7d:0c:19:49:41:56:4c:1b:21:99:57:f6:95:d4:01:13:
         c8:ab:f6:9a:17:40:43:68:72:41:20:b9:a8:04:a1:22:12:ae:
         04:d7:23:5a:b3:97:40:34:95:d2:58:aa:0b:8a:23:7d:08:64:
         c2:ed:0a:aa:e3:d1:93:00:82:a5:49:1e:82:b1:08:53:38:f2:
         49:3f:dc:13:a2:5b:03:6d:c3:d2:11:30:5f:5a:8c:89:bd:2f:
         1f:9d:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:01 2026 by rpki-client