Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
File:                     QSplEc_tz-y1WQyWyMNh4v7USFc.mft (raw, json)
Hash identifier:          veGLry+0VGKZPqpiAzJVovD2gjZ4i4IuVoAu9TlvbjM=
Subject key identifier:   F6:19:BB:3A:B8:36:62:64:BD:F1:45:67:63:EC:D3:1F:11:DE:90:1F
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       6188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
Manifest number:          35AC
Signing time:             Sun 26 Apr 2026 19:43:12 +0000
Manifest this update:     Sun 26 Apr 2026 19:43:12 +0000
Manifest next update:     Sun 03 May 2026 19:43:12 +0000
Files and hashes:         1: QSplEc_tz-y1WQyWyMNh4v7USFc.crl (hash: DgaQMNoqgHzBYQFXsAspPABlbF1yytd5c0E3ghOh7vU=)
                          2: A4857438FC7C11EF9988DB39C4F9AE02.roa (hash: jatcPHhrDBROrQakEiDJXFQZ5JpqwULVe4xT2zI2DTs=)
                          3: EF536DB8F29811F08FD07DA76E6F56BC.roa (hash: 7GxaUpBAVXBP3MzOJEnWCr2bl0Ny3m8YiE3lQOn45iM=)
                          4: 3741E882335B11F09856AA2CC4F9AE02.roa (hash: LYbbVQ46Ne/STsWvbFXPA8yc6DEHROEOkCMpv3hy1s0=)
                          5: A365FCD0FC7C11EF9988DB39C4F9AE02.roa (hash: owgdhLxmkoTihidq8HpUExVzZ/HG8+uMWztVBCnqONM=)
                          6: FA554EAC2A4811F0ABF04B60C4F9AE02.roa (hash: zO8xxi5+wEo+YCIWIiBIwKwOm9GHs/oCWYbFOjKBJqE=)
                          7: 01A59B2EB72111EC9885AF51C4F9AE02.roa (hash: Eo53N7WI4SB/215kE2iQ/8tsmE6ERU72JMSY1b3oTi8=)
                          8: A6C119B4221011F09599EB53C4F9AE02.roa (hash: wkIr1NgVm1LLqgGBNO86vMWo4UHDYNJ/33NzwUpgo2I=)
                          9: 8FFA8D36FF0C11EA854DE24CC4F9AE02.roa (hash: HsPsvuGBK9SogOUxERs+Vgxk5WHq5QMJFgIZK/a9Ad0=)
                          10: A7432F4E221011F09599EB53C4F9AE02.roa (hash: 2lWcdwSsqnteN3cr8iI9TEJFzz97z0GHj2FcmUPcDqs=)
                          11: 882F06DEFF0E11EABBCCCF56C4F9AE02.roa (hash: nogjcEeLKI/bjkOxzOAcwH27Lq+dKCwt3K6wu8vPi/4=)
                          12: E27754123C6111F08D014F0AC4F9AE02.roa (hash: b23FRG3ZL+4a0wkil0yN0lGl3CKutHPSn21eXZNETBQ=)
                          13: DDBC2904F43811EB996EF71CC4F9AE02.roa (hash: ZPCP5+BVK1319I7lVCavW6RsvYZPU6g8U9apLmUEIac=)
                          14: 95B2E0261E7711F1B0920567023D8C67.roa (hash: CwivA99jyaKPFVnMgXdRQEam/8XnfwX5ntGzUDaXtOc=)
                          15: B991BA26335E11F082E02017C4F9AE02.roa (hash: C/mhkSj0dnFRg7bGI14DuK12u/2SWvj5VgzBVtgIPRE=)
                          16: 8A189A50115511F18399E378263D8C67.roa (hash: qx53yKuji/hMJTz7w4nT5tJznpM+UaszeH9eXKxPUdQ=)
                          17: AC32D0A0AD8311F0AE971C51C4F9AE02.roa (hash: +vDUeWFH66dBLW4FoPoF0Pru/bG9iEgA9+fbDIX/Bl8=)
                          18: B9F56378335E11F082E02017C4F9AE02.roa (hash: L839CdUmiNQVZFhzJNOslADvoUHvNuCECfV/fe0eltM=)
                          19: CADB5E342D2211EE87D1FB10C4F9AE02.roa (hash: 0skmBNM9BwZjrcs8PPJ5wWo+HqwM6hEGkjxBgQglrdQ=)
                          20: B2CE886C07B811F0992B401EC4F9AE02.roa (hash: 7FXMqZbBYa35QF1qyrsTfHzr5pQl21u7vKSCJZVNvWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 19:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24968 (0x6188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Apr 26 19:43:12 2026 GMT
            Not After : May  3 19:43:12 2026 GMT
        Subject: CN=69ee6ad0-4fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:25:04:90:55:4a:2a:37:bd:39:ff:4e:6a:4e:
                    95:e2:24:e5:75:43:25:62:d2:43:8c:b4:0e:c1:be:
                    22:26:84:04:03:f8:e4:b4:90:33:41:2b:5c:e8:df:
                    68:bf:2f:cc:68:95:46:56:40:24:cd:c0:91:88:54:
                    dc:0c:92:47:85:e6:70:82:4a:54:1d:6d:2e:32:7a:
                    7f:3c:eb:6b:46:c2:9d:b1:cb:d5:5c:5f:06:c4:b0:
                    77:73:5a:db:3a:75:b4:2d:de:ad:e2:d0:ac:8a:cf:
                    c5:e2:47:a5:e0:f4:13:32:f9:28:5e:91:46:7b:53:
                    0e:19:59:35:df:02:fb:b7:2e:7f:b7:4b:bd:fa:68:
                    c6:f1:54:a2:a0:1a:99:cf:99:c3:e4:5e:e8:e3:b2:
                    16:26:c5:18:1d:14:05:1a:dd:f2:43:5b:30:a0:1d:
                    c6:f3:48:ec:4d:d7:5a:1a:91:cf:5b:fb:11:96:6b:
                    5e:e8:67:f0:36:08:b3:09:07:e4:61:30:7d:98:aa:
                    46:0b:e5:75:8a:03:02:aa:23:8a:78:1f:e7:6f:c9:
                    12:4b:d2:17:c7:ca:a5:8a:10:ce:1f:29:7c:49:1f:
                    84:16:3b:1b:ce:a0:5d:5f:4a:e6:75:3c:c5:14:aa:
                    86:21:26:6f:a4:45:88:fc:0b:ac:c8:84:89:12:5a:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:19:BB:3A:B8:36:62:64:BD:F1:45:67:63:EC:D3:1F:11:DE:90:1F
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:d5:bc:0c:74:d8:53:64:d3:d1:9c:57:fb:fb:09:03:89:
         38:9a:de:70:0b:45:0d:ba:33:cc:d9:75:ee:19:a3:4d:8e:42:
         54:22:10:0a:7f:5c:6d:65:92:55:64:f4:23:f6:0f:0f:12:86:
         4a:b3:15:fd:0d:d1:67:4f:2e:ac:99:8d:6f:91:70:56:5b:b2:
         92:6c:36:fe:52:5d:58:83:da:c4:95:76:36:27:0e:5a:8a:d3:
         6d:64:4c:36:31:86:b1:50:e4:ea:87:10:bc:a3:3c:15:38:a6:
         1a:01:84:2b:24:3b:69:78:4e:2b:4a:87:26:cf:25:dc:00:f7:
         7c:5d:20:6b:68:a6:7f:5e:51:ec:99:65:07:3e:ce:ca:97:1b:
         3a:94:b8:b7:bb:3c:28:36:05:3e:85:b2:5b:89:d4:7a:13:71:
         2e:1a:7b:23:77:98:cb:8a:8a:cf:0e:ba:b9:ee:44:cb:c4:42:
         4e:d9:e5:06:a4:9a:23:81:4a:27:ac:cc:9f:8f:67:a4:0f:00:
         73:e4:9e:b9:bd:5e:4a:37:20:f3:57:bf:31:58:48:0d:82:92:
         d9:10:8a:87:17:a6:69:af:76:f8:31:74:57:4e:f7:01:5a:1f:
         8d:4c:b3:b6:4b:6a:9d:d2:1e:ac:55:dd:d3:17:54:a9:e9:f0:
         29:fc:5b:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICYYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy
RkVENDQ4NTcwHhcNMjYwNDI2MTk0MzEyWhcNMjYwNTAzMTk0MzEyWjAYMRYwFAYD
VQQDEw02OWVlNmFkMC00ZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiCUEkFVKKje9Of9Oak6V4iTldUMlYtJDjLQOwb4iJoQEA/jktJAzQStc6N9o
vy/MaJVGVkAkzcCRiFTcDJJHheZwgkpUHW0uMnp/POtrRsKdscvVXF8GxLB3c1rb
OnW0Ld6t4tCsis/F4kel4PQTMvkoXpFGe1MOGVk13wL7ty5/t0u9+mjG8VSioBqZ
z5nD5F7o47IWJsUYHRQFGt3yQ1swoB3G80jsTddaGpHPW/sRlmte6GfwNgizCQfk
YTB9mKpGC+V1igMCqiOKeB/nb8kSS9IXx8qlihDOHyl8SR+EFjsbzqBdX0rmdTzF
FKqGISZvpEWI/AusyISJElrlmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYZuzq4
NmJkvfFFZ2Ps0x8R3pAfMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1
QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTMyMy8wODREODhENDk1QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHot
eTFXUXlXeU1OaDR2N1VTRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVLzVvAx02FNk09GcV/v7CQOJOJrecAtFDbozzNl17hmjTY5CVCIQCn9cbWWS
VWT0I/YPDxKGSrMV/Q3RZ08urJmNb5FwVluykmw2/lJdWIPaxJV2NicOWorTbWRM
NjGGsVDk6ocQvKM8FTimGgGEKyQ7aXhOK0qHJs8l3AD3fF0ga2imf15R7JllBz7O
ypcbOpS4t7s8KDYFPoWyW4nUehNxLhp7I3eYy4qKzw66ue5Ey8RCTtnlBqSaI4FK
J6zMn49npA8Ac+Seub1eSjcg81e/MVhIDYKS2RCKhxemaa92+DF0V073AVofjUyz
tktqndIerFXd0xdUqenwKfxb+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 04:12:20 2026 by rpki-client