Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File:                     QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier:          7ppFU/JsXzfJwPtkeuXWSPKrKFU6aE5Dn++fh5b/xCE=
Subject key identifier:   9D:13:29:BB:B8:3F:53:D8:9B:B0:07:B2:7E:D6:8E:94:41:FE:52:9D
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       05C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number:          0DB7
Signing time:             Mon 04 May 2026 21:10:00 +0000
Manifest this update:     Mon 04 May 2026 21:10:00 +0000
Manifest next update:     Mon 11 May 2026 21:10:00 +0000
Files and hashes:         1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: sWckGw7V37l0/wIJRhHndyDIXqDBV5q7YTozzr+mBNM=)
                          2: A291634816B711ECBD752D47C4F9AE02.roa (hash: URyiGMrY2LwMKVOEbU+eXu56UFnP9xNvR4vUhX3bIHI=)
                          3: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: UBk250a9gXHO9ez4qLSlEuiZsLpkP12rAnXlTLR0TEs=)
                          4: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: xmxOOOmRoSh+TiszmT8uvDU9UG3tb8C8zUPGk1dc3Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1472 (0x5c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: May  4 21:10:00 2026 GMT
            Not After : May 11 21:10:00 2026 GMT
        Subject: CN=69f90b28-93b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:ba:60:11:99:14:d9:1b:c4:42:4a:09:e1:
                    82:04:7d:3c:11:af:6e:84:00:a1:dc:86:00:3f:19:
                    8d:8b:f1:62:73:cf:2e:df:d7:97:c0:16:3d:e1:de:
                    e2:11:eb:2c:9b:23:73:de:bb:01:65:92:6a:47:da:
                    64:5b:38:43:b9:4b:27:cd:f5:a6:bd:7a:e1:27:ca:
                    99:91:85:28:5b:bc:21:e4:31:22:b8:b1:2a:da:39:
                    7e:e0:35:d2:12:8c:bc:5d:bc:ca:d5:f1:f5:04:d9:
                    7b:52:57:f1:47:b4:40:09:03:9c:00:3d:d1:7a:2b:
                    97:40:bb:2b:bf:9e:21:e7:2e:6a:59:29:5e:04:a6:
                    a8:29:ef:cd:bf:bf:03:1b:4d:72:d0:0c:b3:54:be:
                    69:57:58:93:dd:f0:59:a0:5c:5b:d3:2d:4c:52:04:
                    23:11:c9:0a:72:54:6e:db:04:8e:c2:13:1a:22:e9:
                    fd:59:8b:f9:8c:fe:3f:4c:57:1e:fa:af:c7:9c:74:
                    df:22:b3:1b:f5:f1:b8:5f:34:ba:ae:2d:76:d5:56:
                    75:84:0e:ab:c4:0d:f6:13:73:82:3a:97:cc:d8:3b:
                    b1:ef:56:a9:ae:bf:cf:48:d7:ab:88:2b:a2:c2:4f:
                    7e:84:f6:b4:cf:23:4a:3b:6b:8b:42:c3:61:b2:d0:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:13:29:BB:B8:3F:53:D8:9B:B0:07:B2:7E:D6:8E:94:41:FE:52:9D
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4a:5a:d4:91:c1:bb:31:f1:fc:18:26:cd:77:3f:a8:4e:45:
         72:a6:03:0a:d0:ce:f1:d7:46:b4:26:64:50:d3:c4:61:8f:28:
         07:11:ec:cd:ba:9d:2e:ae:a3:93:ca:19:fb:c7:44:a9:e4:18:
         90:f8:3e:ab:46:3f:1c:1b:7f:23:d2:36:00:75:e8:c3:bd:a7:
         3e:f2:2a:2d:02:38:5e:14:69:4e:b3:be:0e:7a:0d:61:86:4c:
         88:d9:fd:97:97:db:55:e4:d7:36:6e:97:c8:bc:d0:53:00:98:
         68:fa:7f:67:0a:e5:2e:e4:2a:5a:62:41:41:05:b1:ca:ae:27:
         df:62:e6:13:e6:a7:a7:39:83:ba:dd:c6:bc:24:dd:0b:b6:07:
         ba:0f:3d:9a:ca:e4:41:ea:e8:d0:e9:1b:af:0a:ae:0c:93:81:
         18:8c:36:1f:b2:6e:ea:b0:6c:75:a4:b3:28:6e:6f:9a:c7:58:
         1c:c5:ba:65:64:c3:50:f3:2c:9c:bc:9d:4d:39:f4:64:33:70:
         31:11:c0:35:b7:23:ce:31:9c:01:27:19:bf:1b:1a:05:10:25:
         de:d0:54:82:28:3a:40:08:bb:f1:5e:5d:04:3a:04:ef:c9:2c:
         07:fa:d3:8f:73:11:42:65:39:2b:d3:71:89:a9:d4:50:0e:33:
         8c:a1:91:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:27:50 2026 by rpki-client