Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File:                     QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier:          CmuykcEIT1crjlz0tIjpZgapRcdp2lpaPEytWy/CaGk=
Subject key identifier:   86:47:0C:CA:86:5F:81:1B:0C:F2:2B:84:4D:36:20:1C:4D:8F:DC:14
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer:       /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number:          BF
Signing time:             Mon 01 Jun 2026 07:45:37 +0000
Manifest this update:     Mon 01 Jun 2026 07:45:37 +0000
Manifest next update:     Mon 08 Jun 2026 07:45:37 +0000
Files and hashes:         1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: E6FjTwrbvrL8S+oDw9qoJ5hHF0zTyalXSMg5Yxs5Y9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
        Validity
            Not Before: Jun  1 07:45:37 2026 GMT
            Not After : Jun  8 07:45:37 2026 GMT
        Subject: CN=6a1d38a1-9dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:5c:99:0b:a4:46:62:aa:6d:01:a1:a8:d0:
                    55:01:91:fd:d6:b5:b1:be:04:8e:12:8e:82:30:86:
                    5c:0d:96:fe:88:28:1f:20:bf:cb:bb:2a:81:6a:33:
                    da:a1:42:eb:9f:7d:e1:d0:30:7b:d1:8f:69:8f:73:
                    4d:c2:21:17:c2:07:7c:30:fb:d5:ac:0c:a4:50:b3:
                    39:4e:2c:25:a3:06:64:66:7b:c7:32:1e:21:69:40:
                    42:cf:02:3e:a1:64:b5:14:21:00:50:e9:dd:2d:b5:
                    9d:2e:a8:08:30:40:85:60:9d:3d:14:e2:41:5b:5f:
                    af:6c:33:bc:e7:83:5e:5e:5a:2a:c1:7c:07:67:19:
                    31:b2:91:0f:a8:03:68:ae:09:7b:24:aa:9c:4b:ea:
                    b6:2d:9f:e1:93:70:37:49:71:d4:4a:d1:41:ef:cf:
                    28:59:6b:c5:61:c5:32:0a:de:37:11:99:6a:79:4c:
                    8b:30:80:21:ba:aa:9e:11:5b:5a:75:4b:5d:cc:91:
                    70:75:b9:07:40:8e:2d:2a:1c:6a:9c:f2:91:fe:5c:
                    b9:2b:5c:b4:55:99:7d:42:b9:db:af:b6:d2:ee:ed:
                    7e:2e:2f:60:0e:0a:24:5c:fe:28:af:9f:50:ec:2b:
                    bb:7d:b1:e4:bf:2f:4c:38:c0:b7:3f:4f:c5:16:4f:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:0C:CA:86:5F:81:1B:0C:F2:2B:84:4D:36:20:1C:4D:8F:DC:14
            X509v3 Authority Key Identifier:
                keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d2:d3:85:05:b2:1c:0f:c1:e4:21:21:23:c6:bf:12:21:6e:
         52:ea:10:5f:68:fa:84:85:bb:46:34:a5:28:68:9a:d1:30:83:
         1e:69:26:8f:5c:9f:8b:99:76:a4:05:1c:c4:8a:cd:5b:b2:ee:
         1d:84:84:10:33:7d:07:22:98:03:c9:04:b0:da:fa:6c:b3:de:
         05:39:6c:76:cb:5d:77:52:43:fb:d4:0b:93:69:d3:2b:71:8a:
         80:b9:4e:09:09:ea:7f:9a:51:48:3d:94:1a:9b:0b:d9:25:1a:
         8e:7a:99:0d:9a:d3:dc:8b:10:28:be:1d:77:53:57:e2:72:10:
         e4:0c:ed:92:60:26:f7:f0:46:46:d0:36:3f:79:37:6c:b9:a9:
         77:a8:0b:f9:a2:bf:e2:8c:0d:0a:76:75:51:cf:19:20:1f:44:
         cb:df:1e:e7:8d:41:4f:ae:b5:6c:c1:a0:13:eb:6a:ce:0e:60:
         17:60:f7:f3:df:13:3c:eb:75:39:53:4a:51:41:80:14:b8:d3:
         1a:ca:88:6c:3f:27:de:b0:1a:6d:9c:c3:f5:cc:94:db:c8:a9:
         05:aa:b4:88:6f:46:f5:29:4c:62:3a:da:d9:3d:77:4e:ec:49:
         df:e0:6c:ea:b4:9f:0a:47:f0:67:8d:3e:54:dd:fc:27:4f:c4:
         c5:55:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:44 2026 by rpki-client