Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
File:                     QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json)
Hash identifier:          ZlTHZFkOVltAwX3L4blbtgAh84Uum9dqglfv9OfWlGc=
Subject key identifier:   73:41:A3:A0:30:89:9D:8A:BF:2F:D3:F1:91:4C:AB:93:C3:6B:EC:9B
Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
Certificate issuer:       /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Certificate serial:       135D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
Manifest number:          48CC
Signing time:             Thu 04 Jun 2026 14:21:20 +0000
Manifest this update:     Thu 04 Jun 2026 14:21:19 +0000
Manifest next update:     Thu 11 Jun 2026 14:21:19 +0000
Files and hashes:         1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: /e8HF3T8tbbJpJcVfDyOAzWmRKuEEL5viKXNiIfjzuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 14:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4957 (0x135d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
        Validity
            Not Before: Jun  4 14:21:19 2026 GMT
            Not After : Jun 11 14:21:19 2026 GMT
        Subject: CN=6a2189e0-11f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:44:2f:ea:1b:7a:2e:63:1e:d8:12:ff:0e:
                    74:50:68:5b:4b:6d:b2:be:8d:63:16:f1:72:db:e9:
                    f2:52:c6:87:3b:57:92:68:c4:04:f2:fc:94:fb:66:
                    2b:8f:6e:ae:6f:b0:37:76:54:66:49:82:18:1c:14:
                    69:84:8b:61:2b:79:17:ef:e7:61:40:b0:36:30:e9:
                    90:cb:bf:9b:01:2f:d4:27:d9:65:63:75:57:ff:fe:
                    2b:0f:45:00:b7:8a:42:62:1c:b7:74:f9:67:58:9a:
                    cd:ad:92:75:9f:9d:77:c9:e3:17:61:f8:61:42:32:
                    01:c5:7b:b1:17:d5:cb:09:a5:dc:e7:46:ef:fc:a6:
                    df:61:85:a1:f3:0c:ef:79:e6:bb:70:b0:02:df:92:
                    72:d7:b3:41:93:aa:5b:c0:06:e7:9a:28:da:3c:31:
                    07:c9:a5:8b:68:c3:52:30:9d:26:f3:a6:a6:2d:58:
                    18:82:e8:62:1a:41:80:c9:d8:53:dd:00:dd:be:a4:
                    c6:fb:06:c6:f1:3e:bc:a3:34:80:ff:32:67:cb:34:
                    06:a4:24:3f:df:b0:b8:7f:68:2c:c6:9e:74:be:f1:
                    31:82:34:cd:61:2d:d5:b6:27:74:0a:59:43:d1:10:
                    99:35:d7:c7:e8:4b:d7:ac:56:22:36:62:15:ec:86:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:41:A3:A0:30:89:9D:8A:BF:2F:D3:F1:91:4C:AB:93:C3:6B:EC:9B
            X509v3 Authority Key Identifier:
                keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:96:d8:0e:81:9a:50:df:61:da:fb:d3:6f:f3:46:96:88:f8:
         5a:16:1f:e2:5f:44:c6:48:f0:30:ac:dd:84:d6:6c:ae:58:76:
         59:9f:41:00:71:7b:76:d1:78:95:6f:88:24:8f:5a:04:a4:67:
         ab:f9:a4:27:a7:24:75:1c:31:e0:5e:fe:0f:b1:da:1e:c3:2f:
         08:47:1a:79:1f:8e:b3:8b:49:8f:20:ab:1e:bc:78:ae:b6:b9:
         02:88:32:a8:40:c5:7f:39:e0:82:5c:11:79:d6:2a:44:d0:ca:
         94:d0:c5:08:d2:74:85:b8:8e:06:87:ae:70:54:10:06:bc:d3:
         0c:4b:fe:f9:96:27:2a:ad:52:1d:03:b8:8d:17:28:14:b9:29:
         16:b1:2a:3f:29:75:1d:8f:96:e6:76:b8:2e:24:ae:be:dc:6f:
         24:b8:14:ac:7a:71:a9:3c:b2:ed:39:4a:9d:86:f6:bf:b2:1a:
         32:f4:bb:f6:33:b7:de:4e:19:40:c8:3d:7f:74:a8:dd:eb:e0:
         37:1a:c5:bf:9e:82:66:e3:aa:f4:30:cb:11:20:62:f1:aa:a1:
         ec:5b:c8:eb:8b:82:77:6f:d3:da:6b:28:1d:02:bc:08:68:08:
         13:1c:f1:55:9f:25:2e:9a:75:e5:70:73:aa:fa:dc:01:bd:02:
         5b:38:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:11 2026 by rpki-client