Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
File:                     QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json)
Hash identifier:          cC7Cgzq0JgxH2iV8GzRKrKMstdnv0tQuem03YjirEYI=
Subject key identifier:   DA:57:19:99:8D:01:06:A1:11:0F:1E:8B:B9:7D:5F:78:E7:7B:74:C1
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Certificate issuer:       /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial:       04F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
Manifest number:          04ED
Signing time:             Mon 20 Apr 2026 23:39:58 +0000
Manifest this update:     Mon 20 Apr 2026 23:39:57 +0000
Manifest next update:     Mon 27 Apr 2026 23:39:57 +0000
Files and hashes:         1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: B+D51J3hrLsfyMxiWrieAbszQ5L+3wvVT9WWNgnTNvI=)
                          2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: F+I43DaEg4RPjKbDgo7LbT/oq9DuBWqE4SqCTrHW1b0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
                          rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 23:39:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
        Validity
            Not Before: Apr 20 23:39:57 2026 GMT
            Not After : Apr 27 23:39:57 2026 GMT
        Subject: CN=69e6b94e-98ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:de:ae:22:4d:b0:de:2d:00:26:40:bd:6e:b3:
                    42:62:e3:e5:ca:b1:ee:0d:b4:4f:bb:a3:e4:40:8e:
                    df:9b:dc:6f:27:04:66:78:bd:92:02:59:5c:1d:5d:
                    19:e3:7d:2c:c2:67:df:5b:e8:e4:37:49:02:13:0f:
                    92:1f:f0:96:40:3d:65:80:3e:76:35:22:c2:b0:be:
                    b8:2b:25:12:a8:ee:52:27:40:a6:26:77:9c:f5:dc:
                    de:3d:6a:9f:59:54:df:bf:ac:b3:2b:a8:0d:e8:ac:
                    72:10:0c:f0:25:4d:99:f0:b2:2c:48:48:a4:3e:9c:
                    88:bc:d9:01:48:59:5b:b0:8a:34:5e:2c:ff:ae:a5:
                    52:a2:d3:81:e1:c4:33:f6:69:fc:76:96:d4:1e:08:
                    cc:94:85:01:a3:b7:3c:b6:9c:8b:7b:40:68:66:22:
                    17:32:d4:66:cc:98:d0:7f:89:bb:b0:8c:7b:2e:26:
                    5f:6f:b7:4f:96:c5:12:5c:3b:fb:b9:5f:41:81:52:
                    6b:8d:d6:a6:ca:c6:2c:88:01:a3:96:93:f3:34:d8:
                    61:38:83:92:e2:0f:0c:5d:12:f3:c4:9e:6d:ea:04:
                    19:05:49:8c:96:ec:01:68:06:45:02:d5:0d:ee:f8:
                    5f:45:3c:80:5b:b8:b5:a1:b4:59:fc:8b:59:f0:6b:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:57:19:99:8D:01:06:A1:11:0F:1E:8B:B9:7D:5F:78:E7:7B:74:C1
            X509v3 Authority Key Identifier:
                keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:51:69:a1:a5:fc:30:3a:7b:b4:e7:e9:5e:9f:c3:d1:8c:92:
         02:36:b4:85:22:69:48:1b:1e:bc:07:98:21:89:96:e6:1b:b7:
         16:8a:f0:25:95:90:86:df:70:f2:2e:4a:fd:29:de:ac:a1:3e:
         30:75:27:0f:f1:76:46:d9:d4:21:7e:fb:7f:31:cf:c0:a0:cd:
         8c:8c:62:bc:b2:76:14:34:df:a5:68:4f:ea:c0:f6:85:79:78:
         6c:04:e7:d0:c9:6b:25:63:39:ae:ca:ec:fb:cc:df:9f:45:c9:
         28:55:f1:a6:63:f5:fb:ef:2c:d2:8c:ac:5b:26:9e:8a:76:2f:
         89:a6:5f:83:fb:02:ec:e6:d4:04:0c:b5:54:47:f6:86:00:dd:
         96:70:d2:43:5f:a2:75:e8:cc:30:1a:56:25:0b:44:fc:b5:3e:
         61:fc:6c:5b:63:c2:86:0d:fa:ff:0e:e0:9b:04:44:26:e0:27:
         9f:28:7e:82:7b:36:4f:e0:ef:8a:97:c8:48:06:e9:0e:6b:7e:
         8d:5c:93:8f:ea:92:a9:34:f6:21:aa:96:29:20:93:63:04:05:
         7f:39:af:ca:40:fe:f4:3e:15:fc:90:19:9b:2c:b5:80:45:17:
         75:f3:3a:36:24:9c:45:ce:79:a7:fd:f8:6b:ac:78:92:bf:55:
         0d:82:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:00:11 2026 by rpki-client