Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
File:                     qUY-3mcgvjW60R9aiYbbsXpMMqs.mft (raw, json)
Hash identifier:          F7M+Rt7YlVsK9phHGYoWnFy2l9o4sobrQzvYtr6Uphk=
Subject key identifier:   08:8A:AE:0C:57:B5:0E:E5:DD:ED:6A:EA:9C:0A:A1:37:32:16:04:2D
Authority key identifier: A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB
Certificate issuer:       /CN=A91F8AD4/serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
Manifest number:          04
Signing time:             Mon 01 Jun 2026 10:01:52 +0000
Manifest this update:     Mon 01 Jun 2026 10:01:51 +0000
Manifest next update:     Mon 08 Jun 2026 10:01:51 +0000
Files and hashes:         1: qUY-3mcgvjW60R9aiYbbsXpMMqs.crl (hash: mXfamTq2SSt1kwylmkj+SA866P2S9sWQL+UuuQyVyzI=)
                          2: 0DD665AE5B6411F1BCACB5ED9D833773.roa (hash: Zw6PGn1J7/f1qbg4N3OXHky/Z2t3N4xuVTg/093VRwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl
                          rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 10:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8AD4, serialNumber=A9463EDE6720BE35BAD11F5A8986DBB17A4C32AB
        Validity
            Not Before: Jun  1 10:01:51 2026 GMT
            Not After : Jun  8 10:01:51 2026 GMT
        Subject: CN=6a1d588f-47c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:43:e4:0e:d8:bc:6f:be:fa:c1:a4:4c:41:6f:
                    4a:57:c3:58:35:e5:6a:1f:de:6e:64:72:7d:65:fa:
                    ae:e7:4d:29:bf:3d:2f:f5:77:8f:e1:88:82:26:0f:
                    f0:31:2c:5e:e7:58:b9:9a:fa:9f:87:40:ba:e4:b5:
                    de:00:45:ef:6a:cc:e6:dc:28:f7:90:d1:3b:57:f8:
                    71:46:1d:08:4a:fe:4d:04:8c:d6:2d:c7:1e:5b:52:
                    55:cf:b7:95:22:c8:9f:26:3f:14:1d:b0:de:f2:4e:
                    8c:29:f2:ce:5f:bb:93:e3:cb:84:5d:38:9a:d3:19:
                    aa:0a:5c:be:64:ce:b1:87:8f:6b:80:24:17:d6:b9:
                    78:07:87:2b:35:93:8e:10:13:f5:20:cd:e5:76:11:
                    14:c9:5f:74:58:f3:e7:d5:c8:76:50:79:36:a5:a2:
                    56:a4:d6:31:32:3f:9f:cb:75:36:e4:70:30:75:f5:
                    13:0a:fb:35:04:aa:57:3f:b9:9e:3c:92:45:7e:20:
                    dd:5c:7e:60:22:a0:0d:61:86:87:c4:fe:c8:97:b7:
                    50:64:dc:3a:b1:e7:77:79:6a:8d:c5:6a:8d:7e:1b:
                    28:9b:82:24:3b:28:4a:31:67:0c:be:82:64:77:c2:
                    41:fd:b6:87:a8:1d:02:26:94:75:5d:08:e8:17:05:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8A:AE:0C:57:B5:0E:E5:DD:ED:6A:EA:9C:0A:A1:37:32:16:04:2D
            X509v3 Authority Key Identifier:
                keyid:A9:46:3E:DE:67:20:BE:35:BA:D1:1F:5A:89:86:DB:B1:7A:4C:32:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUY-3mcgvjW60R9aiYbbsXpMMqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8AD4/AA1230E45B6211F19340B9EE9C833773/qUY-3mcgvjW60R9aiYbbsXpMMqs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:7c:d7:47:47:3a:4e:23:da:79:b3:3b:7b:59:87:e7:22:0d:
         52:71:91:80:ca:a4:66:f5:dc:e1:3a:88:ba:62:fd:92:66:b8:
         19:38:47:7a:ab:00:ec:67:be:2e:f6:07:e2:52:e7:34:9b:b0:
         b4:ce:2b:69:2a:a4:85:22:a3:61:5c:b3:d8:49:8f:95:29:82:
         63:4c:52:1f:d6:98:c4:23:2a:9c:44:ae:58:3e:b1:a4:d6:8e:
         41:00:33:09:c5:b6:fa:fb:6d:66:22:8d:43:9a:bc:05:1c:9a:
         02:e6:57:55:c0:58:c3:db:ab:72:0e:bb:27:c0:e1:e6:07:e1:
         22:98:41:67:6d:8c:67:e7:af:19:84:23:1c:1f:44:6f:78:a0:
         15:25:38:5e:cc:95:9b:c7:1e:9c:c3:c3:92:39:59:30:49:29:
         68:00:1d:24:64:cd:8f:34:c7:91:91:f0:27:76:0c:92:34:e6:
         e7:13:2b:be:3b:51:55:cc:0b:7e:17:e6:52:a9:5c:6b:6f:24:
         23:97:2e:46:ac:f6:ff:e6:6f:ff:f1:d7:38:c3:41:76:83:ac:
         87:be:be:35:60:f4:d3:31:c9:bf:b8:08:99:23:65:5c:e9:4e:
         f2:ff:ec:2c:73:ac:31:37:df:39:f0:15:e8:03:ba:b1:9d:cc:
         34:a7:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:08 2026 by rpki-client