Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
File:                     qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json)
Hash identifier:          jMo0h2cRhBJA7n44ejzq5IG4pH2qf3PHRTluAjjZuig=
Subject key identifier:   FF:94:C6:B4:7D:57:21:35:D5:30:12:86:48:DD:6C:5A:A8:DE:05:0D
Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
Certificate issuer:       /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Certificate serial:       0699
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
Manifest number:          0691
Signing time:             Thu 16 Apr 2026 22:22:33 +0000
Manifest this update:     Thu 16 Apr 2026 22:22:33 +0000
Manifest next update:     Thu 23 Apr 2026 22:22:33 +0000
Files and hashes:         1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: ICECF9eNoudO7O/sxvaJ6qplwuRWzJnz2C2/ahHMjLQ=)
                          2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: fipC8fnuwGfyjeMJXsenerqMyqmtrvp5/f9MWaX5s6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
                          rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
        Validity
            Not Before: Apr 16 22:22:33 2026 GMT
            Not After : Apr 23 22:22:33 2026 GMT
        Subject: CN=69e16129-b384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a5:75:ad:bc:3d:a5:d8:16:65:02:63:f2:1b:
                    1e:ea:eb:cd:0c:45:02:e0:44:03:b2:97:df:4a:d2:
                    c4:02:17:51:28:5c:36:1c:d0:e0:73:3b:8d:58:df:
                    76:a1:23:9d:69:09:51:33:6a:c1:3f:49:5c:a3:06:
                    04:e4:5d:9d:66:7d:c2:50:a8:c7:ef:12:f2:5c:fe:
                    a1:4c:9e:71:63:a4:09:9f:a7:57:80:1c:6a:39:5f:
                    7d:8e:79:09:9c:01:d0:0c:e7:dd:4c:b0:4f:8f:71:
                    9a:bc:de:96:79:7f:e8:46:f8:04:2d:d2:2a:b0:9d:
                    b9:0f:0f:45:2e:a1:cb:53:9d:7b:b7:96:05:35:4b:
                    26:2b:47:12:b4:26:3e:08:ef:cf:23:95:13:6e:21:
                    4e:9d:e2:fb:d2:b6:76:91:94:19:bd:1a:09:f7:28:
                    6c:36:b3:7c:ca:31:31:e9:3a:03:6e:62:ed:46:52:
                    34:c6:ab:f2:db:cb:a9:45:0c:5c:ad:10:5f:4e:1c:
                    3f:a5:99:27:dd:40:6d:b5:6c:c2:36:db:6c:42:08:
                    90:77:2d:e3:e0:eb:e7:d8:79:b1:7d:6e:1c:d0:01:
                    3a:01:84:03:53:ff:ad:6a:89:6a:7d:34:9b:99:db:
                    53:2f:66:52:ef:c5:c6:73:4a:d0:3e:bd:c1:3e:47:
                    3b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:94:C6:B4:7D:57:21:35:D5:30:12:86:48:DD:6C:5A:A8:DE:05:0D
            X509v3 Authority Key Identifier:
                keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1c:bc:bd:02:4e:e3:25:16:59:2c:90:f5:f6:cb:99:44:f1:
         0f:f6:63:59:6d:66:dd:db:c2:53:64:bd:0e:f2:05:09:34:52:
         84:a5:76:4a:b5:f8:eb:46:19:a9:ec:a1:1e:14:2a:14:8d:2d:
         ef:75:2b:b7:c2:31:3b:72:f3:f5:71:03:ec:81:82:70:21:09:
         98:ee:71:17:e0:a3:ad:5a:34:20:c6:d4:38:c0:f9:ce:68:e9:
         a8:e5:d4:1a:b9:f0:95:51:0b:c9:38:f9:01:69:f4:e0:6d:b0:
         d9:ac:3a:86:f6:d7:00:cc:47:43:63:80:3d:ed:b9:77:69:51:
         11:c5:5c:0e:19:f5:df:18:45:f3:f4:0c:92:63:3a:c6:95:4d:
         f1:88:60:52:b1:2b:aa:dc:cc:d2:3e:28:8c:ca:72:00:d2:94:
         d0:7f:e4:ea:34:e5:44:24:e7:d7:3b:97:ff:6b:d0:21:bc:25:
         77:f7:17:b5:70:b0:6c:11:75:b8:7f:67:98:fa:61:7d:7e:7d:
         6f:0b:ba:2a:10:6a:ce:b8:f5:82:fd:46:c2:0b:de:49:8d:d9:
         c5:93:5b:07:fb:7a:b5:32:42:4e:3b:a9:ac:1d:37:5a:65:80:
         a0:bc:03:8c:0b:cc:ad:84:c3:03:87:1f:5b:5d:fe:36:c9:23:
         18:39:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:43 2026 by rpki-client