Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
File:                     Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json)
Hash identifier:          3WZDsW/n9OC594pFbtqFgNEjx/F3hl98t8N61drw++g=
Subject key identifier:   8C:09:BD:FD:82:2E:60:EA:94:FB:90:4A:09:86:0C:EC:55:76:74:19
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Certificate issuer:       /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
Manifest number:          F7
Signing time:             Fri 17 Apr 2026 05:58:34 +0000
Manifest this update:     Fri 17 Apr 2026 05:58:33 +0000
Manifest next update:     Fri 24 Apr 2026 05:58:33 +0000
Files and hashes:         1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: QNbkGbYmzeZ7dRhyFUWzLscwovEU8z4T/H4RjZtIz4U=)
                          2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: 8tYgQgRp4d2ZPoYvXeSoALvp6R7P/24619a0Wb2QQ3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
        Validity
            Not Before: Apr 17 05:58:33 2026 GMT
            Not After : Apr 24 05:58:33 2026 GMT
        Subject: CN=69e1cc0a-f7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:7f:ff:f6:e1:8b:24:75:9f:a8:03:a6:90:
                    1a:14:b5:e6:22:ff:7e:fb:aa:25:f5:67:e3:c2:c1:
                    37:92:c1:a9:e3:ff:10:9d:c1:68:48:85:28:6c:1b:
                    8c:67:43:50:c0:20:66:df:ca:c3:6c:84:29:a7:aa:
                    22:02:81:e2:1c:76:8c:73:6a:e1:95:71:3d:18:dc:
                    fa:42:b8:08:e9:d4:80:c0:b9:20:b2:65:b8:ee:20:
                    50:86:e7:24:11:a0:74:c4:30:92:df:9e:47:8e:64:
                    76:82:d4:e7:39:cc:7b:b3:02:8d:13:2c:01:86:96:
                    81:ce:a1:e1:7a:a1:a3:00:7b:1d:55:51:0b:4b:aa:
                    f4:ad:e2:ea:9d:11:02:70:68:2e:0d:26:e1:f6:4a:
                    f0:df:62:d8:b0:22:c3:0b:6b:50:89:19:12:25:ff:
                    ad:dd:ab:6f:dd:91:b1:65:41:51:af:99:93:ca:57:
                    ae:ed:8f:f1:83:8d:22:26:12:d0:16:bd:c6:4d:76:
                    63:16:b0:ca:fc:57:75:28:e9:2d:34:08:8b:2f:e3:
                    15:6c:a9:4f:14:e7:76:06:d1:bf:9a:6a:eb:c4:30:
                    47:31:4d:d8:71:77:98:42:97:9b:d9:14:6c:2b:28:
                    02:2d:26:7e:58:f1:3c:6e:4d:40:cf:51:56:76:91:
                    34:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:09:BD:FD:82:2E:60:EA:94:FB:90:4A:09:86:0C:EC:55:76:74:19
            X509v3 Authority Key Identifier:
                keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:eb:e0:dc:55:4a:99:6e:c6:3e:e0:bc:30:6b:a4:5e:9c:
         f3:9f:3b:71:1a:6a:ff:ca:bb:e6:aa:fb:fd:ed:16:e6:12:e7:
         9a:81:b0:56:77:bd:65:1f:59:55:48:2e:15:45:55:8c:92:83:
         6e:ee:a8:13:07:d7:67:40:6c:48:08:6b:42:40:a5:38:29:8b:
         92:83:bc:af:b9:63:5b:79:6f:a7:4a:3a:e9:7d:ec:52:1b:21:
         60:51:22:7f:a4:c1:48:d3:2d:d9:a0:42:47:26:fc:6b:95:e4:
         d2:6d:a6:fe:11:38:49:8d:e5:03:07:47:d6:3a:7c:56:01:ed:
         03:6a:a2:fd:ba:9c:e4:01:7d:37:bc:c7:5f:23:32:3b:33:18:
         4e:87:ca:30:ec:a0:7c:a4:d5:60:3e:53:a7:85:00:a9:e3:c0:
         5d:ff:67:77:79:ad:2b:4e:ae:07:83:04:b7:e7:19:60:29:17:
         d0:50:a3:ea:be:66:1f:63:c9:7e:78:9a:66:fb:e5:92:5a:30:
         41:7a:be:f6:b6:4c:a5:a6:6a:6b:05:f8:4a:01:1d:75:65:4e:
         b7:e6:de:a8:f5:15:42:29:2e:8d:41:cc:41:ae:c8:fb:35:64:
         a5:94:33:73:fa:1a:7f:25:fd:bf:d0:bb:a4:d4:a8:4b:82:a9:
         2c:dd:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:34 2026 by rpki-client