Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
File:                     QN1mK29ul7NNO3WoAH3lOI2SclM.mft (raw, json)
Hash identifier:          BgMzngID97MuRPw9dOsKe8ZBmE6u1j3BuZ+KuFB/FH0=
Subject key identifier:   A9:46:D8:36:5F:B5:2F:CA:C0:BC:4A:4A:88:4D:56:84:03:2F:D0:0D
Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
Certificate issuer:       /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Certificate serial:       06F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
Manifest number:          06F0
Signing time:             Sat 18 Apr 2026 22:00:17 +0000
Manifest this update:     Sat 18 Apr 2026 22:00:16 +0000
Manifest next update:     Sat 25 Apr 2026 22:00:16 +0000
Files and hashes:         1: QN1mK29ul7NNO3WoAH3lOI2SclM.crl (hash: 3nFtnAStZYzCw0G5WEzzcsCb5VdZJ8oXWupioqSxqEc=)
                          2: 85613B4E8C8411EBB68DD829C4F9AE02.roa (hash: MHi4TFFkjk45IS82Lk1zkWvvF71n/wv3X8tPB3ZA4gQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
                          rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 22:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785 (0x6f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CF44, serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
        Validity
            Not Before: Apr 18 22:00:16 2026 GMT
            Not After : Apr 25 22:00:16 2026 GMT
        Subject: CN=69e3fef1-bf41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:08:b3:81:98:f4:f6:63:70:79:b2:2c:76:
                    49:b7:14:79:2b:e9:c0:20:53:d8:17:12:30:84:c3:
                    8a:d8:0e:80:d5:61:5e:e5:32:b1:e0:38:27:c4:dc:
                    6c:fd:5c:31:ea:19:a5:50:ef:58:3f:ed:0a:91:7b:
                    cd:17:db:3c:82:d2:b1:d7:45:17:8b:76:22:b0:d9:
                    dd:57:e8:e9:b0:fb:6f:25:d8:4f:2b:71:ef:a6:27:
                    23:53:02:c0:0a:12:dd:e7:b5:8e:47:60:71:70:9b:
                    b5:67:38:32:d4:31:c9:42:89:bb:51:67:cb:3f:94:
                    c1:91:45:d7:80:49:50:08:bc:6c:b3:8f:36:cf:1b:
                    7d:57:3e:59:bd:96:df:66:d8:09:ba:2a:66:a7:a3:
                    ec:4c:3b:a1:48:8d:c8:2a:e4:a2:77:67:91:6f:01:
                    12:e7:47:1a:a6:9d:a2:ed:12:4c:89:42:0c:98:5b:
                    68:62:90:0f:6c:32:8c:e4:77:18:aa:bb:c4:74:b2:
                    9c:80:a3:36:f4:db:98:ab:9e:8e:e1:53:00:ac:04:
                    56:da:47:7e:65:07:e1:0f:c9:90:5e:49:e4:93:18:
                    bb:15:8a:f6:7d:16:04:20:f2:19:f5:dd:7a:d4:08:
                    05:6e:d6:63:0b:13:fc:bf:1c:40:63:fd:53:78:df:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:46:D8:36:5F:B5:2F:CA:C0:BC:4A:4A:88:4D:56:84:03:2F:D0:0D
            X509v3 Authority Key Identifier:
                keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:73:0b:c8:08:77:b8:df:8e:28:52:84:e0:4f:93:87:30:68:
         a7:cc:f3:bc:5e:18:a3:b6:06:da:9e:51:66:cf:a9:76:4b:8e:
         01:cc:f4:63:c1:ca:13:54:9d:36:26:87:ee:04:34:27:69:86:
         d8:a5:ff:d3:60:a8:a8:09:8a:bb:2f:af:9e:bb:db:41:70:83:
         9d:1b:34:a9:c7:0f:4a:a8:a9:7c:57:a9:21:bd:4b:e7:67:e1:
         1f:65:bb:17:89:ee:f2:f1:06:a8:75:3a:3d:c5:7e:78:0b:7d:
         a9:ba:c5:84:b4:5c:00:70:f6:f0:f9:e7:d7:03:1c:a9:27:f1:
         8b:2c:4f:76:86:78:66:53:07:bf:f1:a8:7a:d0:46:b2:56:71:
         f8:d2:2c:f3:a9:a9:60:0b:7a:bc:5d:1a:b5:32:fd:e0:c2:c6:
         96:72:11:69:44:1e:9f:e8:71:98:db:53:87:cc:6e:d4:81:92:
         64:7d:21:03:a1:c6:24:4d:50:af:05:5c:aa:c9:e1:5d:5a:73:
         c7:d9:f6:42:49:a3:50:fe:74:e9:7c:d2:7b:22:34:45:74:51:
         f9:b4:4b:0c:2f:18:77:9c:7a:1f:38:67:45:32:7d:4d:90:60:
         2c:8e:ee:e0:be:9f:0d:7f:98:a3:43:0e:7d:8b:04:ad:35:d5:
         c5:41:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:21:43 2026 by rpki-client