Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File:                     qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier:          lKDjLBnwxUux0fBtewSIWJBb5rCk/eLXWCD39NsmZ0o=
Subject key identifier:   A7:64:AE:EA:F4:DF:80:1B:EB:7D:97:E7:32:0F:04:CE:5E:D7:2C:A1
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer:       /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number:          0251
Signing time:             Fri 17 Apr 2026 02:12:09 +0000
Manifest this update:     Fri 17 Apr 2026 02:12:08 +0000
Manifest next update:     Fri 24 Apr 2026 02:12:08 +0000
Files and hashes:         1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: rr/WosC+WLPUOeefUQwz9cJEtddKYll+Rh767gonr1Y=)
                          2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: Q3iqUPNxpMUTGIgTwjjfM3K9Qqme00bVcKDIrn27a8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
                          rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
        Validity
            Not Before: Apr 17 02:12:08 2026 GMT
            Not After : Apr 24 02:12:08 2026 GMT
        Subject: CN=69e196f9-d0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:cf:1e:92:f0:be:83:b8:44:cc:f1:d2:e0:
                    85:29:72:85:4d:2f:ba:02:54:e7:7b:08:c9:8c:d5:
                    72:ae:c3:f9:f5:9d:5d:b1:b5:71:98:4c:e4:74:21:
                    e4:ab:0f:f2:f7:77:0d:9a:73:42:43:b7:c7:4a:81:
                    23:3e:b0:a7:17:d1:29:9e:e9:a6:d1:34:5b:07:c1:
                    fa:fe:c9:a6:d0:97:c8:29:6f:bb:8b:1c:4b:77:e7:
                    2e:b7:a4:06:04:81:e8:d5:3d:33:e7:17:20:0a:a6:
                    74:96:d9:e7:60:1b:db:11:ff:cd:7e:96:7d:3b:f3:
                    31:67:65:9b:5c:f7:94:43:20:48:a5:17:42:61:54:
                    39:14:f9:31:49:de:9a:c6:08:ed:a0:43:55:25:5c:
                    40:9c:0d:cd:03:df:e1:76:40:4b:1c:67:d5:d8:64:
                    95:72:f3:33:6b:24:61:69:d2:25:02:e3:36:86:b5:
                    62:ec:b9:04:28:7a:30:da:df:62:93:aa:6b:97:e2:
                    16:27:9d:a0:db:e4:de:c9:5d:f1:1b:12:c9:ce:9b:
                    16:97:9c:71:18:11:31:02:c0:ef:cd:58:a7:de:e8:
                    08:1b:8d:6f:ed:9c:2e:55:01:c7:ca:48:c2:c5:82:
                    4d:c7:8e:12:2c:4e:83:67:ff:eb:d1:26:54:a3:60:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:64:AE:EA:F4:DF:80:1B:EB:7D:97:E7:32:0F:04:CE:5E:D7:2C:A1
            X509v3 Authority Key Identifier:
                keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:75:97:03:57:57:98:e5:7a:c0:f3:b0:84:7f:34:bb:dd:5d:
         92:b7:5e:1b:65:c1:ad:ae:71:4b:06:b0:d1:ce:2c:8d:71:85:
         4b:27:20:0f:7d:3e:f9:16:71:ac:14:35:c7:4e:ab:9f:bd:2d:
         1e:cd:a5:81:46:21:2c:b9:4f:01:f9:46:d1:2a:03:8f:1a:7d:
         0c:c2:90:ee:9c:85:c0:2c:06:d7:95:3d:fa:0b:38:96:7e:bd:
         de:59:75:88:2b:d0:34:21:62:43:49:d3:78:57:16:1f:82:23:
         6b:b4:2e:60:5f:6f:3e:f4:7c:20:87:18:63:c9:04:b6:db:8a:
         c2:59:3e:f6:a4:3a:35:53:93:6f:8a:d6:04:49:35:67:2f:1c:
         93:07:d9:eb:83:fd:10:2d:ce:5e:cc:d4:bb:a0:5e:6d:3d:3e:
         08:68:0f:b1:63:1d:84:ac:4e:83:00:30:c4:eb:6b:0b:c2:fb:
         d2:29:95:9d:ac:9c:23:12:a0:69:ff:12:66:ee:3f:37:f6:d0:
         8a:21:1a:3a:d5:4c:36:06:80:02:96:a3:06:75:f5:92:a8:69:
         07:e2:9f:83:2d:bc:20:ca:36:98:a8:ad:b6:93:63:c1:c5:e6:
         87:d2:9c:23:34:c6:d0:ed:fc:06:32:cd:69:bf:c9:f6:ad:6f:
         3d:5c:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:03:01 2026 by rpki-client