Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
File:                     QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft (raw, json)
Hash identifier:          sp+V+okB5I7KTjBQV/MA5nZSJVzWcqU39X0V1KQ+NIs=
Subject key identifier:   1E:C7:70:C1:FF:4D:3B:4A:C8:5E:D8:FA:10:C1:A4:D8:4E:08:72:F8
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Certificate issuer:       /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
Manifest number:          90
Signing time:             Fri 17 Apr 2026 07:14:12 +0000
Manifest this update:     Fri 17 Apr 2026 07:14:11 +0000
Manifest next update:     Fri 24 Apr 2026 07:14:11 +0000
Files and hashes:         1: QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl (hash: 0682pL6odsoE9guN1BYry618xvmQirlcUdQHwyWj7ws=)
                          2: AE811872614711F0B811645EC4F9AE02.roa (hash: QStpqNmHyES3tjBB5qjxIKdsQc7G9DMxKuRky1psrM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
        Validity
            Not Before: Apr 17 07:14:11 2026 GMT
            Not After : Apr 24 07:14:11 2026 GMT
        Subject: CN=69e1ddc4-2ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:58:a2:54:0a:58:99:fa:da:38:64:86:f2:
                    88:49:67:89:a2:64:da:93:d8:16:94:48:a1:f8:27:
                    b8:f0:74:b6:85:d9:b9:26:42:de:bd:a6:a1:05:e4:
                    a5:6a:44:fc:0f:9d:22:40:f6:bb:0b:53:b8:2d:1a:
                    fb:3f:47:77:5d:03:2b:d7:39:35:e8:50:ac:78:a2:
                    e3:78:52:48:26:31:ce:76:4a:bc:0e:29:66:db:93:
                    fc:95:02:d4:4c:3c:61:3d:d4:96:cb:3f:15:68:3e:
                    fc:a1:94:9a:d0:36:2f:30:bb:5d:89:89:95:a0:d2:
                    80:f0:1d:3e:f1:a1:70:61:05:22:0f:84:dc:e9:b8:
                    f7:32:36:7e:e5:ae:93:fe:0c:ad:c7:c2:01:ab:af:
                    1d:17:2f:09:54:94:7e:7a:18:d9:79:63:2b:43:1f:
                    4e:52:7c:d9:b4:02:52:90:c2:fc:0d:8c:5e:2e:8a:
                    c8:f9:d3:2d:15:bc:c3:d6:75:58:64:4d:15:1e:5d:
                    02:64:90:ce:09:32:c2:27:ff:97:0a:a1:18:f8:c0:
                    a5:c6:59:39:32:ab:20:0c:c4:8a:c5:e9:44:37:72:
                    b9:16:fc:d8:8e:31:f7:94:d5:1e:a5:dc:0e:43:f0:
                    c4:e0:19:ae:ad:df:59:7c:45:90:b3:b7:65:e6:2d:
                    4b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C7:70:C1:FF:4D:3B:4A:C8:5E:D8:FA:10:C1:A4:D8:4E:08:72:F8
            X509v3 Authority Key Identifier:
                keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:af:34:b9:3e:ad:a3:d8:66:46:cc:60:ad:ab:65:b0:4d:78:
         4c:2e:7f:61:c4:26:3a:19:e1:75:3a:5c:8c:1b:6a:e2:f1:e9:
         5d:46:a3:9b:7d:f8:76:d2:05:a5:f4:18:19:9b:7f:8a:20:82:
         31:9f:d4:dc:55:3e:e6:f4:84:62:ee:f3:5e:b2:a1:03:c3:07:
         a6:6d:3c:1b:87:45:8b:1d:b0:f3:48:3b:f7:63:fb:3e:0e:14:
         91:03:e8:2f:fe:2c:21:36:41:f0:f8:8b:b8:da:e7:43:6e:c2:
         60:22:e4:f9:44:6e:83:4a:51:e3:76:68:ab:f5:c7:e1:34:0c:
         ba:0d:d8:92:94:3b:a7:d6:73:12:3c:0c:da:df:0c:07:ae:84:
         71:93:49:d4:1f:d7:42:d9:71:e6:58:1e:6d:ce:1b:0c:cf:3e:
         6a:81:3d:46:79:76:8b:d1:da:2e:5d:e6:b0:f8:89:a4:ce:52:
         28:17:63:06:3a:1f:11:0d:34:71:5e:01:35:43:d5:bc:9e:27:
         65:26:9c:2c:5e:9b:d2:17:e4:de:33:6d:66:45:e9:0e:c6:65:
         05:c7:78:f5:27:39:28:e3:f3:ce:66:e1:af:68:72:b5:98:db:
         0d:b2:cb:cf:12:35:72:da:25:51:e7:98:6b:b5:c1:7c:81:52:
         ca:ab:8f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:58 2026 by rpki-client