Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File:                     QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier:          ps1fKbbb42dJ/0/elPCEdZnvdRobYpVlh7kYM3COytY=
Subject key identifier:   59:7C:25:62:35:E2:6B:1C:C1:DF:E3:C2:4F:5D:AC:7B:90:D3:24:89
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer:       /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number:          F1
Signing time:             Fri 17 Apr 2026 06:03:38 +0000
Manifest this update:     Fri 17 Apr 2026 06:03:38 +0000
Manifest next update:     Fri 24 Apr 2026 06:03:38 +0000
Files and hashes:         1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: GEYpviIwusi5O3vZ5Wy5gYscG7MqU9vWMUlRwlH/68k=)
                          2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: tykKMCNyhL8YIODSIbVTOG4k2NzgIkvRLrrP9k8uYXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
                          rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
        Validity
            Not Before: Apr 17 06:03:38 2026 GMT
            Not After : Apr 24 06:03:38 2026 GMT
        Subject: CN=69e1cd3a-cc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:18:97:8e:bf:cc:b4:36:f9:a6:f4:fd:26:
                    0d:99:af:79:fb:80:f3:40:ce:fa:0e:79:e5:78:df:
                    3e:bd:61:63:e7:f5:95:b6:71:77:2a:8e:35:17:24:
                    4d:04:0b:36:55:03:ed:dc:1a:27:42:cc:a9:52:27:
                    88:6b:fb:e6:48:9a:fa:c6:bb:1f:af:52:38:5e:96:
                    b5:f8:da:4b:25:0e:c5:11:42:cc:7a:43:3b:0f:31:
                    d1:dc:2e:f4:d1:2f:23:99:16:18:99:b6:e6:2c:61:
                    9e:18:22:4f:bf:b6:23:87:fb:27:d6:04:d3:c4:08:
                    0f:03:f0:b2:f0:06:ed:4b:8e:26:55:33:d3:2b:92:
                    9f:a8:61:53:1f:0a:7b:ea:65:77:85:5c:3d:32:40:
                    8f:df:02:c8:8e:a5:00:29:c5:eb:82:0b:9b:79:4a:
                    e8:20:5f:a0:ab:0c:aa:8f:7e:94:af:ee:ca:23:ac:
                    6c:a5:11:7c:c4:ca:69:52:73:36:58:db:49:96:e6:
                    65:4a:0f:a3:4a:b0:ad:16:4b:c8:f7:0c:c6:99:69:
                    ee:e3:c3:ad:d9:51:e5:ac:77:4d:27:51:86:22:c3:
                    ae:48:91:98:c7:6e:98:db:ec:35:4e:ca:08:77:bb:
                    46:38:3f:17:54:97:da:07:13:89:52:1a:64:ed:66:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7C:25:62:35:E2:6B:1C:C1:DF:E3:C2:4F:5D:AC:7B:90:D3:24:89
            X509v3 Authority Key Identifier:
                keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c4:e3:60:ac:87:4f:e7:4f:9a:05:27:e3:58:9b:97:33:e0:
         17:a8:f0:88:ad:7e:df:50:1e:e1:46:c0:7e:31:75:59:40:81:
         3a:5d:14:8d:a3:4e:af:6e:a8:0f:0b:d2:ee:d2:3d:e3:1f:3b:
         85:64:09:82:d0:7c:1d:34:f1:36:a4:87:71:9f:d2:75:ff:bb:
         46:b6:93:6b:56:ff:75:11:a8:9f:44:a7:94:f9:68:2f:9f:06:
         1a:54:48:43:4d:0b:c0:28:74:31:cc:5c:5f:af:65:f0:e6:f6:
         d1:32:e8:90:47:a1:4c:d6:32:98:72:4d:0e:7b:8b:24:1b:78:
         2d:46:3c:03:bc:8d:47:b0:95:a3:79:43:5b:f1:a3:3f:5a:1d:
         5e:6b:9e:33:a5:f8:6d:c5:1c:31:bb:e2:cc:62:4d:97:e8:61:
         51:48:68:df:96:22:a4:dc:f8:ae:54:88:51:ad:ab:d3:2b:0e:
         22:d8:4b:87:40:06:c4:f2:6a:59:aa:d0:e5:df:f3:05:a0:b1:
         53:ab:fa:22:0d:42:d0:bc:73:d7:34:a5:c0:22:b2:cf:e5:d8:
         42:b1:de:da:06:7a:88:02:1a:83:9a:5d:88:0b:3d:e4:fc:6d:
         90:f0:25:e4:0a:b6:92:b6:58:73:43:91:6f:e4:18:fa:eb:a6:
         a7:0b:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:49 2026 by rpki-client