Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
File:                     Q2XRedW3PoqX7eBQXynvAMLWPvk.mft (raw, json)
Hash identifier:          AvfQrhowAO1Sxnn5OyrQI9SVQMAcpSu1JM0jpDKs6q8=
Subject key identifier:   E4:E1:47:6E:C6:7D:41:80:D0:9D:E7:6C:AD:95:AD:CA:78:48:05:45
Authority key identifier: 43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
Certificate issuer:       /CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Certificate serial:       034C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
Manifest number:          0342
Signing time:             Fri 17 Apr 2026 00:54:53 +0000
Manifest this update:     Fri 17 Apr 2026 00:54:52 +0000
Manifest next update:     Fri 24 Apr 2026 00:54:52 +0000
Files and hashes:         1: Q2XRedW3PoqX7eBQXynvAMLWPvk.crl (hash: pFz8PtQ3G7IB9U99sECnxnIlVVMznQDd7UP9XJXiuDE=)
                          2: E9A9531644D611F0ABB89277C4F9AE02.roa (hash: LjrdfU8qKAjg1tNh6QbLgwWJcFgbeivFBKT0rfsVVGo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl
                          rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139555, serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
        Validity
            Not Before: Apr 17 00:54:52 2026 GMT
            Not After : Apr 24 00:54:52 2026 GMT
        Subject: CN=69e184dd-78c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:be:fe:3a:4e:4e:04:de:0b:81:41:d1:0f:ab:
                    27:06:c4:9b:86:27:5c:31:06:f2:45:fe:d8:37:72:
                    d9:1e:b5:8d:5a:6b:57:83:fb:23:36:ec:5b:49:b0:
                    d2:3c:12:d8:77:2c:fb:37:20:81:bc:92:cc:51:85:
                    93:c0:a1:c4:70:c6:78:af:ef:6c:b7:32:db:31:8e:
                    c5:21:36:45:39:06:ec:a0:5c:00:97:5d:3b:c8:b7:
                    34:33:85:63:4e:31:4c:ba:4b:2f:1c:f0:82:1a:8d:
                    89:08:b1:2d:9f:93:0a:7d:c1:19:c5:01:c5:d2:aa:
                    66:15:f2:06:3a:35:d9:aa:2a:91:84:66:63:27:85:
                    f1:60:de:b6:18:00:c3:5c:b4:c7:a3:be:13:34:16:
                    a1:48:0f:3a:c2:3a:4b:43:9a:f2:42:ac:f9:61:3c:
                    2b:d9:f2:56:57:ce:cc:37:a5:62:11:b9:76:c6:19:
                    98:a8:ce:76:68:8d:59:4a:2b:a0:cc:13:5e:91:20:
                    89:e2:4b:19:c4:ab:6f:c2:be:e2:ea:fc:cf:69:5c:
                    a0:8d:8a:c4:1b:a2:60:ec:10:c8:44:8a:8b:8f:4d:
                    1d:71:46:42:06:80:cf:a0:3e:88:df:a0:86:08:11:
                    a5:3a:ca:b3:31:32:18:35:78:31:ca:ae:84:e0:23:
                    1d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E1:47:6E:C6:7D:41:80:D0:9D:E7:6C:AD:95:AD:CA:78:48:05:45
            X509v3 Authority Key Identifier:
                keyid:43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:d8:28:07:87:84:0d:be:60:98:31:72:5f:bc:7c:70:c6:88:
         0b:b2:f4:0b:e5:e0:74:12:e6:b6:d1:82:31:bc:2e:2f:66:2a:
         70:88:4c:1a:74:65:a1:60:ef:e4:ce:bb:eb:47:c3:90:84:d3:
         1d:c4:1b:a3:a9:66:01:92:da:94:89:6e:12:ae:6f:79:f4:95:
         01:29:a0:31:50:d2:d7:76:74:8e:e8:82:44:d3:e4:e8:ef:94:
         2e:00:54:3d:48:9c:f4:20:af:5a:68:fd:52:63:a7:b7:4e:70:
         a6:93:78:c2:1b:f7:b1:77:3c:bc:4f:18:ab:69:d2:75:c6:5a:
         3f:e3:b2:34:76:b5:66:a6:ab:31:8b:40:17:06:bf:78:b2:19:
         2c:63:19:e1:bd:c5:8f:bd:53:2c:11:7e:bb:0a:0c:f4:32:fa:
         05:21:81:4a:9d:f9:7c:a6:d8:f8:8b:b3:a6:07:b4:2d:7c:b3:
         0a:d6:e5:f2:9f:3f:0f:a7:0c:5a:bf:9f:96:6e:08:98:71:ee:
         90:ba:67:4b:75:55:51:a4:68:ab:a5:6a:6b:6a:12:ea:71:49:
         a9:14:30:3b:13:40:b9:1b:59:e6:4c:19:8a:73:a7:97:66:d3:
         f4:e5:28:44:f8:39:12:6c:c7:cd:3b:9d:91:be:18:83:04:9e:
         f5:f0:48:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:57 2026 by rpki-client