Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
File:                     QeHsF957pw-MEkF3aWN3AjclGd4.mft (raw, json)
Hash identifier:          NidS8aZTtl8NFjde2OJZCNAf2PGlzQCrPlq+Ra7dfyM=
Subject key identifier:   D1:36:8F:BB:89:38:EF:A2:95:4A:CF:5A:D5:F9:0E:31:16:60:95:88
Authority key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE
Certificate issuer:       /CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
Manifest number:          015D
Signing time:             Fri 17 Apr 2026 04:40:59 +0000
Manifest this update:     Fri 17 Apr 2026 04:40:58 +0000
Manifest next update:     Fri 24 Apr 2026 04:40:58 +0000
Files and hashes:         1: QeHsF957pw-MEkF3aWN3AjclGd4.crl (hash: fEZNU/ymG22dtLCO6YZYm261H81Yc0sT21XZxD8BEYA=)
                          2: 8CF832322C6C11EFB50AD22EC4F9AE02.roa (hash: xbXyHpLgHt9b+54jlb0N3LzfXI2w4v845p/L4pO7oxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl
                          rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE23, serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE
        Validity
            Not Before: Apr 17 04:40:58 2026 GMT
            Not After : Apr 24 04:40:58 2026 GMT
        Subject: CN=69e1b9db-52a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:ee:18:77:2d:bc:51:83:5e:ff:26:2b:b4:
                    96:ae:3c:4a:5e:ad:f3:39:c7:0a:01:07:5a:9e:1f:
                    f1:6e:f6:d5:a1:e3:62:b5:76:3e:81:42:dc:d0:6a:
                    1a:c6:bc:52:43:8d:c1:92:da:d8:dd:5d:85:a6:44:
                    e7:42:a6:d7:5f:4e:7d:bf:72:a1:12:17:43:b5:ed:
                    f5:1c:b4:0f:c2:5a:f0:e7:bc:52:19:77:6b:04:f0:
                    3a:31:78:4c:b5:ff:32:62:75:58:52:09:91:ab:67:
                    04:f1:15:e9:86:6d:38:53:cb:4b:ab:e4:3d:8b:b6:
                    43:e0:72:03:d3:d4:f8:a0:9d:e7:5f:c0:71:64:b4:
                    e3:3b:62:69:10:4c:22:ae:47:2c:18:9a:a5:b0:12:
                    c5:38:a1:7b:f8:5a:9f:e8:c4:92:45:d6:15:a4:20:
                    a2:3b:ab:8b:56:df:e9:c2:54:b2:6d:56:e3:ed:97:
                    84:65:90:4d:db:0f:7b:22:06:6b:d1:6f:dd:cb:c3:
                    a7:c6:0b:90:57:57:06:a8:b8:72:2d:34:87:c7:b1:
                    f5:33:39:df:8a:d2:91:b5:68:0d:9a:ed:a3:80:d9:
                    02:d0:60:6d:a7:66:79:42:3c:9f:5d:13:bd:25:cc:
                    9e:0f:f1:14:c1:2b:31:81:74:78:4a:a5:11:13:c2:
                    03:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:8F:BB:89:38:EF:A2:95:4A:CF:5A:D5:F9:0E:31:16:60:95:88
            X509v3 Authority Key Identifier:
                keyid:41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:05:37:f2:3a:59:95:69:93:79:d4:d2:04:41:43:25:01:
         e8:5b:e1:2f:81:f2:5d:73:93:2d:fd:8e:9b:05:67:07:c4:48:
         12:f1:78:bb:fc:78:0c:36:50:e2:14:2b:55:4f:50:6f:ae:eb:
         e5:a8:9a:72:7a:62:71:c4:0f:3e:30:50:54:07:3f:9b:c3:96:
         82:60:f6:fb:21:9f:da:8a:e1:19:38:eb:27:f9:51:b4:30:10:
         8c:55:fe:f3:0e:31:0e:67:17:45:67:f2:95:ae:8b:9f:55:70:
         9c:97:3f:e4:19:23:f0:ed:73:c8:f5:20:7a:f3:32:79:b3:06:
         8e:bc:1a:44:05:b3:a9:d7:75:56:4d:d7:dd:2b:04:47:5f:81:
         79:7d:f6:61:5a:fd:9f:aa:99:80:29:73:77:cf:49:7a:04:35:
         43:e8:f8:a1:cc:a4:49:6f:0f:e0:5b:2d:27:f8:28:1c:24:42:
         14:e0:dc:59:6c:d6:17:c9:ce:4c:a1:17:aa:9b:6e:95:6a:c3:
         76:dd:67:fd:19:cb:86:4c:e5:96:61:49:eb:df:c1:24:9e:17:
         43:e6:81:46:ae:41:5e:37:9c:03:80:1c:34:d4:78:8e:a6:4e:
         86:00:28:6d:f0:1e:61:db:68:f1:f8:78:3c:b1:aa:01:6e:1b:
         d2:40:e4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:22 2026 by rpki-client