Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
File:                     qafXPj7Y1cRm3LxsIJzUNTzemM8.mft (raw, json)
Hash identifier:          UINhxM/26wkG9u/Xc4COY5ViM9CotTnput88aYG45Ok=
Subject key identifier:   8C:14:83:76:5B:BA:71:55:11:ED:94:15:94:EF:CC:FE:12:9B:41:A4
Authority key identifier: A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF
Certificate issuer:       /CN=A9143FC4/serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF
Certificate serial:       34F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
Manifest number:          34EF
Signing time:             Thu 16 Apr 2026 15:17:38 +0000
Manifest this update:     Thu 16 Apr 2026 15:17:38 +0000
Manifest next update:     Thu 23 Apr 2026 15:17:38 +0000
Files and hashes:         1: qafXPj7Y1cRm3LxsIJzUNTzemM8.crl (hash: J+xQZn5E/0P3++tN9OBOuM9k3k2Vo7NDtcw5OBA2YT4=)
                          2: FE96F04256EE11F09D243832C4F9AE02.roa (hash: oojYcBMoonELSfe45pkI581LosRHOK0/3Xt8Hp4n/PY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl
                          rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13554 (0x34f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143FC4, serialNumber=A9A7D73E3ED8D5C466DCBC6C209CD4353CDE98CF
        Validity
            Not Before: Apr 16 15:17:38 2026 GMT
            Not After : Apr 23 15:17:38 2026 GMT
        Subject: CN=69e0fd92-2dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ce:13:16:cd:cd:7c:4a:8c:cc:e2:fc:91:7c:
                    1a:c9:4d:3f:5e:a5:de:38:c8:f3:75:24:33:4d:58:
                    50:db:6f:6d:ea:31:28:be:e7:84:d7:95:c9:6f:b3:
                    6a:52:63:d5:da:83:89:6d:f2:dc:a1:1f:6f:10:8e:
                    81:66:b8:78:c8:ef:5b:ee:29:a7:4d:92:0e:d0:c9:
                    f9:0a:4b:bf:f0:66:2e:d9:fa:d2:36:ed:c3:4c:e9:
                    b0:aa:ee:c9:ad:db:02:c2:d6:64:cb:0f:3c:4c:2f:
                    df:b2:5a:44:60:fd:41:1c:05:8f:6d:41:53:03:06:
                    56:0c:47:30:68:e3:7b:d4:c3:67:ed:cf:90:63:25:
                    07:bb:64:8f:fb:18:ed:ea:10:41:4e:60:d8:29:73:
                    b1:42:53:4d:1a:d7:cc:b6:10:2a:ef:b4:2a:83:d8:
                    3f:2a:ee:5f:b8:48:d5:ce:af:19:5d:31:85:d2:23:
                    e8:54:a9:46:ba:25:49:39:5c:54:54:33:9e:92:e3:
                    2d:d0:9b:a8:af:4f:3a:82:07:7f:b5:1c:b6:59:9d:
                    65:7e:dc:70:54:b3:60:12:20:bd:53:ed:bc:bb:ef:
                    db:9e:2f:bd:66:b8:3c:5e:bf:ee:03:00:4a:4e:3b:
                    66:3d:b2:6c:38:a9:6e:34:2e:e6:2b:ae:70:2d:27:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:14:83:76:5B:BA:71:55:11:ED:94:15:94:EF:CC:FE:12:9B:41:A4
            X509v3 Authority Key Identifier:
                keyid:A9:A7:D7:3E:3E:D8:D5:C4:66:DC:BC:6C:20:9C:D4:35:3C:DE:98:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qafXPj7Y1cRm3LxsIJzUNTzemM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FC4/B165A3A8295811E2B38D58FB08B02CD2/qafXPj7Y1cRm3LxsIJzUNTzemM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:aa:a8:6a:8b:76:83:00:8b:68:7f:3e:ce:8a:85:d7:79:a5:
         e7:e9:ba:c7:47:ad:d7:fe:dc:9f:f7:d5:58:dd:8a:98:40:c9:
         38:8e:d6:a0:f2:da:09:1c:3b:15:e0:81:6d:a0:1e:9d:7a:30:
         2c:76:5c:91:40:db:44:54:4f:c7:e5:1c:38:6a:80:6a:d8:c7:
         0e:1c:9e:4a:54:75:7b:de:81:b6:d9:e4:8a:a0:b4:c5:bb:cd:
         fe:b3:8e:08:71:99:5a:7e:52:3d:01:9b:59:3c:f4:47:d4:97:
         38:74:0c:ca:a4:54:a3:94:4c:5d:41:99:fb:9a:a7:df:c1:9f:
         77:b0:dd:3e:ba:85:89:03:6c:6b:5f:0c:67:83:72:fd:9c:5e:
         17:3d:14:fb:b2:45:9a:1b:36:ec:4b:7b:33:9e:0f:29:7b:21:
         14:3c:55:6f:85:0c:97:d1:84:ac:2d:27:e4:0f:38:e3:ca:4e:
         fe:ea:f8:e8:b7:f7:f9:b4:27:84:4d:70:60:be:d8:87:44:3c:
         51:c7:14:f2:39:0c:3c:f6:c3:11:6d:f6:55:c1:89:a3:da:69:
         73:28:80:ac:1b:ca:94:30:00:56:fc:b7:81:f0:12:db:b6:21:
         ab:14:c3:9c:63:2d:7f:62:53:c9:51:f3:1a:0e:e1:c8:67:9e:
         3a:e6:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:29 2026 by rpki-client