Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
File:                     Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json)
Hash identifier:          laaIk9FBgKYcGHCLKU0lnqSyT4DyK54A/fMSyidH3EM=
Subject key identifier:   A0:8B:A3:64:CF:DC:04:F6:7D:32:15:8B:5B:7A:78:81:CB:F6:44:FC
Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
Certificate issuer:       /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Certificate serial:       2865
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
Manifest number:          2852
Signing time:             Thu 16 Apr 2026 15:35:03 +0000
Manifest this update:     Thu 16 Apr 2026 15:35:02 +0000
Manifest next update:     Thu 23 Apr 2026 15:35:02 +0000
Files and hashes:         1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: Tunh3NbEAaFY3GCXbgMUkyWf0eT50Ccm+1IgTFNtwsA=)
                          2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: LPyaDve5O9/4WQe5jKoSjlWttPY7ojSlNyw4xX1idoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
                          rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10341 (0x2865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
        Validity
            Not Before: Apr 16 15:35:02 2026 GMT
            Not After : Apr 23 15:35:02 2026 GMT
        Subject: CN=69e101a7-6c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:ce:d3:77:50:13:23:07:d9:2a:14:10:22:
                    39:84:59:f1:89:9c:67:7b:9f:a4:d3:8f:6c:a0:e5:
                    8d:80:bd:d3:d2:10:f8:f8:55:45:e7:f4:fb:84:96:
                    ed:ac:f6:35:a8:42:41:94:e8:cf:a4:57:c6:d5:59:
                    ef:ef:37:bc:6f:48:ce:ee:7b:68:0c:c9:9b:a2:52:
                    fd:9e:d4:6f:1b:8b:65:5b:e1:97:db:3c:29:f9:df:
                    42:24:76:cd:d1:bc:3d:8b:50:0a:a2:b7:f5:34:e3:
                    dd:9c:8f:3f:e4:03:82:6c:32:ea:20:f7:04:4e:e8:
                    67:63:25:5c:0e:e1:e1:ae:45:a6:f1:02:47:6e:cc:
                    b4:65:2e:39:0b:26:ba:9f:5c:de:12:19:21:c2:df:
                    b7:82:62:bd:38:e6:38:f2:67:25:ea:b5:0a:92:b5:
                    56:f6:b2:37:62:1e:0b:be:2e:ef:2c:d9:4b:2d:42:
                    17:54:6e:ef:42:55:b3:fc:08:a4:3d:f2:9e:ec:bc:
                    a7:ae:45:1f:2e:b2:93:0e:14:57:73:88:ab:9b:e6:
                    8b:b8:14:73:d7:12:05:fa:bb:30:3e:4a:c7:4f:4a:
                    f7:76:6e:c3:8e:b7:e5:89:14:d2:1b:98:f3:ee:72:
                    03:a9:fc:aa:5f:b6:9c:cf:fc:20:80:d4:70:ff:47:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:A3:64:CF:DC:04:F6:7D:32:15:8B:5B:7A:78:81:CB:F6:44:FC
            X509v3 Authority Key Identifier:
                keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:a5:ec:c5:ef:36:c5:64:6f:98:12:54:62:57:35:e2:82:
         86:68:62:33:ba:84:69:19:68:d0:f0:f7:63:c0:5d:ff:3c:4e:
         15:85:08:a6:d5:f9:e0:11:84:3d:9c:4c:bf:55:ec:8e:b7:10:
         b0:d1:24:cd:24:e1:62:48:df:a3:48:fc:c6:0c:2f:68:d7:bb:
         ed:cb:8f:fa:69:7d:09:65:ea:5f:b6:c8:1f:c1:da:2a:8f:f8:
         72:63:9f:27:48:ac:20:ad:67:08:10:44:79:8e:36:7b:c0:bd:
         fa:e9:54:4b:8b:f6:92:99:c5:6c:3d:4a:8a:3f:27:2f:23:91:
         43:f8:a6:5a:36:8a:c6:1d:e6:4d:83:10:eb:d9:35:79:3f:c7:
         e2:bb:50:90:c0:0e:90:0a:e6:d1:e7:39:74:2d:c9:95:f0:cf:
         44:ef:22:7d:f3:9c:f5:0e:0c:39:13:0b:d1:2d:70:ff:71:83:
         96:25:1d:0d:67:38:41:31:f1:d0:9b:bc:4c:84:30:05:34:6a:
         74:4b:75:0c:c2:87:bd:53:ed:d0:22:6f:c0:86:06:8e:fe:0c:
         77:4c:c7:91:91:66:28:8e:5e:50:58:bf:4b:2c:d6:8f:db:cf:
         52:53:3d:85:98:e8:86:b7:c9:25:4b:d6:61:30:57:ed:ba:49:
         eb:cb:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:13 2026 by rpki-client