Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
File:                     qWaisn_hSTe-NtJ9tfTXaICEfdc.mft (raw, json)
Hash identifier:          pQMenWy8n5t/Dn95AOSzg2k8ZnHq/aKi6RIWydse+7Y=
Subject key identifier:   CD:AC:BB:54:D6:1C:94:4A:5F:0E:67:31:A5:7A:ED:4C:30:C5:66:20
Authority key identifier: A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7
Certificate issuer:       /CN=A91536E1/serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
Certificate serial:       0837
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
Manifest number:          082E
Signing time:             Thu 16 Apr 2026 20:52:57 +0000
Manifest this update:     Thu 16 Apr 2026 20:52:57 +0000
Manifest next update:     Thu 23 Apr 2026 20:52:57 +0000
Files and hashes:         1: qWaisn_hSTe-NtJ9tfTXaICEfdc.crl (hash: NuUegtt28fmSq5rEQ1rGdoEtc7cV7rQzyUFWEiWMMfY=)
                          2: 41C97D600EA811EB8E9A770CC4F9AE02.roa (hash: DBVP47MzkA4zExAYz5BkJLhWa09IKcrwIj4PmXTVqgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl
                          rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103 (0x837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91536E1, serialNumber=A966A2B27FE14937BE36D27DB5F4D76880847DD7
        Validity
            Not Before: Apr 16 20:52:57 2026 GMT
            Not After : Apr 23 20:52:57 2026 GMT
        Subject: CN=69e14c29-6428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:8f:58:49:9f:6b:d0:dd:d9:5a:4a:f1:05:
                    e1:8d:88:1b:6f:f3:41:d4:a6:e4:f5:c3:99:96:d3:
                    9a:13:e3:35:26:7c:83:a6:bb:df:48:b6:38:1b:7b:
                    27:37:51:99:05:93:cf:14:01:9c:39:04:7e:94:93:
                    53:50:6c:ef:09:e3:33:48:8e:42:54:59:16:90:62:
                    e0:81:00:f3:e6:48:57:b4:aa:85:1d:57:0f:9a:41:
                    7f:2c:18:fd:50:3d:42:93:69:b5:87:b0:e3:91:57:
                    86:1b:5e:d0:7e:61:dd:7b:fa:d4:e6:3d:52:09:f3:
                    b3:24:93:2b:c5:f0:b4:a7:4b:e8:0f:b1:c8:ca:36:
                    54:4a:ed:cf:53:f1:23:01:e4:ba:d5:58:0b:a7:1e:
                    69:3c:1e:a7:78:29:42:37:f8:74:56:99:76:ef:76:
                    c3:78:85:32:e6:bc:5a:2e:76:3d:1d:87:4b:2f:40:
                    83:11:95:a4:c2:f1:7a:41:5c:32:15:2b:c6:58:e6:
                    5f:c3:45:4d:d6:52:18:f9:74:55:f8:bd:02:cb:df:
                    a9:1c:37:f7:11:ad:2c:54:0b:18:69:33:1b:0c:bc:
                    a0:6b:eb:46:c9:11:16:5d:5e:08:9a:af:db:e6:af:
                    6b:24:31:31:ba:39:12:80:a7:fd:e8:93:9c:70:a6:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:BB:54:D6:1C:94:4A:5F:0E:67:31:A5:7A:ED:4C:30:C5:66:20
            X509v3 Authority Key Identifier:
                keyid:A9:66:A2:B2:7F:E1:49:37:BE:36:D2:7D:B5:F4:D7:68:80:84:7D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qWaisn_hSTe-NtJ9tfTXaICEfdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91536E1/989F3A0A0EA611EBB2672786C4F9AE02/qWaisn_hSTe-NtJ9tfTXaICEfdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:3a:0f:2e:04:60:86:39:66:c3:8b:7f:1b:79:5a:f7:e7:
         31:bf:e6:8f:86:65:e7:e1:cd:64:ac:89:6f:7b:21:9b:0b:bd:
         fd:6c:9a:79:16:02:72:4b:1b:ad:7b:0f:1f:2d:09:5f:2d:65:
         89:f5:37:3d:f4:85:25:80:42:35:66:99:ac:73:ea:5d:c7:5a:
         c9:fa:1e:d9:67:16:31:b0:62:d1:9a:f8:22:32:ca:39:db:4d:
         49:7b:5c:7c:94:dc:1d:42:bf:14:7a:a5:70:d9:b7:b9:c2:0a:
         33:88:cd:ec:3b:6e:71:99:45:e3:f6:cc:24:a3:56:a2:c6:91:
         c2:bd:22:2a:d1:cd:a2:35:70:3f:76:91:81:78:57:97:53:f2:
         72:42:ba:2e:9a:93:39:6f:9c:fa:09:23:73:b9:b2:71:3a:65:
         78:de:63:4a:7a:c2:16:80:ea:78:93:8d:d9:7c:9f:92:54:21:
         9e:70:b2:60:45:3f:67:8a:a5:9a:b7:53:96:0d:d6:ac:9b:df:
         88:bd:cd:cd:88:b0:32:29:b7:7f:84:6e:ae:22:b5:a2:44:6b:
         81:81:b7:df:cc:bc:d3:06:0f:2f:6b:0e:b6:5b:ec:74:f6:b7:
         d9:7f:40:66:08:a8:5d:6a:59:50:4a:6b:7c:3f:3a:42:cc:ee:
         50:44:67:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:49 2026 by rpki-client