Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File:                     Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier:          L429g4Kgty8IU4fRMnekSCtxyqfUNbtwLWSn0KKs4IU=
Subject key identifier:   7B:BC:9D:29:BC:5E:B1:EB:EC:0E:3B:64:DE:8C:98:77:DB:31:F2:7A
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer:       /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial:       11C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number:          11BB
Signing time:             Thu 16 Apr 2026 17:07:03 +0000
Manifest this update:     Thu 16 Apr 2026 17:07:03 +0000
Manifest next update:     Thu 23 Apr 2026 17:07:03 +0000
Files and hashes:         1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: QXobFM5pxvROQybVZlJygGdIcCF0Et4+yiXa1cD1Zlk=)
                          2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: p2avfwbA5rKR8w+8rtSYTQz3CfMf5vT3jgg0mIj4V8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
                          rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4551 (0x11c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Validity
            Not Before: Apr 16 17:07:03 2026 GMT
            Not After : Apr 23 17:07:03 2026 GMT
        Subject: CN=69e11737-2326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:fa:2e:83:52:17:0a:00:f5:e7:27:a4:72:
                    2a:93:70:80:19:8b:53:e8:c2:d1:a8:32:04:5a:27:
                    17:db:f2:d1:6d:41:68:3e:44:d2:16:6a:50:74:33:
                    91:a9:d4:17:83:f1:8e:66:62:b7:4b:80:cc:a1:99:
                    8e:75:89:fe:3c:ea:d8:95:04:45:dd:b0:b0:a2:1e:
                    01:cc:59:70:cf:ba:8a:d5:27:64:90:31:4b:fa:d9:
                    9e:24:ec:cf:33:73:b6:72:18:2b:20:ae:57:ce:79:
                    5d:bc:f3:59:85:54:c9:3d:98:36:c1:78:3d:1e:50:
                    7d:95:bd:1f:9c:f6:38:18:f6:6b:ca:36:1c:72:92:
                    a6:ac:fd:91:1a:51:c6:00:49:10:bb:93:a7:04:65:
                    68:c3:b6:74:3d:39:e5:2f:8d:08:91:fd:3e:bf:c4:
                    77:22:11:18:fe:c7:19:fb:55:96:8d:73:f3:eb:b6:
                    bc:bc:06:50:99:56:95:f3:ba:7c:51:d1:27:94:03:
                    02:92:05:40:8e:54:33:90:ca:d2:11:2a:74:fc:88:
                    f8:f7:21:3a:7b:4e:29:ba:44:20:01:8a:2e:6f:27:
                    ae:d1:f4:91:72:3b:45:a4:01:7b:4e:68:28:59:c0:
                    12:e7:ff:2f:6e:02:91:f7:cb:d9:7f:3d:e9:31:ad:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BC:9D:29:BC:5E:B1:EB:EC:0E:3B:64:DE:8C:98:77:DB:31:F2:7A
            X509v3 Authority Key Identifier:
                keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:70:81:c8:da:00:54:92:bd:95:ee:10:f0:b1:05:1e:f6:58:
         ed:09:18:84:0f:9e:34:c0:34:8f:b5:ff:08:a4:e2:e1:e9:67:
         21:4d:17:db:6b:35:66:49:e3:d3:37:e6:0c:9f:c2:05:c2:bc:
         f0:8c:ee:5d:27:04:35:ee:6b:fc:23:6b:4e:a0:2c:7f:03:32:
         e4:2d:82:18:af:f6:99:5e:b2:1e:d2:f0:c8:86:17:6a:40:0a:
         dc:c8:79:77:55:3a:ed:ca:eb:8b:3e:d9:ac:6d:8b:56:27:05:
         85:55:f9:a8:01:a2:91:f1:6f:8c:ad:b2:ec:1b:6c:4e:43:43:
         65:56:8f:1e:a5:0c:b3:d7:1c:59:64:0f:93:90:6d:a4:c2:7d:
         a4:f3:86:ca:be:be:c0:7c:b2:a4:45:7b:8d:84:e5:ff:20:4e:
         42:82:e4:5e:f1:7f:c3:ce:d6:54:fd:9b:b8:bd:fe:0d:43:2e:
         10:ba:c8:70:96:03:aa:42:33:ff:1d:af:66:0c:fe:ca:07:b8:
         5c:e0:56:4f:7c:a0:4e:c7:cf:32:e5:63:a0:2f:fc:b9:a3:a8:
         16:a5:a9:2f:bd:1a:12:c5:f6:e3:b3:26:b8:cc:34:bc:b3:76:
         19:88:ac:2c:75:3c:7b:d7:65:b7:ed:d3:25:e4:ec:90:ac:bb:
         ba:0d:e7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:32 2026 by rpki-client