Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File:                     qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier:          tfQgYL/Br1zg12RY9pvsohGR2rPCYJfcLoDOqykDSfg=
Subject key identifier:   C5:8B:44:FE:68:3F:C8:ED:12:21:D1:2B:D7:32:4F:98:9F:11:68:63
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number:          029F
Signing time:             Thu 16 Apr 2026 21:53:24 +0000
Manifest this update:     Thu 16 Apr 2026 21:53:24 +0000
Manifest next update:     Thu 23 Apr 2026 21:53:24 +0000
Files and hashes:         1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: i4QoYtrRjb8PBVc16+wO6oYj07VWOeAq92kyyfhAvpE=)
                          2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
                          3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Apr 16 21:53:24 2026 GMT
            Not After : Apr 23 21:53:24 2026 GMT
        Subject: CN=69e15a54-c0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:1f:2e:23:8b:17:4c:0f:8e:39:82:2f:4c:
                    46:e9:5d:2e:85:2f:50:75:b9:a2:1a:c5:42:6c:f8:
                    73:9b:31:d9:0f:c7:5b:fe:69:90:ba:b2:70:b1:e3:
                    86:dc:2f:3d:c3:f9:25:07:a0:ee:b7:bc:1d:d8:f1:
                    d0:51:9e:a2:cd:b3:87:00:3a:c4:c7:03:88:84:c5:
                    e2:ff:59:7c:9b:cb:a0:e3:dc:ba:e3:ea:f2:40:01:
                    bc:ae:37:f1:2c:cb:f5:65:24:b8:b7:da:1d:d4:98:
                    77:74:87:df:bd:e2:af:6b:bf:e4:d6:8b:32:f5:d2:
                    71:8c:34:5c:97:72:d2:ad:cc:40:f1:10:6e:b4:bd:
                    f1:82:a1:8a:2c:60:12:ba:ba:32:3a:c2:c6:b6:4f:
                    20:3b:07:36:06:87:93:12:54:30:73:2f:6b:34:50:
                    31:a9:7a:58:f9:b9:a6:9f:f0:59:27:32:5f:5d:02:
                    a8:ea:11:22:f9:2a:5d:47:6b:19:50:b3:bf:87:b4:
                    ec:86:41:e8:80:fa:eb:08:6b:04:36:ee:5c:64:ef:
                    ba:19:9f:19:3f:0e:28:46:77:c7:8b:e4:ba:3e:25:
                    5f:2b:24:ac:80:78:bf:d1:e9:ff:c1:54:cd:0f:10:
                    77:1d:19:df:47:9e:5c:38:66:e7:df:f6:ce:d2:0e:
                    ce:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:44:FE:68:3F:C8:ED:12:21:D1:2B:D7:32:4F:98:9F:11:68:63
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:46:78:ba:4f:f6:ae:4c:bd:24:6f:a3:24:f8:5b:f8:9b:92:
         44:a2:4a:91:69:0f:59:07:48:db:2c:a0:c8:f8:ac:e1:df:a9:
         37:75:05:7a:9c:a4:cb:9f:ad:24:ee:19:b8:69:ab:64:41:13:
         f0:9b:c7:e9:5e:2c:5f:bf:bc:eb:4b:2f:42:6c:59:c6:dd:0f:
         d7:db:2f:e8:34:29:28:db:8e:1f:54:d6:da:b4:cb:b8:d9:d7:
         92:03:a1:f8:e1:d0:b7:29:f1:4c:c0:ab:e4:79:f3:35:04:87:
         2a:10:c9:d1:98:74:92:d6:b6:df:3f:b2:72:63:56:35:e1:44:
         11:96:07:4d:ac:de:68:33:d1:fa:68:63:b2:f7:c4:a3:94:f0:
         80:06:68:38:dd:24:47:67:f8:30:a5:67:4e:c9:8a:bf:49:cc:
         66:4d:1d:b1:d5:e7:c5:58:53:f2:e4:2f:03:78:5a:f2:0a:b5:
         11:48:02:64:65:62:fd:7e:23:29:55:1c:19:3f:91:30:57:af:
         bb:cc:e0:20:a0:bf:36:ed:17:76:cd:a2:38:1e:9b:29:6d:5d:
         58:5d:e1:b3:e3:a5:29:32:5f:9a:c9:b9:ba:df:a4:e1:45:18:
         da:65:85:b9:81:43:1a:c6:9b:21:d0:fa:83:45:be:4f:c3:8e:
         7e:b4:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:17 2026 by rpki-client