Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
File:                     tqxYfsJ9U17PTY_eFxF2V52vTU8.mft (raw, json)
Hash identifier:          CKG22iecoO/+KjtHct+bltiM/h9LdwcG82w8uYPkwuQ=
Subject key identifier:   AE:21:45:23:78:F3:B1:44:A6:91:02:48:BB:F9:63:67:AB:43:8B:03
Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Certificate issuer:       /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
Manifest number:          B4
Signing time:             Fri 17 Apr 2026 06:48:54 +0000
Manifest this update:     Fri 17 Apr 2026 06:48:53 +0000
Manifest next update:     Fri 24 Apr 2026 06:48:53 +0000
Files and hashes:         1: tqxYfsJ9U17PTY_eFxF2V52vTU8.crl (hash: HAFgJHDpHB8qv+V1lFOZF7KFIdHhs0DZVeeApdW9S2o=)
                          2: EDADA2842BD911F0BD5FC622C4F9AE02.roa (hash: bVsu56znidGrIajKiO+ImUloohJgR7Y2wqgwesz6s7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
        Validity
            Not Before: Apr 17 06:48:53 2026 GMT
            Not After : Apr 24 06:48:53 2026 GMT
        Subject: CN=69e1d7d6-f04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0f:df:c1:5f:b0:5c:c8:79:76:25:7a:3b:8b:
                    c8:58:bf:90:bb:8c:0d:fb:ed:e7:82:a1:95:c8:fb:
                    2d:b6:93:4b:f2:47:4f:6a:f4:1b:25:41:60:45:b1:
                    83:b0:b2:d9:5f:fc:de:36:52:9b:39:6e:dc:42:85:
                    e2:d1:ef:10:90:81:ee:bc:8b:b2:6c:c6:2f:e9:b7:
                    ba:d1:fe:93:51:b9:81:14:31:75:77:38:81:b9:56:
                    84:f4:a1:8d:01:c9:b9:81:9b:a8:3b:2a:86:2b:67:
                    a9:cc:03:da:11:7a:b8:16:27:fa:51:08:cc:73:05:
                    a1:e2:27:68:e6:da:31:6f:32:0c:17:cd:15:2f:b9:
                    fa:16:6a:21:8c:3a:84:5d:73:e6:9e:16:78:3d:e5:
                    fa:44:3e:51:c9:ce:da:5d:a0:60:e9:24:e0:e9:f8:
                    f5:d6:99:4d:00:63:55:47:40:a1:d1:01:0a:36:84:
                    71:95:cf:64:7e:21:32:5c:2b:57:55:13:89:b0:98:
                    83:f5:b0:fb:97:8a:9a:34:89:93:b0:e3:bd:e9:20:
                    ea:7a:ea:48:1d:64:06:08:6a:e7:cd:80:5b:26:a7:
                    28:aa:00:84:70:79:71:c9:49:0b:76:4e:28:b0:1a:
                    b6:0c:65:19:c3:d0:48:ab:db:cf:6f:cc:7a:e6:5f:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:21:45:23:78:F3:B1:44:A6:91:02:48:BB:F9:63:67:AB:43:8B:03
            X509v3 Authority Key Identifier:
                keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a4:4a:55:3f:3b:66:b4:a0:50:d9:1d:38:ba:62:b5:09:7a:
         a6:01:3e:01:98:bd:ae:eb:81:37:eb:01:23:48:02:84:e1:60:
         86:a3:07:14:1d:02:e4:96:ef:26:15:41:e0:fd:ba:f2:aa:98:
         62:c5:4b:77:c3:bc:c0:ae:f4:cb:5d:bc:10:d7:b3:af:e0:20:
         69:aa:d8:ec:23:89:88:b1:39:63:c6:47:e4:3d:8f:6f:52:1a:
         aa:7f:97:86:62:e9:60:95:2c:21:26:15:7a:54:aa:b7:da:90:
         da:fc:f9:77:94:64:47:8e:15:de:9c:10:95:8c:00:64:7a:d9:
         6b:f5:7e:e3:a6:a5:8c:61:5e:57:ce:75:62:fb:da:a5:2c:4a:
         e0:bf:38:f6:5a:23:fd:aa:40:0d:ff:d0:e5:41:f3:0e:0c:6f:
         3f:6c:21:fa:97:95:a0:3c:1f:aa:d8:7d:17:22:3d:67:a6:52:
         db:50:0b:b7:5f:fd:31:06:9f:3d:8f:94:a1:f9:0d:89:8c:20:
         45:bd:0d:66:75:4c:cc:c5:e4:f5:dc:af:4b:17:81:5c:62:21:
         7e:92:43:ed:24:df:92:bc:55:fd:ba:c1:4a:ab:20:ea:7e:c4:
         c4:2d:32:b3:96:56:5e:2b:1a:33:4e:fb:0c:7f:65:8a:ae:19:
         0e:55:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:06 2026 by rpki-client