Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File:                     qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier:          M4AogHcMZrXjp3G8P3IvAQ5xiaoTMD4Yac7rfdFBJ0g=
Subject key identifier:   D8:EA:CB:C2:17:DD:48:66:21:00:E9:C9:73:7E:FD:EE:0C:45:29:A2
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer:       /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number:          010C
Signing time:             Fri 17 Apr 2026 05:40:39 +0000
Manifest this update:     Fri 17 Apr 2026 05:40:38 +0000
Manifest next update:     Fri 24 Apr 2026 05:40:38 +0000
Files and hashes:         1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: NiIs10CKwjNIEQiv1YvlFKdyywxLLm3eNZsi0OQUm8U=)
                          2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: jxhoNvhc+MHJtTBpxrrKXdZBqlL2SJCnjwyJaGHJC6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
        Validity
            Not Before: Apr 17 05:40:38 2026 GMT
            Not After : Apr 24 05:40:38 2026 GMT
        Subject: CN=69e1c7d7-059a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:91:b1:9e:ac:5c:45:a9:d8:91:4a:7d:ba:1c:
                    9d:52:46:bf:75:c7:d3:74:6e:40:f3:07:29:84:08:
                    43:08:53:6e:32:06:31:c1:5f:42:61:8d:e7:d4:38:
                    45:71:a3:c9:aa:5b:cd:61:cb:c1:a4:29:8f:9d:dd:
                    56:1e:2a:9b:c5:97:74:d2:e6:5e:bb:be:e8:c3:fc:
                    bd:80:45:73:ba:4c:61:09:f2:c5:96:eb:5d:18:7b:
                    b7:10:14:fd:b0:9d:3f:d8:32:cc:e1:7e:7f:13:6b:
                    aa:22:47:cc:2b:e6:fb:9a:ae:22:25:c9:37:f6:34:
                    e0:2f:4e:ad:82:52:4a:d5:b9:1f:de:63:7d:29:ac:
                    7e:50:e1:a1:65:04:77:40:5a:2c:e3:ae:f0:31:00:
                    60:81:38:0a:bf:e9:bd:50:ed:c8:36:a0:48:56:1a:
                    ff:8b:b2:63:f4:eb:ca:7b:00:f2:05:9f:20:eb:24:
                    0e:b8:dc:97:da:d1:89:b4:f9:2a:c8:34:cf:93:5a:
                    ae:38:89:3b:a0:30:a7:1a:4b:e7:88:d8:3d:ff:f5:
                    49:51:66:39:38:fd:d8:3e:ed:88:06:1d:d3:66:af:
                    f9:7d:08:e9:4c:28:49:1b:4c:dd:83:99:48:87:59:
                    b2:ee:e3:44:5f:bb:92:2b:bc:5e:2c:34:03:91:d9:
                    b3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EA:CB:C2:17:DD:48:66:21:00:E9:C9:73:7E:FD:EE:0C:45:29:A2
            X509v3 Authority Key Identifier:
                keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:13:d2:43:8c:c4:5b:0f:06:ed:73:50:d9:d1:92:53:46:2b:
         04:0a:79:02:46:ca:0d:78:e5:e1:c3:00:57:ae:3e:6e:e0:50:
         72:3a:c8:47:bb:18:53:81:78:6f:8d:9c:61:90:22:9a:86:f0:
         b7:69:03:41:4e:44:7b:8b:ef:0a:db:ce:02:c0:d6:a4:35:30:
         c2:58:5a:bb:50:c8:15:77:b9:d6:12:60:a9:a8:18:00:80:b7:
         21:9d:d9:55:d1:cc:30:3d:f9:95:8f:d4:7a:8d:73:ef:29:9b:
         8d:33:25:01:51:8d:76:8b:38:7c:70:84:a3:0d:eb:5e:bf:2b:
         95:af:ec:b5:fb:5d:63:ad:8b:a9:c2:05:8f:5c:b5:17:99:06:
         c0:da:5a:62:ac:0e:0c:89:b3:b6:77:90:4a:21:92:97:1a:18:
         cd:72:25:89:f9:fc:2f:44:f8:1b:0e:50:0d:da:5a:c7:c4:af:
         4c:e1:17:7c:0e:2e:55:2b:04:de:ab:7f:bc:67:8b:70:4b:73:
         f2:ad:4f:bb:d3:08:5f:1f:74:18:59:17:ca:7e:12:8d:c3:dd:
         f7:ee:3e:d3:df:f5:44:b9:00:7e:d5:37:2b:8a:28:fc:66:69:
         12:c4:70:25:b9:47:f3:41:b4:8b:c3:4a:50:df:26:aa:8b:7b:
         2e:c3:c5:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQxNjQxMTAvBgNVBAUTKEE4NzM3MjAxRkE0QzY0RkEwMDU2NDAyMkRCMDZGNjBF
N0VFMkNEMEQwHhcNMjYwNDE3MDU0MDM4WhcNMjYwNDI0MDU0MDM4WjAYMRYwFAYD
VQQDEw02OWUxYzdkNy0wNTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7JGxnqxcRanYkUp9uhydUka/dcfTdG5A8wcphAhDCFNuMgYxwV9CYY3n1DhF
caPJqlvNYcvBpCmPnd1WHiqbxZd00uZeu77ow/y9gEVzukxhCfLFlutdGHu3EBT9
sJ0/2DLM4X5/E2uqIkfMK+b7mq4iJck39jTgL06tglJK1bkf3mN9Kax+UOGhZQR3
QFos467wMQBggTgKv+m9UO3INqBIVhr/i7Jj9OvKewDyBZ8g6yQOuNyX2tGJtPkq
yDTPk1quOIk7oDCnGkvniNg9//VJUWY5OP3YPu2IBh3TZq/5fQjpTChJG0zdg5lI
h1my7uNEX7uSK7xeLDQDkdmzyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjqy8IX
3UhmIQDpyXN+/e4MRSmiMB8GA1UdIwQYMBaAFKhzcgH6TGT6AFZAItsG9g5+4s0N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BNjhFMjY0RUEx
ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQb0FWa0FpMndiMkRuN2l6
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FITnlBZnBNWlBvQVZrQWkyd2IyRG43aXpRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDE2NC9BNjhFMjY0RUExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQ
b0FWa0FpMndiMkRuN2l6UTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEBPSQ4zEWw8G7XNQ2dGSU0YrBAp5AkbKDXjl4cMAV64+buBQcjrIR7sYU4F4
b42cYZAimobwt2kDQU5Ee4vvCtvOAsDWpDUwwlhau1DIFXe51hJgqagYAIC3IZ3Z
VdHMMD35lY/Ueo1z7ymbjTMlAVGNdos4fHCEow3rXr8rla/stftdY62LqcIFj1y1
F5kGwNpaYqwODImztneQSiGSlxoYzXIlifn8L0T4Gw5QDdpax8SvTOEXfA4uVSsE
3qt/vGeLcEtz8q1Pu9MIXx90GFkXyn4SjcPd9+4+09/1RLkAftU3K4oo/GZpEsRw
JblH80G0i8NKUN8mqot7LsPFJQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:34 2026 by rpki-client