Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File:                     qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier:          H0TtA/n4ZHyfJakP+IHAvwSRFhgNiGWu19DG/1VRQQI=
Subject key identifier:   84:0B:9D:82:00:99:4E:7E:79:6A:72:E0:67:04:65:EF:C9:87:85:EF
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number:          0176
Signing time:             Fri 17 Apr 2026 04:31:39 +0000
Manifest this update:     Fri 17 Apr 2026 04:31:39 +0000
Manifest next update:     Fri 24 Apr 2026 04:31:39 +0000
Files and hashes:         1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: LwGicEPCW8hQ3Qs5ga2GaIVuj+YCWAGSGDl5aFPReoA=)
                          2: 77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (hash: S0GbV2uCmeoviSkKmr830JmB3p8jmN3VMhk4MtRUTHg=)
                          3: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: 4saGenWnq38wSt4Z38V8afVK5ChkZJPpUWTM99qUpeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: Apr 17 04:31:39 2026 GMT
            Not After : Apr 24 04:31:39 2026 GMT
        Subject: CN=69e1b7ab-f774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:4b:a3:bb:84:ab:b7:a1:46:69:6d:c8:94:
                    ac:e6:e5:ad:a5:be:04:72:a1:c5:72:dd:1d:f2:4f:
                    7b:74:e3:c1:2e:b5:0e:ea:ad:8c:48:3b:90:70:c2:
                    2d:d0:a2:5b:d0:e9:93:97:60:5c:a2:6f:f6:b8:c4:
                    b6:03:df:cf:14:24:16:ad:30:52:df:23:4d:d1:1f:
                    40:0f:6f:23:2a:67:89:65:6f:c5:2a:f9:e2:f4:84:
                    ff:69:7f:86:f3:f1:b2:3a:05:6f:db:0b:d6:9b:38:
                    03:48:fb:f2:51:29:94:18:7c:8f:de:11:8f:50:17:
                    48:2a:9c:13:c8:21:ca:2b:9b:42:a7:2c:14:d2:bc:
                    c9:87:13:68:33:fe:18:1b:fc:bd:44:4d:84:ce:ee:
                    2b:b9:fb:1b:9c:75:43:11:d9:f1:eb:76:99:b4:ab:
                    cc:bb:21:d6:71:e5:6b:9a:27:2b:11:7a:cb:37:f3:
                    25:a0:75:56:1d:1f:14:00:a4:e6:e5:e9:71:1d:cf:
                    d1:39:34:cf:ef:bf:6f:96:3f:d8:7c:ce:17:15:02:
                    9e:77:a7:7e:e2:ea:72:5a:f2:6b:eb:4a:d3:d1:91:
                    f8:8a:c0:21:74:63:c5:6b:97:16:24:64:93:55:03:
                    5c:62:03:3e:27:e7:9b:c6:a1:b6:8c:1e:49:66:29:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0B:9D:82:00:99:4E:7E:79:6A:72:E0:67:04:65:EF:C9:87:85:EF
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:7c:e3:ad:fa:46:a9:2b:de:40:2b:bb:f2:5e:fc:9e:e8:
         85:71:8b:17:d0:79:73:e0:80:e6:ee:6c:a2:6d:af:c4:a0:41:
         6a:97:ec:cf:6d:67:0b:a5:b3:15:e8:3b:ec:73:31:fc:26:b2:
         ff:93:df:10:ca:2f:fb:84:31:6a:35:0d:95:51:93:df:65:6f:
         30:8a:b3:6b:7a:0d:c1:9d:90:83:6a:94:74:ba:28:1d:91:c7:
         64:7e:21:f7:77:25:20:d5:ce:f4:22:99:4e:d9:97:22:c3:de:
         25:0c:de:3e:86:b3:85:ee:a0:76:3c:c7:eb:69:eb:d9:0e:cd:
         8c:10:42:c4:59:4c:44:be:65:0d:f0:d7:52:a8:70:e5:ce:c5:
         98:ed:90:ea:f1:3e:7e:ce:3c:a8:a4:75:36:45:42:e8:e9:fa:
         a5:ec:3f:d8:0a:06:df:a3:4d:4f:ee:84:5f:6e:95:dd:69:80:
         60:ee:1e:7e:35:10:9a:fa:92:e8:7d:3b:95:f2:e6:90:ba:a9:
         76:51:e7:f5:17:8d:7e:79:9f:7b:5c:4e:f7:0c:ea:c0:61:de:
         cd:c3:bb:69:30:a6:cf:86:d9:5a:d6:b1:f4:c6:fc:34:8d:7e:
         e1:ed:4e:0d:90:22:77:34:24:33:cc:a6:7b:bd:63:fa:66:ec:
         5d:a1:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:21 2026 by rpki-client