Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
File:                     QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json)
Hash identifier:          abAcyOY2qI1V7ECoTsNRiKRCwOQ5d5YoQafYE8gLKTE=
Subject key identifier:   83:25:E5:EA:DF:71:52:4A:57:36:E0:3C:D3:CE:C1:31:62:22:90:FC
Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
Certificate issuer:       /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Certificate serial:       0904
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
Manifest number:          08E0
Signing time:             Thu 16 Apr 2026 20:22:15 +0000
Manifest this update:     Thu 16 Apr 2026 20:22:15 +0000
Manifest next update:     Thu 23 Apr 2026 20:22:15 +0000
Files and hashes:         1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: SUDQqXPDwmuv4htHuysvPl/fhWkzAJRmGnrvqLHQ4H0=)
                          2: 036D9582D09611F0AF11A347C4F9AE02.roa (hash: U/Cth24XW1eH8PSpCPgWjeZm4V+I2IuNPWViPcU9EHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2308 (0x904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
        Validity
            Not Before: Apr 16 20:22:15 2026 GMT
            Not After : Apr 23 20:22:15 2026 GMT
        Subject: CN=69e144f7-22d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:56:49:2c:0c:fb:6f:24:37:08:4a:78:39:
                    00:a3:e2:e5:90:fd:c8:62:ed:e1:7b:ee:98:36:13:
                    91:2a:6a:74:39:22:1d:9a:e9:97:8c:ae:cb:e9:91:
                    2c:f4:58:7f:ad:47:de:b5:18:00:f7:af:21:3a:c3:
                    8a:5b:a7:a6:a5:80:1f:13:e2:59:77:ec:75:18:23:
                    16:c4:17:b9:c8:cf:3b:b7:1b:09:e5:7e:93:72:72:
                    cd:41:4b:16:4c:45:73:47:72:0f:c2:ff:c7:cd:3e:
                    00:74:42:26:95:a9:c5:c6:7c:46:50:1a:7a:54:c8:
                    4a:e9:e3:04:80:5c:19:46:d1:cb:31:79:50:f7:01:
                    17:67:18:3e:c1:1d:a9:34:80:c1:7f:ae:c8:80:75:
                    87:09:69:ac:dd:6a:54:d8:16:28:05:6d:98:aa:de:
                    a9:9f:1e:ae:dc:6f:c8:62:4b:87:a6:85:fe:19:9a:
                    f9:6b:63:a8:2c:71:1f:e8:e1:1e:b9:19:18:45:81:
                    66:ff:db:9e:05:df:95:b8:d9:a1:93:e0:6d:39:4b:
                    5a:5b:55:3d:67:76:31:a3:68:e2:6a:a6:44:c9:7d:
                    9c:e3:0c:fb:88:d3:2b:5e:97:ae:b1:e9:e3:7f:ab:
                    ca:b4:5d:8e:80:9a:a4:9e:0d:07:6f:26:eb:cd:8c:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:25:E5:EA:DF:71:52:4A:57:36:E0:3C:D3:CE:C1:31:62:22:90:FC
            X509v3 Authority Key Identifier:
                keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:80:13:6f:c7:b6:4f:6a:1e:3f:23:57:da:42:55:b0:16:be:
         15:8c:71:37:31:07:c0:62:01:b9:4d:29:c7:f3:96:0e:ce:18:
         72:5e:00:e5:39:ee:6d:57:de:e4:33:b5:0d:e2:46:f4:ab:09:
         a0:41:b7:f8:08:6a:f1:8f:41:e1:b8:d8:19:50:e0:6f:c8:33:
         7f:59:a5:6b:ab:03:56:e9:ca:74:76:1f:27:86:49:b6:6e:c3:
         2d:8f:69:2a:dd:e2:4d:bc:92:fb:59:fd:ef:73:43:68:bf:e7:
         8d:ef:e7:2d:1b:14:93:31:1d:c3:dc:83:27:d6:cf:aa:fa:7e:
         2d:09:71:07:14:12:dd:9a:2f:d7:e7:fb:b0:6e:9c:af:2f:7f:
         4b:1a:44:b1:4f:15:ec:02:55:79:80:42:90:4b:98:ba:e5:96:
         34:98:11:b9:4a:9d:46:39:c8:18:3d:0a:aa:bc:4f:ad:2a:63:
         16:9e:e0:b6:8a:b2:22:29:fa:bd:68:f7:90:8e:52:d8:04:3f:
         16:bc:ba:ea:ab:39:03:02:8e:65:7e:50:ea:62:40:c4:a6:85:
         38:40:02:93:ea:d0:8f:49:c5:d7:7e:83:a1:4d:2b:b0:94:bd:
         f9:88:41:97:ec:eb:70:70:3e:f5:c1:23:50:53:41:5d:a6:4f:
         47:fa:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:31 2026 by rpki-client