Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
File:                     qu_cqSXayY_a0YyFf58d5YagUbY.mft (raw, json)
Hash identifier:          LlEDaJpwD8spOsU+Px74mEBGMaPnsJRcH6NOSHh3Qss=
Subject key identifier:   49:99:F8:53:A2:35:33:BB:C4:F2:08:50:85:6F:BA:D5:7A:AA:CF:C3
Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6
Certificate issuer:       /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6
Certificate serial:       0443
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
Manifest number:          043B
Signing time:             Fri 17 Apr 2026 00:11:11 +0000
Manifest this update:     Fri 17 Apr 2026 00:11:11 +0000
Manifest next update:     Fri 24 Apr 2026 00:11:11 +0000
Files and hashes:         1: qu_cqSXayY_a0YyFf58d5YagUbY.crl (hash: fH4Z0TymuGT+t8Z4kuryH7tgq2PdtiX2nM1zvz58ezI=)
                          2: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (hash: q5u+0pTvqChCgVdHfpHm7VuPu13j2R8NanF75slX/q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl
                          rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6
        Validity
            Not Before: Apr 17 00:11:11 2026 GMT
            Not After : Apr 24 00:11:11 2026 GMT
        Subject: CN=69e17a9f-79be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:7c:41:05:a4:c9:fa:fc:79:39:4d:61:f1:
                    57:2f:5b:39:0c:94:1c:5f:ea:8d:b8:65:39:4c:33:
                    83:ed:b1:e6:f6:66:2a:42:57:6e:05:e3:01:07:f9:
                    68:da:5d:68:7f:e4:01:a7:b9:ee:e1:ba:5a:94:17:
                    b8:ae:b7:ac:61:01:e6:51:bd:fe:c0:ee:99:4e:e3:
                    82:a6:5b:35:3e:d9:85:ea:6a:ac:ff:b9:9c:28:e8:
                    b1:18:28:50:20:5b:19:c8:cd:e6:d8:d5:0a:f7:84:
                    59:44:8f:3d:da:1f:6e:40:be:46:78:31:0d:6a:c3:
                    40:eb:bf:f4:ac:22:3d:d0:34:9c:d8:7b:0d:74:c9:
                    13:cf:ec:2d:89:ce:81:43:65:08:c8:c1:14:f6:0b:
                    d8:1f:5f:18:c8:20:21:30:e2:4c:61:b4:99:ec:b6:
                    a6:cf:c5:57:e4:f0:5e:7a:3f:2f:dd:ca:0d:65:6a:
                    bf:96:d8:41:cd:01:ff:ab:2a:7f:90:8a:ef:0a:49:
                    ce:6e:bd:4b:74:28:dd:90:52:d8:64:34:ec:a0:5e:
                    03:01:a7:86:81:25:a6:ca:1c:22:91:2f:53:9e:8b:
                    70:e3:e4:1b:64:4a:b3:bf:b5:bf:61:9b:8b:68:66:
                    3a:de:94:65:54:ba:f3:a9:0f:c3:1f:07:c3:27:38:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:99:F8:53:A2:35:33:BB:C4:F2:08:50:85:6F:BA:D5:7A:AA:CF:C3
            X509v3 Authority Key Identifier:
                keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:c3:f4:ad:a2:61:5b:7e:5c:15:a8:8f:48:41:63:ed:8f:
         04:5e:61:7c:ea:c3:94:86:04:c4:0c:d2:35:89:71:5e:a1:03:
         82:97:14:a6:14:d4:ba:93:5a:cd:b1:12:41:73:44:06:01:98:
         98:ed:1f:8c:b4:ca:24:d7:ad:58:88:87:95:99:ce:7e:4c:27:
         79:4b:07:68:d5:7d:8c:04:91:1e:6a:2f:76:a0:cb:ee:b9:cc:
         0f:3d:66:b6:01:2f:1a:cc:4e:50:f3:99:4b:a3:95:81:ce:37:
         97:51:93:c1:b1:d4:67:bc:6e:cd:f6:d2:6a:63:49:c9:2b:7d:
         6d:31:b2:fd:02:fd:4d:7a:f0:45:75:71:2b:ab:1d:02:66:99:
         43:b8:ea:72:d5:d6:19:c2:0d:b0:4b:b3:84:cd:64:80:bf:d4:
         d8:fe:27:36:64:91:a8:55:05:3c:26:fc:60:cc:ed:36:90:39:
         6b:8e:68:24:84:79:f6:51:3e:e7:0c:33:5b:73:3a:1d:ac:e3:
         db:23:f1:5a:28:0a:2d:44:60:e1:2c:73:0c:e1:6e:24:d9:f1:
         32:ba:0b:1e:9a:e3:c1:ba:ba:1a:cb:ff:a0:13:61:eb:46:a4:
         2c:64:66:1a:22:a6:e7:fe:de:81:90:a5:82:b8:96:65:30:73:
         6d:9d:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:08:48 2026 by rpki-client