Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
File:                     QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft (raw, json)
Hash identifier:          HYqm19p2Sq68gEWOGWzqt3SFuTEDg1B//iHfnUANTNk=
Subject key identifier:   BF:4E:8D:88:74:2F:4D:8C:38:C8:22:B1:34:AC:CB:C3:1A:45:86:C1
Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
Certificate issuer:       /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
Manifest number:          010C
Signing time:             Sun 19 Apr 2026 05:39:44 +0000
Manifest this update:     Sun 19 Apr 2026 05:39:44 +0000
Manifest next update:     Sun 26 Apr 2026 05:39:44 +0000
Files and hashes:         1: QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl (hash: Jw9XjmyfWwLTGDWQ9wRL9cGNY7gWHj6eUJ6Tz1V1Zfs=)
                          2: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (hash: SbiDykr/pWZIcmbH7i6N4pOfkuK1J/v0mHF6btkD3SA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
                          rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 05:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
        Validity
            Not Before: Apr 19 05:39:44 2026 GMT
            Not After : Apr 26 05:39:44 2026 GMT
        Subject: CN=69e46aa0-be64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:d5:88:ea:76:b0:75:b4:c8:f1:a0:2c:01:
                    f5:43:8b:f6:3c:00:5a:66:3e:3d:fa:f2:c4:98:ee:
                    0b:3a:3e:5d:20:1e:4d:06:f0:cc:f2:4d:54:1e:f3:
                    6b:bc:74:5e:31:11:13:ef:28:17:48:d8:e3:02:df:
                    34:ca:e5:52:40:cf:52:cb:26:7e:bd:5b:a7:c8:2e:
                    5c:c1:98:c9:3f:9d:1a:71:b7:04:e1:3a:1d:04:40:
                    06:58:2f:86:f1:21:f8:d2:89:34:79:27:b8:b2:cb:
                    41:68:4b:1b:c3:98:77:1a:54:b1:f8:28:a1:3f:9b:
                    2b:ad:7e:2d:48:f9:73:7c:45:f0:d2:ee:5a:0f:d3:
                    19:1e:18:98:59:c9:9a:5c:5a:51:ac:2c:96:47:46:
                    70:64:0a:83:89:5b:27:c0:a3:45:f9:58:05:11:50:
                    16:30:9f:a6:77:82:bf:0a:46:54:15:12:ea:87:7b:
                    e0:44:ab:fe:74:d7:5c:e0:44:8c:9d:94:99:5b:c5:
                    fe:ab:81:63:27:46:c9:a7:17:48:77:bf:59:6e:55:
                    62:3c:8c:be:5f:59:50:33:b5:d3:4f:ec:6b:48:eb:
                    dc:e9:77:9f:0c:bf:2f:1d:85:a0:87:48:d4:29:e2:
                    e5:e0:a7:26:c0:03:0e:7c:51:c9:91:fe:31:70:27:
                    61:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4E:8D:88:74:2F:4D:8C:38:C8:22:B1:34:AC:CB:C3:1A:45:86:C1
            X509v3 Authority Key Identifier:
                keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:3d:13:56:61:65:32:c3:88:e3:00:b0:12:e7:94:8f:dc:7a:
         34:75:b8:dd:ee:0e:41:37:9b:57:88:a1:db:02:88:ea:68:07:
         dd:94:ab:f9:2b:48:0f:cf:8e:b6:4a:52:18:01:8a:c0:65:c5:
         92:31:25:fe:04:e9:0a:95:cd:58:eb:e9:36:65:7c:71:23:ae:
         60:8c:b0:27:0f:fb:4b:04:0e:df:80:68:91:3f:cd:5b:ab:4b:
         f9:1a:d2:a8:fa:9c:3a:ee:c2:be:fd:2b:f0:a8:aa:2e:65:b9:
         1b:a2:c6:73:89:9c:38:68:16:8d:12:51:2a:2d:a1:55:75:d4:
         31:fd:52:67:27:c9:2a:87:4b:8e:e5:cf:f0:52:68:7b:01:c0:
         c3:42:4a:09:79:aa:31:c7:b1:bb:6b:21:35:90:31:a0:c7:de:
         3d:aa:36:2b:3f:c1:a4:ea:f7:87:6e:d8:a1:b2:f1:17:df:68:
         46:37:62:51:2b:19:30:b0:c9:6e:58:f8:2d:76:ab:df:b7:aa:
         be:4a:0c:84:15:c6:df:93:a5:ef:27:03:4a:85:7d:cd:8d:6c:
         c7:2f:11:17:31:c6:5f:47:b0:51:11:dd:9c:6f:9d:14:dd:66:
         47:d3:b5:a3:d5:e4:bd:fb:53:7d:48:af:7e:08:a7:e6:91:7e:
         b4:f0:70:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEMzMUMxMTAvBgNVBAUTKDQwRkFBNzBGOEEyM0EwM0QxNkExMTA4NkRCRTUwMkU4
NjIxNjQ5NjcwHhcNMjYwNDE5MDUzOTQ0WhcNMjYwNDI2MDUzOTQ0WjAYMRYwFAYD
VQQDEw02OWU0NmFhMC1iZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAohnViOp2sHW0yPGgLAH1Q4v2PABaZj49+vLEmO4LOj5dIB5NBvDM8k1UHvNr
vHReMRET7ygXSNjjAt80yuVSQM9SyyZ+vVunyC5cwZjJP50acbcE4TodBEAGWC+G
8SH40ok0eSe4sstBaEsbw5h3GlSx+CihP5srrX4tSPlzfEXw0u5aD9MZHhiYWcma
XFpRrCyWR0ZwZAqDiVsnwKNF+VgFEVAWMJ+md4K/CkZUFRLqh3vgRKv+dNdc4ESM
nZSZW8X+q4FjJ0bJpxdId79ZblViPIy+X1lQM7XTT+xrSOvc6XefDL8vHYWgh0jU
KeLl4KcmwAMOfFHJkf4xcCdhnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9OjYh0
L02MOMgisTSsy8MaRYbBMB8GA1UdIwQYMBaAFED6pw+KI6A9FqEQhtvlAuhiFkln
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzMxQy9GMTA3REExMEE2
Q0YxMUVGQjJGQkI1N0RDNEY5QUUwMi9RUHFuRDRvam9EMFdvUkNHMi1VQzZHSVdT
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FQcW5ENG9qb0QwV29SQ0cyLVVDNkdJV1NXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzMxQy9GMTA3REExMEE2Q0YxMUVGQjJGQkI1N0RDNEY5QUUwMi9RUHFuRDRvam9E
MFdvUkNHMi1VQzZHSVdTV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2D0TVmFlMsOI4wCwEueUj9x6NHW43e4OQTebV4ih2wKI6mgH3ZSr+StID8+O
tkpSGAGKwGXFkjEl/gTpCpXNWOvpNmV8cSOuYIywJw/7SwQO34BokT/NW6tL+RrS
qPqcOu7Cvv0r8KiqLmW5G6LGc4mcOGgWjRJRKi2hVXXUMf1SZyfJKodLjuXP8FJo
ewHAw0JKCXmqMcexu2shNZAxoMfePao2Kz/BpOr3h27YobLxF99oRjdiUSsZMLDJ
blj4LXar37eqvkoMhBXG35Ol7ycDSoV9zY1sxy8RFzHGX0ewURHdnG+dFN1mR9O1
o9XkvftTfUivfgin5pF+tPBwiw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 15:37:12 2026 by rpki-client