Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
File:                     QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft (raw, json)
Hash identifier:          mYehe1LKWnmqUSHG+qOXJ18meJSgbsO+GapGannUsxs=
Subject key identifier:   40:B4:51:51:EA:D1:CF:CB:75:4D:08:B5:FF:61:C0:62:15:4F:73:8F
Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91
Certificate issuer:       /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
Certificate serial:       0256
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
Manifest number:          024A
Signing time:             Fri 17 Apr 2026 02:13:02 +0000
Manifest this update:     Fri 17 Apr 2026 02:13:02 +0000
Manifest next update:     Fri 24 Apr 2026 02:13:02 +0000
Files and hashes:         1: QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl (hash: mGR7df7Ty0KjwVKZ0T3Ev8KqL+iutKdqB8sT2HbAl9M=)
                          2: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (hash: iuEGM5sJyxTcHsJjbcci7wnj/yq4o+HmmSlZprFPloE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl
                          rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CEC7, serialNumber=41618AE13A41F999C5790428B716FCAE5424A891
        Validity
            Not Before: Apr 17 02:13:02 2026 GMT
            Not After : Apr 24 02:13:02 2026 GMT
        Subject: CN=69e1972e-6fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:42:2d:3d:6a:b7:9b:51:ff:26:d1:33:2b:
                    4a:35:50:e2:f2:06:73:d3:b7:52:11:92:56:1d:34:
                    13:b0:6e:9d:3f:eb:f0:0a:58:55:32:96:8f:f5:1f:
                    cf:cf:ea:91:29:1e:ed:5d:9b:3d:c4:46:8f:45:4e:
                    1a:54:94:40:ac:59:f9:80:1b:84:ff:11:c4:2f:5f:
                    50:8b:1a:04:84:8c:d7:df:38:d1:e1:30:62:5c:31:
                    96:d0:ca:75:94:0b:5e:08:90:77:f3:2b:e9:d2:e4:
                    3f:53:62:6c:c8:3f:37:0d:c7:0a:8f:10:52:c7:d7:
                    56:b7:ac:2d:eb:fa:54:c4:03:a1:a8:8d:8f:e8:d0:
                    1e:71:58:32:9c:b4:50:aa:e6:88:7d:d5:b6:2b:19:
                    2b:d2:90:02:c1:77:2c:41:20:9f:c7:42:ee:87:27:
                    ef:8a:28:7e:a3:98:25:a1:1b:b8:49:a0:b3:a0:9b:
                    d3:c5:f5:b5:b5:cc:0d:c7:24:72:81:58:61:8a:cb:
                    e5:11:d3:de:b9:22:86:6c:30:ad:99:6b:61:39:17:
                    5f:44:50:18:40:e4:88:cc:8d:5f:0e:06:51:52:64:
                    a4:ad:79:5c:79:29:c4:11:55:cd:c4:ee:a7:75:16:
                    fd:c1:6d:30:ec:99:c2:30:a1:9a:96:03:19:65:d9:
                    80:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:51:51:EA:D1:CF:CB:75:4D:08:B5:FF:61:C0:62:15:4F:73:8F
            X509v3 Authority Key Identifier:
                keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:53:a0:30:ed:38:eb:34:1b:c8:9c:bb:15:b5:aa:77:18:
         48:ca:67:93:93:e4:e2:30:98:03:05:a8:84:ec:e6:bf:e1:03:
         4f:a5:bb:7e:a5:99:22:eb:38:a0:ec:05:c6:da:05:8a:4f:15:
         56:6c:f3:76:5b:f7:4b:98:c6:76:3b:a7:24:7b:2b:d7:f6:fc:
         bc:42:73:08:07:49:36:4c:ce:26:90:18:05:e6:74:cf:8a:be:
         ba:c7:13:57:60:7f:73:13:c3:19:59:2a:24:fd:19:4a:39:ea:
         7f:4c:cf:94:82:b0:5a:1c:95:11:a1:7b:be:fe:0e:b2:72:33:
         5d:a0:0f:af:95:7d:1a:e6:6a:75:99:48:7b:71:d0:90:bb:4b:
         b5:50:5c:a4:33:a0:a9:a8:5b:fc:39:c4:34:d2:94:28:2f:ef:
         7b:73:32:4c:8d:8b:e9:17:ef:c6:08:12:fc:cd:3e:a5:ef:1d:
         c4:b4:2d:11:5d:c7:a8:ae:85:6c:65:3f:2b:6f:bc:88:28:93:
         b9:7a:e1:bb:43:46:8c:bb:cc:3f:1f:82:28:1e:b3:2d:95:dc:
         62:3b:bb:b5:de:f7:55:52:9e:f7:c8:f3:7a:8f:fc:f8:40:d5:
         ac:b1:5c:a4:5d:b8:ce:ce:3c:90:a9:ff:73:b1:ec:98:85:e4:
         af:92:1a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:31:57 2026 by rpki-client