Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
File:                     qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json)
Hash identifier:          EkFYR8HQZQ+uH32aqbwF7+avStGIe+V23uOCkXP9k3s=
Subject key identifier:   C1:9F:07:56:BD:62:7D:EF:39:81:0D:78:AC:99:30:06:EC:DA:C4:37
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
Manifest number:          0100
Signing time:             Wed 15 Apr 2026 05:48:24 +0000
Manifest this update:     Wed 15 Apr 2026 05:48:24 +0000
Manifest next update:     Wed 22 Apr 2026 05:48:24 +0000
Files and hashes:         1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: TGLdRLbX/cFstGiialyM14xsGQ2w+uNs5eK8piWPCbU=)
                          2: 8F32CF70B52911F0A8B8B043C4F9AE02.roa (hash: taxyHSMu6qgppApaM1TlGNcuezRlMpE06j4rH3H1Gp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
        Validity
            Not Before: Apr 15 05:48:24 2026 GMT
            Not After : Apr 22 05:48:24 2026 GMT
        Subject: CN=69df26a8-33a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:b2:f1:0e:3c:2a:44:1e:f3:36:90:5b:1c:
                    cf:de:d2:77:c4:a0:d1:4b:d7:7d:33:5f:70:35:31:
                    48:69:f7:82:ba:37:c4:63:94:be:4d:d3:dd:89:70:
                    25:b6:1f:0c:bf:ad:12:74:37:bc:73:68:c9:1a:12:
                    0a:da:e6:c0:ff:5f:f8:c5:5c:95:fc:c1:3c:66:74:
                    bf:64:8c:6d:31:c9:52:02:fa:e7:f9:fb:15:fb:c2:
                    04:cd:78:6f:b0:0a:c7:9a:49:1f:96:f1:38:10:87:
                    a4:6f:fe:6d:a4:56:12:e6:87:5e:b2:1a:7f:71:64:
                    a2:99:5c:a5:14:27:2f:77:d9:56:6a:22:ca:91:27:
                    6d:42:86:9e:89:5a:ba:4b:aa:0e:75:97:5d:7e:d3:
                    91:d7:5f:ec:e2:16:aa:99:a3:eb:c5:2f:25:9d:ff:
                    fc:61:d0:b8:b6:87:0b:01:4d:46:56:6c:b5:a8:34:
                    95:84:dc:70:84:d6:6a:12:f4:d8:96:02:ea:ca:4a:
                    d8:11:45:0c:5e:98:34:e5:22:04:de:7d:52:fc:ca:
                    56:24:96:75:84:cc:b7:76:d4:fe:ef:76:97:14:dc:
                    f7:28:bf:a0:d2:4a:1a:c5:21:d2:49:52:33:6a:20:
                    e4:0a:b9:56:df:d1:a2:87:58:39:7e:3b:a5:47:c0:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9F:07:56:BD:62:7D:EF:39:81:0D:78:AC:99:30:06:EC:DA:C4:37
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:77:0b:2e:c5:67:79:80:76:b5:5e:e1:03:4a:e8:4a:36:35:
         df:23:01:76:e4:0b:50:f9:dd:df:47:02:8d:7a:04:17:81:53:
         70:a6:16:5f:52:cd:9d:13:8f:3e:85:9c:41:50:43:63:f0:ba:
         b0:20:40:d7:60:59:90:cd:05:a5:77:b5:e2:46:27:9e:37:5c:
         e4:f3:ad:09:d4:0f:7e:65:6b:df:d4:ae:a2:d8:22:e6:24:11:
         81:32:7f:fd:f2:27:cf:fa:b1:41:fe:b8:38:cb:37:d0:42:45:
         cf:96:2e:31:31:43:6c:e2:9e:2c:8b:69:04:9c:38:50:f8:42:
         a9:ba:b9:a2:d9:82:4f:90:a6:45:53:f5:06:fe:ac:41:92:29:
         0a:c1:e0:40:17:bc:fa:08:fc:91:8d:5a:6f:1e:7e:7d:31:a2:
         ae:60:6b:3a:5e:ab:f5:8b:8c:28:c5:60:f0:a8:da:20:60:73:
         e2:85:dc:2f:32:65:f1:f4:2b:39:35:ae:ef:f9:36:f6:33:d9:
         18:9e:4b:76:50:9b:4a:9b:9b:57:99:e5:f0:2d:63:ba:8b:f3:
         a5:f6:72:57:e5:58:2e:cd:26:48:06:10:a6:59:06:68:c9:d8:
         4f:c6:88:15:c2:2f:fa:5f:c0:06:f3:42:3f:7b:c8:1b:1d:41:
         17:17:68:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:22 2026 by rpki-client