Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
File:                     sQnalQV25mJneVo066kbw3qZI7Q.mft (raw, json)
Hash identifier:          WJjEFE8hwM9HoI/IuoK9mgMIJCCsuTW1xX9zvqxwdrU=
Subject key identifier:   DF:F9:1F:CD:6B:F4:1A:D1:89:3F:30:A9:7E:C8:77:2A:D7:FE:AE:BD
Authority key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
Certificate issuer:       /CN=A9196DC9/serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
Manifest number:          6E
Signing time:             Fri 17 Apr 2026 07:44:32 +0000
Manifest this update:     Fri 17 Apr 2026 07:44:32 +0000
Manifest next update:     Fri 24 Apr 2026 07:44:32 +0000
Files and hashes:         1: sQnalQV25mJneVo066kbw3qZI7Q.crl (hash: l1AFRxKebAqbXm17RtxxEKk9xHTYcd9z30tVqf1EerU=)
                          2: C75F23C4319A11F1AC7C94E0AD833773.roa (hash: 1Ajgj3M7Y6gTIT79eYTCLQ55nPjbdLfEyaEufEH+E5M=)
                          3: A7C3D2B2316811F19417970E9A833773.roa (hash: AV0jegaonQnfecWhF4qjPIga5TAipRMyKt3mCTrZPnA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
        Validity
            Not Before: Apr 17 07:44:32 2026 GMT
            Not After : Apr 24 07:44:32 2026 GMT
        Subject: CN=69e1e4e0-1be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:b5:8b:a8:6d:23:aa:08:1c:8d:10:91:5b:
                    f0:07:25:3a:81:27:02:86:f8:77:12:05:3b:d8:6e:
                    a8:dd:b4:cf:6b:60:8e:86:b2:ce:ed:1e:9e:5a:3c:
                    1b:aa:0e:b8:cd:bb:26:ea:61:9b:49:2b:3c:e9:a4:
                    3a:f6:19:03:80:bd:76:2f:c3:3e:9b:b6:13:34:4b:
                    37:c5:4e:f9:24:f2:0d:9d:22:63:02:29:b1:c3:7b:
                    63:45:0a:fa:3d:6e:33:86:84:eb:71:2f:56:69:b2:
                    a0:ff:55:cd:57:7e:b4:87:c6:5f:b0:73:75:8f:3d:
                    2d:07:72:76:77:54:82:bf:72:e8:f0:8a:9c:3d:0b:
                    44:55:f4:eb:0f:8a:f4:8a:05:0d:ac:20:c0:37:8a:
                    8e:21:5d:f6:e2:64:34:b5:01:52:59:51:a1:f3:10:
                    df:55:bb:ff:a3:1d:13:7f:a5:2f:e6:0c:88:26:00:
                    a3:92:8f:2e:2b:1e:86:d7:96:90:1f:3a:ef:fe:62:
                    08:08:f8:54:07:9c:a9:6f:06:86:a6:ca:7f:7b:1f:
                    26:22:14:e4:96:7f:2e:dd:ef:67:8d:39:a4:de:0f:
                    8f:a8:a9:fe:21:78:1c:e5:3f:18:83:81:08:af:b1:
                    22:b7:00:d9:ed:51:a5:63:fd:a2:2d:b9:f9:87:23:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F9:1F:CD:6B:F4:1A:D1:89:3F:30:A9:7E:C8:77:2A:D7:FE:AE:BD
            X509v3 Authority Key Identifier:
                keyid:B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:e7:cb:75:de:40:c4:65:6f:40:1e:39:88:6d:ab:9d:5b:
         a0:59:4d:c4:77:b7:ff:a8:0b:25:12:46:a5:eb:51:0e:6b:33:
         94:42:9b:93:0b:1d:5c:f3:b2:d2:79:e4:7d:a7:ff:d6:ea:ea:
         70:00:88:07:1c:95:5e:17:57:c6:3f:90:5e:8b:7f:b9:c2:f8:
         3e:90:07:b4:6b:35:64:ff:42:2a:a9:fe:8a:45:04:76:0c:f5:
         d4:3c:82:9c:74:64:94:2f:73:41:03:f1:9f:ac:62:d0:63:04:
         ee:6c:c2:90:7f:a3:72:09:a0:6f:65:52:67:45:dd:56:38:3d:
         cf:19:b7:2a:c7:0b:8c:7d:92:11:19:9b:41:05:e9:5d:8d:f4:
         0c:c5:87:fb:ae:30:5c:01:ef:2a:6a:47:a0:5f:7a:ef:d3:73:
         4f:15:6b:e9:7d:29:4d:3b:cc:47:f4:58:db:2a:cb:00:46:f6:
         9d:ed:36:74:9d:2f:c4:e8:d8:f1:d6:a9:30:99:0a:d0:e1:b6:
         3f:71:4b:3a:dc:a3:3a:4b:0b:f1:a5:16:e1:25:c8:5d:5b:55:
         d7:75:20:fc:d8:cc:87:19:f3:ce:34:77:8d:f9:e6:52:18:02:
         b7:56:0a:fe:85:ca:f8:28:d4:b1:2d:5d:96:42:11:28:af:1b:
         b9:d9:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:06 2026 by rpki-client