Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
File:                     QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json)
Hash identifier:          ou8rixOcdmaGsJNye/O034nJXP5nMlSsnZTe/xaptgs=
Subject key identifier:   5B:A0:B7:BB:16:A3:DD:89:8A:BD:AB:C0:47:5B:1D:42:C4:F3:3B:4E
Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
Certificate issuer:       /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
Manifest number:          026B
Signing time:             Fri 17 Apr 2026 01:53:34 +0000
Manifest this update:     Fri 17 Apr 2026 01:53:34 +0000
Manifest next update:     Fri 24 Apr 2026 01:53:34 +0000
Files and hashes:         1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: EPGkgow9OhhB3m5aTtkeWTxfZqVRmmypw2YtCm4wrXM=)
                          2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
                          rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
        Validity
            Not Before: Apr 17 01:53:34 2026 GMT
            Not After : Apr 24 01:53:34 2026 GMT
        Subject: CN=69e1929e-01f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:db:43:d5:5f:f6:1b:43:c9:11:23:59:58:
                    7d:f6:94:0e:fa:d4:5b:b0:ef:80:e8:a5:00:21:c7:
                    90:6c:21:f9:f7:30:d4:52:fe:e7:ad:71:0d:32:60:
                    f2:00:47:10:f0:fe:b0:af:9d:38:28:4a:1a:36:df:
                    1f:92:d4:a7:78:d9:bd:d0:9c:90:03:96:96:e9:84:
                    2e:46:8d:12:2b:d5:2b:8d:63:53:a5:49:13:c2:48:
                    8d:fb:5c:36:b2:e9:c9:24:45:a6:6d:0f:7c:a3:18:
                    e9:fb:06:35:40:11:77:a7:53:80:39:88:0d:88:ef:
                    34:d1:0b:43:88:bd:c4:06:00:14:ec:09:8f:8a:c0:
                    9e:b8:00:d7:ee:ea:be:a1:07:ef:0e:7e:86:26:7c:
                    8d:93:66:14:21:3c:6c:7e:83:43:5b:c3:f4:52:9e:
                    8a:ae:d6:39:f2:e0:b1:ad:d3:92:8b:04:a7:68:0b:
                    43:ba:02:66:67:0d:8f:89:14:34:55:a7:43:74:97:
                    6f:78:35:8e:83:c4:f9:ce:ea:29:9c:b4:11:82:dc:
                    68:f9:b9:cd:85:f9:3e:5a:3b:48:25:85:bb:b1:3f:
                    5a:18:b2:8a:54:a3:82:06:e0:a6:70:74:19:36:4c:
                    72:4c:aa:b4:17:29:1f:da:67:a2:43:07:13:a8:4d:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A0:B7:BB:16:A3:DD:89:8A:BD:AB:C0:47:5B:1D:42:C4:F3:3B:4E
            X509v3 Authority Key Identifier:
                keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:d6:30:58:46:f4:02:1a:ae:8b:34:bb:73:13:2d:09:86:
         d4:70:a9:f2:2e:14:0c:6b:d9:76:65:71:1b:f2:cf:a5:53:4e:
         1c:88:ae:56:36:ea:75:3d:6e:15:eb:15:d5:b8:0e:e8:88:fd:
         20:87:7b:1b:61:26:9d:b2:05:18:7a:21:62:0e:f2:72:6d:61:
         04:42:a3:b0:0b:a1:e3:7f:a4:33:79:4b:9d:61:db:87:37:26:
         2d:9b:44:74:1f:a8:60:4f:ca:57:02:e1:df:a7:ce:7e:6e:8b:
         54:2a:21:14:a4:44:bd:c9:f7:b7:b8:3e:9b:44:78:63:98:63:
         a1:3f:70:f2:52:7d:d6:6d:f3:c3:ee:2b:99:53:34:0b:76:3d:
         4f:40:75:de:9a:8a:b7:13:6b:6c:de:e5:b9:34:56:2a:86:d8:
         74:4c:a8:f4:49:9d:b6:d1:5d:f5:67:b1:f3:c3:ba:12:52:93:
         36:62:2e:25:a6:6f:52:fb:53:36:2f:68:8b:7f:16:63:5f:25:
         e0:ed:5d:6c:7b:e3:40:49:41:3e:06:24:ac:6b:1b:a3:c1:0e:
         89:36:ab:d0:4e:0d:b3:38:23:05:fa:10:f9:79:96:f9:e4:8a:
         bf:3d:fd:c5:6d:04:ba:10:53:6d:2c:8a:eb:a4:3a:2a:17:dc:
         35:32:b7:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky
QjI1Q0RFQ0YwHhcNMjYwNDE3MDE1MzM0WhcNMjYwNDI0MDE1MzM0WjAYMRYwFAYD
VQQDEw02OWUxOTI5ZS0wMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsezbQ9Vf9htDyREjWVh99pQO+tRbsO+A6KUAIceQbCH59zDUUv7nrXENMmDy
AEcQ8P6wr504KEoaNt8fktSneNm90JyQA5aW6YQuRo0SK9UrjWNTpUkTwkiN+1w2
sunJJEWmbQ98oxjp+wY1QBF3p1OAOYgNiO800QtDiL3EBgAU7AmPisCeuADX7uq+
oQfvDn6GJnyNk2YUITxsfoNDW8P0Up6KrtY58uCxrdOSiwSnaAtDugJmZw2PiRQ0
VadDdJdveDWOg8T5zuopnLQRgtxo+bnNhfk+WjtIJYW7sT9aGLKKVKOCBuCmcHQZ
NkxyTKq0Fykf2meiQwcTqE1dMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFugt7sW
o92Jir2rwEdbHULE8ztOMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE
REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s
WkNUMTdxSlBZcWtySmMzczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATizWMFhG9AIaros0u3MTLQmG1HCp8i4UDGvZdmVxG/LPpVNOHIiuVjbqdT1u
FesV1bgO6Ij9IId7G2EmnbIFGHohYg7ycm1hBEKjsAuh43+kM3lLnWHbhzcmLZtE
dB+oYE/KVwLh36fOfm6LVCohFKREvcn3t7g+m0R4Y5hjoT9w8lJ91m3zw+4rmVM0
C3Y9T0B13pqKtxNrbN7luTRWKobYdEyo9EmdttFd9Wex88O6ElKTNmIuJaZvUvtT
Ni9oi38WY18l4O1dbHvjQElBPgYkrGsbo8EOiTar0E4NszgjBfoQ+XmW+eSKvz39
xW0EuhBTbSyK66Q6KhfcNTK3Og==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:48 2026 by rpki-client