Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File:                     qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier:          hsrXJ2L5Y3S8isI9sYAN5JVA/VFpsf8iFcDvfWmFzYg=
Subject key identifier:   D5:B6:EA:AC:6E:CD:57:D4:A3:27:91:1C:3F:96:B5:74:24:62:46:9F
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer:       /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number:          01DB
Signing time:             Fri 17 Apr 2026 03:43:16 +0000
Manifest this update:     Fri 17 Apr 2026 03:43:16 +0000
Manifest next update:     Fri 24 Apr 2026 03:43:16 +0000
Files and hashes:         1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: exf/ONPE78RoJN6riGob+5IWCeNCwzR9U3rWMcLmZC4=)
                          2: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: p6zGTgqZJ7iiiCzsm415AfpPsLOlXyGxbt61Izp1Z6U=)
                          3: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 6JnWBHrw4ffDiGiVWAOckF4qnqqFhoHfVR3johcA4II=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
        Validity
            Not Before: Apr 17 03:43:16 2026 GMT
            Not After : Apr 24 03:43:16 2026 GMT
        Subject: CN=69e1ac54-5419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:14:2e:16:8e:21:4d:7b:d3:f8:3d:fb:d6:
                    a4:4c:c1:a7:73:74:e2:1b:61:ef:37:41:a9:1b:96:
                    ad:74:1d:31:1d:a6:f3:2d:d1:2b:71:3e:2f:83:b8:
                    b7:56:a6:b5:58:4a:d4:46:c1:d1:48:85:39:f0:f4:
                    3d:83:35:44:cf:c4:99:72:84:ed:e4:97:b4:7e:04:
                    23:8d:e5:72:16:ef:99:4d:ae:ba:a6:15:fd:00:98:
                    d2:69:77:3f:cd:e4:5b:8c:b9:7b:06:e9:c4:9f:cd:
                    72:59:4e:20:e6:a3:da:9a:2e:61:a2:bf:6d:53:8a:
                    06:03:09:19:39:03:07:71:b9:62:67:08:d3:dc:22:
                    76:a0:e7:48:47:9f:33:41:63:eb:0f:1f:3e:70:fb:
                    37:f3:0f:d2:83:02:29:16:06:fb:84:8b:d6:22:3d:
                    5f:19:18:7b:b9:10:f3:67:9f:1c:e5:fe:b1:30:d3:
                    83:82:39:29:4d:3d:ec:35:a0:1a:79:43:76:4c:2c:
                    71:60:a8:e6:81:bd:e0:9d:e8:83:2f:e2:3b:78:03:
                    ea:40:9f:0b:88:10:0b:ec:a9:36:59:8e:7d:f8:76:
                    0b:71:62:43:45:fd:f5:df:1d:7d:a2:13:8c:1d:81:
                    79:c3:09:e2:d3:28:c9:d4:a5:2b:a4:92:dd:3f:5e:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B6:EA:AC:6E:CD:57:D4:A3:27:91:1C:3F:96:B5:74:24:62:46:9F
            X509v3 Authority Key Identifier:
                keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:16:7a:19:80:29:11:76:60:b3:52:2c:1a:00:7b:0c:b1:3b:
         ac:c7:d8:3b:b7:27:9b:af:25:a9:3b:a9:c7:91:1d:9a:23:f4:
         56:b2:b9:49:05:35:9a:bb:77:67:67:64:5c:1d:b7:94:3c:8d:
         9b:89:90:c8:b5:89:46:4e:95:4c:dd:18:33:3d:c7:25:54:36:
         13:24:89:6b:d0:44:ac:b8:43:29:3b:b4:6a:e5:99:c8:b6:b0:
         a4:d0:b2:16:c0:17:68:67:1b:fc:d9:6d:78:3a:87:9f:60:d4:
         8b:df:5a:93:9b:77:29:2f:83:cc:c9:7e:07:9c:13:9c:a0:a6:
         a3:2a:64:c7:ef:59:10:9d:2a:8d:3b:15:68:7e:9e:61:1b:d0:
         bc:6e:8b:c1:61:d1:01:5a:2f:d5:db:ae:6a:cd:b4:6a:0e:b9:
         c8:c8:5f:ec:16:f8:66:36:9c:41:d1:2e:c5:0c:eb:bc:11:6e:
         de:f8:d3:b9:7f:c9:b5:14:0d:7c:0b:bc:49:e1:bb:cd:3d:99:
         4c:91:23:65:ef:27:40:20:a2:5e:4e:e7:30:c7:55:48:5f:f1:
         04:5c:7a:80:0d:84:a8:7c:8c:cd:f0:47:a4:e8:1d:84:d0:ae:
         6a:d6:af:23:13:57:a8:01:31:57:d7:25:bb:44:8f:69:47:c3:
         28:73:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:01:52 2026 by rpki-client