Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File:                     qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier:          yZGlk0NiyAgQmPW5Nm9vRCtjaiubOr7HX5OEaeJx3no=
Subject key identifier:   55:D1:92:D1:26:54:FB:F8:1D:3F:FE:0F:A0:6B:A8:63:8D:99:26:25
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer:       /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number:          0246
Signing time:             Sun 19 Apr 2026 02:10:41 +0000
Manifest this update:     Sun 19 Apr 2026 02:10:41 +0000
Manifest next update:     Sun 26 Apr 2026 02:10:41 +0000
Files and hashes:         1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: e7l8pJf9/toAE5CwOe1YNOITmVLLLJuH4nVNEKFCKpQ=)
                          2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
        Validity
            Not Before: Apr 19 02:10:41 2026 GMT
            Not After : Apr 26 02:10:41 2026 GMT
        Subject: CN=69e439a1-11a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:8d:e3:29:51:16:c7:a0:0c:cd:f9:6a:53:
                    22:99:57:bd:d5:f3:50:45:3d:79:d5:22:22:34:a6:
                    20:d2:69:56:f1:a2:be:c1:e1:c2:e5:e0:5b:6d:4e:
                    72:d2:f3:c2:42:3b:be:83:d1:b1:72:61:61:b8:e7:
                    bd:94:08:da:8a:23:5e:05:9d:35:98:86:95:4c:91:
                    af:06:c4:7a:67:9a:91:3b:8e:26:ee:87:65:d0:fd:
                    b1:e8:70:13:3a:32:84:14:ef:04:f8:5b:55:78:c5:
                    fa:51:cd:ce:54:80:3b:f5:1b:0a:8e:1e:67:fb:f9:
                    da:c7:d4:03:dc:fe:58:03:e0:e9:c6:6b:17:dd:38:
                    e5:9a:6c:da:d5:f2:2f:79:40:f1:9e:6a:5b:a0:cb:
                    7e:20:1f:9f:17:d0:47:af:a0:54:1a:71:73:d1:88:
                    71:e6:de:4d:83:4c:01:42:86:a8:b1:51:0c:c8:68:
                    51:57:33:42:11:5b:5f:d3:c6:e0:6c:6a:f9:78:ae:
                    5b:36:d6:44:3d:14:05:00:a5:76:87:65:3e:47:d2:
                    4a:f0:f2:be:cc:89:cb:d9:a7:69:99:19:87:58:4c:
                    f8:ad:12:d8:1e:93:2f:af:14:d9:78:8d:74:3d:8a:
                    b6:09:0b:15:bf:f0:8b:71:7c:19:67:e7:53:9d:3d:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:92:D1:26:54:FB:F8:1D:3F:FE:0F:A0:6B:A8:63:8D:99:26:25
            X509v3 Authority Key Identifier:
                keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:cf:cd:2c:58:83:8f:dd:fe:08:8c:3d:eb:42:04:08:ec:
         fd:18:eb:a0:ba:05:86:c8:ce:fd:20:37:ee:3e:59:f0:c8:97:
         93:b1:99:31:57:3d:46:95:e0:d7:a1:38:74:98:84:94:21:36:
         ad:2e:1f:1e:2b:17:0e:6e:15:c0:46:cb:56:9b:85:52:1a:04:
         f9:1e:5b:2c:6d:4f:c2:44:50:3e:8c:ed:78:ea:89:cc:80:3e:
         fd:37:4f:19:79:72:74:b9:b5:ac:f0:fd:9d:0d:37:e4:ab:27:
         3a:08:32:c3:db:4e:91:96:87:57:1c:9c:dc:c8:47:55:89:d2:
         73:ac:0b:e6:ec:30:35:31:0d:e5:3f:6d:c1:72:8b:82:d9:0a:
         8a:e3:c9:93:ab:cb:25:63:d7:2c:bf:2e:fb:a6:bc:1f:1d:69:
         e3:02:d6:78:07:17:fe:40:9f:f1:37:d2:62:db:50:bf:21:96:
         fd:01:62:99:ab:9b:e8:fe:d4:eb:3b:f0:69:77:1b:c3:4f:f7:
         db:99:6d:69:61:1c:07:4a:d5:84:7c:74:31:cd:70:f1:f6:ad:
         df:7a:63:cc:33:21:46:6a:27:46:e0:7e:d1:60:39:9d:44:f1:
         1f:3e:66:11:60:4d:59:48:27:da:03:a2:fa:7f:f5:a5:08:3a:
         b1:58:ac:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFDNTIxMTAvBgNVBAUTKEE5OTBEQTI1Q0Y0RTAxQkNFQjdFQzc1QzE3ODYwRkI5
NDdCRTA5MkEwHhcNMjYwNDE5MDIxMDQxWhcNMjYwNDI2MDIxMDQxWjAYMRYwFAYD
VQQDEw02OWU0MzlhMS0xMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZmN4ylRFsegDM35alMimVe91fNQRT151SIiNKYg0mlW8aK+weHC5eBbbU5y
0vPCQju+g9GxcmFhuOe9lAjaiiNeBZ01mIaVTJGvBsR6Z5qRO44m7odl0P2x6HAT
OjKEFO8E+FtVeMX6Uc3OVIA79RsKjh5n+/nax9QD3P5YA+DpxmsX3Tjlmmza1fIv
eUDxnmpboMt+IB+fF9BHr6BUGnFz0Yhx5t5Ng0wBQoaosVEMyGhRVzNCEVtf08bg
bGr5eK5bNtZEPRQFAKV2h2U+R9JK8PK+zInL2adpmRmHWEz4rRLYHpMvrxTZeI10
PYq2CQsVv/CLcXwZZ+dTnT3a5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXRktEm
VPv4HT/+D6BrqGONmSYlMB8GA1UdIwQYMBaAFKmQ2iXPTgG8637HXBeGD7lHvgkq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUM1Mi8wRTVEQkZCNEM0
QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0FienJmc2RjRjRZUHVVZS1D
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FaRGFKYzlPQWJ6cmZzZGNGNFlQdVVlLUNTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUM1Mi8wRTVEQkZCNEM0QkMxMUVEODg0MDNBNDhDNEY5QUUwMi9xWkRhSmM5T0Fi
enJmc2RjRjRZUHVVZS1DU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADATPzSxYg4/d/giMPetCBAjs/RjroLoFhsjO/SA37j5Z8MiXk7GZMVc9RpXg
16E4dJiElCE2rS4fHisXDm4VwEbLVpuFUhoE+R5bLG1PwkRQPozteOqJzIA+/TdP
GXlydLm1rPD9nQ035KsnOggyw9tOkZaHVxyc3MhHVYnSc6wL5uwwNTEN5T9twXKL
gtkKiuPJk6vLJWPXLL8u+6a8Hx1p4wLWeAcX/kCf8TfSYttQvyGW/QFimaub6P7U
6zvwaXcbw0/325ltaWEcB0rVhHx0Mc1w8fat33pjzDMhRmonRuB+0WA5nUTxHz5m
EWBNWUgn2gOi+n/1pQg6sVisew==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:39 2026 by rpki-client