Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
File:                     DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json)
Hash identifier:          DNFJvzt5ZDfqtD9Jlgu0L1xubLUuXS8wAtsioHfMetA=
Subject key identifier:   EC:A8:65:3E:13:BA:5C:F5:24:A7:56:17:D0:E1:8D:92:45:8E:76:37
Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0
Certificate issuer:       /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
Manifest number:          013B
Signing time:             Fri 17 Apr 2026 05:13:12 +0000
Manifest this update:     Fri 17 Apr 2026 05:13:11 +0000
Manifest next update:     Fri 24 Apr 2026 05:13:11 +0000
Files and hashes:         1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: m0sI/8M7jLTvqS3Cn8qJarBfnU7hSPDuO9Qq/66RCI8=)
                          2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: tMsqu6nSNXbRdgdOGNgxf6SRIE8d03QJp/vSSHoCY4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl
                          rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0
        Validity
            Not Before: Apr 17 05:13:11 2026 GMT
            Not After : Apr 24 05:13:11 2026 GMT
        Subject: CN=69e1c168-3ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:4e:f6:00:12:22:29:1a:78:13:cc:3e:c7:
                    9e:50:dd:c9:6e:1c:eb:02:44:5b:2f:d6:f3:e3:86:
                    df:17:f8:d6:1d:12:16:da:7d:07:d9:5a:37:e7:d0:
                    7c:62:ee:1c:39:a2:0e:ad:17:99:3f:bb:2b:9b:f2:
                    07:21:64:5e:a0:16:4b:57:4b:96:44:7e:16:1f:c0:
                    fe:91:2b:7d:92:bb:18:66:7d:e6:d7:39:64:d6:0e:
                    99:0c:f1:da:7b:0c:d8:c8:df:ca:f6:ee:c2:b0:25:
                    ba:8b:83:35:8b:1a:88:82:ab:31:43:55:55:da:50:
                    5d:49:0c:fd:03:4a:e7:fc:48:97:0d:66:cd:f4:f3:
                    37:d3:31:cc:59:a6:5f:9b:6e:ca:58:d6:f2:75:ed:
                    a8:d4:e5:8b:c0:da:3e:b6:e4:f8:68:1e:bd:c2:2d:
                    37:b8:81:88:80:ae:21:a8:86:7a:79:90:c1:75:ad:
                    d3:7a:83:59:37:76:5c:fe:86:92:fa:46:cc:94:54:
                    27:aa:c4:6c:c3:5e:ca:47:cf:c0:04:1a:47:31:b6:
                    52:a8:71:bf:fa:f0:5a:f9:1d:ab:bc:b7:32:f5:1f:
                    d5:b7:ab:c3:f2:6b:c2:e2:87:ac:57:05:ab:c6:54:
                    80:64:fd:c4:d3:b3:d1:f5:6e:9b:23:bd:ac:7d:a6:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A8:65:3E:13:BA:5C:F5:24:A7:56:17:D0:E1:8D:92:45:8E:76:37
            X509v3 Authority Key Identifier:
                keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:dc:53:3d:d6:3c:0a:92:78:c2:b2:33:aa:be:f0:d8:9c:
         27:05:d0:93:fa:f7:e3:a2:73:1b:03:80:ed:7f:53:3b:25:a9:
         f4:23:82:94:44:d5:7b:b6:d1:24:b7:f8:4e:8e:41:4c:f4:71:
         c6:4c:31:76:e5:8a:cd:43:c6:26:db:e3:7d:5f:05:c5:6b:54:
         b9:b9:61:70:7f:2c:e3:ef:55:aa:a0:3a:77:dc:c3:62:77:b9:
         a7:f6:08:ab:88:4f:b5:33:67:82:6a:0d:c2:80:f7:22:71:77:
         0a:81:94:60:46:76:ce:3f:f1:94:a8:ae:5c:fa:88:60:4d:e3:
         c9:d8:eb:4b:32:95:85:f9:1f:18:24:30:e0:62:1e:a8:8b:31:
         57:7f:06:4e:61:c3:f2:fa:fd:41:3f:65:20:ef:14:4a:3d:79:
         3f:da:2a:32:f5:81:48:0a:34:b7:74:03:09:c1:ed:9f:1c:a2:
         75:0a:6a:24:c4:10:3b:6d:93:0b:ec:d8:cb:d3:8f:61:22:73:
         64:77:2b:14:65:d6:09:1f:49:14:96:73:18:7d:03:4f:39:91:
         1d:4d:61:7f:86:e8:21:0c:cf:a4:c7:26:c1:5f:24:5c:c4:cf:
         a2:b4:da:c1:a1:a6:6e:41:a1:2c:64:cb:ca:3d:a1:81:05:d6:
         e4:b6:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:00 2026 by rpki-client