Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File:                     QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier:          6QSNQ/ppcNIFVWzyP/8FLpPlWkLmydpa6kocvGsZnpo=
Subject key identifier:   CE:3B:98:B7:61:91:61:33:87:D1:6B:20:3D:95:B7:A5:37:5D:DF:A0
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer:       /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number:          017A
Signing time:             Wed 15 Apr 2026 04:25:42 +0000
Manifest this update:     Wed 15 Apr 2026 04:25:42 +0000
Manifest next update:     Wed 22 Apr 2026 04:25:42 +0000
Files and hashes:         1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: /HXJKOPUKs2tIvu+6Wo6gXfO8POx8EQEPzTiA58ofj8=)
                          2: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: tpEbntANqqH62uyg72ojsNyUatPaZSI32JfG1Q2fADg=)
                          3: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: Ps4zTjFyLHJz+OVkfNbIpcjmNwEHH47lDT8mzreZ++U=)
                          4: B1F23610923B11F084052A57C4F9AE02.roa (hash: YSb0tSwa/5ouwveWRMPrFfSh8tKVPTJV0n6+IuBaWyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
                          rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
        Validity
            Not Before: Apr 15 04:25:42 2026 GMT
            Not After : Apr 22 04:25:42 2026 GMT
        Subject: CN=69df1346-be77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:9c:4b:ff:e4:1f:77:ec:40:ce:b3:43:27:
                    01:22:79:83:63:9b:9c:fe:7a:fd:c8:d1:6a:16:80:
                    d0:86:71:52:8c:e1:74:30:3c:7c:48:ed:bd:57:8d:
                    a4:f5:e1:9b:6e:e0:5c:b5:c3:bd:ea:a8:a8:2f:e7:
                    59:15:4b:e8:0d:46:2c:40:71:14:89:04:95:c3:c9:
                    df:56:72:91:69:b2:a1:0c:5c:c4:a6:36:de:8d:60:
                    65:de:7b:5c:6d:bf:d3:74:4c:90:56:cd:e2:9d:60:
                    67:db:0a:ae:18:99:42:10:7a:b4:b0:48:ad:b4:80:
                    a0:bc:37:a4:b2:05:e2:59:f8:24:f7:5a:3a:ea:3a:
                    45:2a:6a:f3:ec:10:47:b5:6a:f2:ce:8e:fa:55:c2:
                    3f:9c:c5:e7:0e:ab:cd:1a:c3:81:00:60:e9:dc:33:
                    4d:60:15:4b:46:90:0e:0b:32:e1:07:58:84:e6:8e:
                    6b:84:18:a7:d7:e2:98:0d:df:22:9d:ef:4b:e3:12:
                    2b:f9:78:74:a8:50:2c:48:ac:9c:a7:7b:25:b3:bf:
                    87:85:25:68:ee:01:18:a0:32:ed:e9:db:63:44:52:
                    14:c0:b3:4a:ba:8f:7d:a1:d0:c1:c1:9d:3e:6b:41:
                    d7:1f:66:e4:10:e3:8b:78:6d:bb:57:93:64:6a:ca:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3B:98:B7:61:91:61:33:87:D1:6B:20:3D:95:B7:A5:37:5D:DF:A0
            X509v3 Authority Key Identifier:
                keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:be:a5:c0:9a:4e:af:ef:99:79:3b:71:61:76:b8:e1:d8:cf:
         08:19:33:76:d5:92:e3:6b:03:09:2e:b2:58:c4:48:a8:e6:a7:
         25:31:3c:dc:ce:9b:25:64:9a:2a:a6:d6:71:6a:b6:d8:49:2d:
         f9:a0:03:5a:7f:3d:d4:5c:71:b9:44:4b:3f:ec:38:9e:ea:5a:
         c4:e9:e5:04:fd:ca:e0:e6:ae:ed:98:95:ae:38:1a:f5:68:d2:
         a5:72:31:25:f8:8c:b5:6a:98:25:30:59:0b:82:d2:a2:ff:77:
         30:65:ab:cc:a9:11:a4:9a:0f:6e:35:c3:55:a3:b4:a9:60:e6:
         2d:7d:8e:2a:a2:80:71:df:b7:11:4f:41:6a:4e:2c:49:d7:36:
         37:ca:8b:4d:8e:17:ed:7a:61:21:c0:62:29:87:01:43:61:91:
         e1:b9:ff:0f:e0:af:47:dc:b3:1b:1b:3c:3f:02:1b:24:4c:32:
         34:fb:29:76:2a:10:79:a5:18:6a:26:f6:19:8d:a8:52:c9:c1:
         bf:c5:1b:eb:df:cd:c8:c4:ec:9e:aa:85:a9:9f:fa:92:d8:db:
         6e:cc:40:76:bd:d5:5a:06:d6:26:e8:8d:20:2c:77:c5:89:14:
         2a:69:91:61:f8:0e:a9:02:da:a5:5c:6a:39:21:5c:05:da:9e:
         15:9a:27:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:13 2026 by rpki-client