Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
File:                     QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json)
Hash identifier:          1KzyXY2mIS3fY8OIbvqDjP7+MWxhqRE1Uz7BPe1er0c=
Subject key identifier:   AD:36:C6:27:CF:8D:73:E5:B4:7A:7B:96:1F:38:23:88:90:8A:36:73
Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
Certificate issuer:       /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Certificate serial:       0739
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
Manifest number:          0731
Signing time:             Thu 16 Apr 2026 21:42:07 +0000
Manifest this update:     Thu 16 Apr 2026 21:42:06 +0000
Manifest next update:     Thu 23 Apr 2026 21:42:06 +0000
Files and hashes:         1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: HPup74LWe46hBCw27O5U2Jf8pVKKmQyvi6JeAc2/qGo=)
                          2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: 1Chxn96nNA7oNUELmf6ynN2eqdlPAPSq53GJ8LyaxFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
        Validity
            Not Before: Apr 16 21:42:06 2026 GMT
            Not After : Apr 23 21:42:06 2026 GMT
        Subject: CN=69e157af-3cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:83:d9:49:0e:52:81:05:26:da:ad:e6:ac:
                    fb:53:42:8f:b0:14:dd:45:b5:35:8d:73:df:6f:c1:
                    c6:38:72:35:b6:f3:ac:d5:17:0d:c0:ac:bb:19:25:
                    dd:cf:5b:59:55:93:fa:a2:95:d8:ee:60:7a:da:7c:
                    d2:f7:1a:c7:01:4e:cc:f5:0e:11:0b:dc:e9:e9:06:
                    9c:e6:f1:6b:54:ea:eb:46:1b:c6:70:92:87:24:69:
                    a6:99:98:a6:60:83:06:60:13:02:00:2a:28:6f:c0:
                    7c:54:86:73:ac:cd:89:60:0f:73:48:cc:0f:ef:10:
                    ec:25:a4:4f:d6:cc:9b:3c:60:8a:74:c7:27:c0:cf:
                    ff:29:2b:8d:78:ae:d1:73:76:04:9f:c7:b5:be:00:
                    16:a1:e9:d2:a9:62:e5:fb:36:42:54:ef:57:b3:61:
                    99:d9:df:1f:07:8c:f0:47:0f:c4:08:71:d0:fa:2f:
                    de:26:8a:dd:61:7e:86:7c:c5:39:78:29:68:54:64:
                    71:57:f2:d2:65:15:10:1c:03:ec:a8:0f:da:60:3a:
                    ca:c5:69:b1:95:1a:e7:b2:91:b0:24:c5:47:d1:24:
                    b4:1f:0c:01:b2:4c:52:be:98:fd:5d:75:f6:51:a8:
                    71:23:51:e6:b9:e9:2a:f9:cc:50:4d:c1:6b:7f:fe:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:36:C6:27:CF:8D:73:E5:B4:7A:7B:96:1F:38:23:88:90:8A:36:73
            X509v3 Authority Key Identifier:
                keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:96:9e:b8:b9:ae:d0:c0:06:78:dd:51:b4:16:67:18:02:0b:
         bf:08:e6:e5:89:ef:ed:cf:b1:dc:50:9b:17:86:d4:e2:58:6f:
         87:3d:53:69:dc:cc:36:86:46:be:1a:b0:b9:24:23:af:7e:1d:
         01:ae:8f:7b:cc:a2:ec:ac:26:74:3f:9b:35:da:b4:f7:e5:e7:
         79:01:f5:6f:b2:05:84:a1:3e:ae:34:7d:21:36:ba:0d:34:4e:
         b8:b7:5c:04:64:7f:15:45:85:bd:0f:a3:5e:bb:68:f3:97:d3:
         16:41:0c:e4:e3:83:10:0d:91:49:ca:5d:19:11:b2:7f:1d:96:
         76:90:de:c6:21:96:79:2f:e0:64:6b:6e:ae:05:07:56:b8:c6:
         31:4e:2a:48:b3:a5:d1:23:40:d5:40:77:5d:cf:95:3e:e2:1a:
         f3:44:d2:38:90:5f:8b:9d:cb:97:30:82:f0:58:47:52:f0:d4:
         9e:7c:c0:a5:ea:75:7e:7d:d1:6c:7f:d0:3e:bf:3a:fa:0b:98:
         94:2d:fb:9f:c0:30:47:cf:53:b9:9a:46:56:55:ec:62:d2:53:
         51:a2:7d:e4:ea:08:e7:36:00:ac:f4:34:e9:d3:73:d5:03:40:
         e6:60:7a:51:8f:40:3c:0d:d4:3b:cb:88:45:9a:a3:ee:aa:35:
         19:da:a0:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1
MzM3Q0E0ODUwHhcNMjYwNDE2MjE0MjA2WhcNMjYwNDIzMjE0MjA2WjAYMRYwFAYD
VQQDEw02OWUxNTdhZi0zY2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtBiD2UkOUoEFJtqt5qz7U0KPsBTdRbU1jXPfb8HGOHI1tvOs1RcNwKy7GSXd
z1tZVZP6opXY7mB62nzS9xrHAU7M9Q4RC9zp6Qac5vFrVOrrRhvGcJKHJGmmmZim
YIMGYBMCACoob8B8VIZzrM2JYA9zSMwP7xDsJaRP1sybPGCKdMcnwM//KSuNeK7R
c3YEn8e1vgAWoenSqWLl+zZCVO9Xs2GZ2d8fB4zwRw/ECHHQ+i/eJordYX6GfMU5
eCloVGRxV/LSZRUQHAPsqA/aYDrKxWmxlRrnspGwJMVH0SS0HwwBskxSvpj9XXX2
UahxI1Hmuekq+cxQTcFrf/7RSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK02xifP
jXPltHp7lh84I4iQijZzMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy
NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE
R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgJaeuLmu0MAGeN1RtBZnGAILvwjm5Ynv7c+x3FCbF4bU4lhvhz1TadzMNoZG
vhqwuSQjr34dAa6Pe8yi7KwmdD+bNdq09+XneQH1b7IFhKE+rjR9ITa6DTROuLdc
BGR/FUWFvQ+jXrto85fTFkEM5OODEA2RScpdGRGyfx2WdpDexiGWeS/gZGturgUH
VrjGMU4qSLOl0SNA1UB3Xc+VPuIa80TSOJBfi53LlzCC8FhHUvDUnnzApep1fn3R
bH/QPr86+guYlC37n8AwR89TuZpGVlXsYtJTUaJ95OoI5zYArPQ06dNz1QNA5mB6
UY9APA3UO8uIRZqj7qo1GdqgLg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:34:37 2026 by rpki-client