Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
File:                     qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft (raw, json)
Hash identifier:          PGBP7wH76GPnUUSO37tGmfEO6NibUBT9qADtlq3uSx8=
Subject key identifier:   2E:3B:EF:AD:50:58:72:D3:E3:54:7C:6A:F7:48:CC:8E:03:C2:33:DC
Authority key identifier: A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7
Certificate issuer:       /CN=A91B8833/serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
Manifest number:          1E
Signing time:             Fri 17 Apr 2026 08:41:12 +0000
Manifest this update:     Fri 17 Apr 2026 08:41:11 +0000
Manifest next update:     Fri 24 Apr 2026 08:41:11 +0000
Files and hashes:         1: qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl (hash: bQoNMgapgp7zX0Adkr5lG7YdZzrSAd1LW2TNAq8e8YQ=)
                          2: ECE8AB3C1ACB11F1B8C39BC73A3D8C67.roa (hash: 1VgHobz4nzrs5NBqb89qRpxnur9wCmTVYrTP5UDXUqY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl
                          rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8833, serialNumber=A84BD9DD075C20A47BC1108A934D86087B5986C7
        Validity
            Not Before: Apr 17 08:41:11 2026 GMT
            Not After : Apr 24 08:41:11 2026 GMT
        Subject: CN=69e1f228-edf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:18:1e:50:cb:f6:dd:33:8f:a6:e1:b8:cf:
                    42:11:e2:33:7a:c2:4e:f6:84:b4:a8:9e:8a:28:82:
                    ba:0f:0b:14:e3:3b:a2:04:4e:35:16:75:c4:75:2a:
                    eb:61:f4:c5:8b:fc:9f:06:f1:b1:df:2e:76:b2:2b:
                    b7:1f:e1:6e:24:b3:8e:de:e7:33:b2:af:fb:c7:4a:
                    15:09:1a:15:59:20:54:86:1b:21:6c:d2:fa:36:8f:
                    9e:7f:f9:6b:a5:3e:09:89:73:08:5a:96:9d:af:ee:
                    a3:f8:cc:60:ba:e0:95:d9:9f:64:73:67:17:b3:1a:
                    4f:f0:3d:a5:ff:e4:b8:60:52:a2:2d:e3:0c:cf:41:
                    9b:ea:07:18:2e:3d:2b:24:15:d9:ec:02:45:aa:af:
                    3d:a1:6a:81:78:68:dd:1a:31:1d:72:cd:48:8d:f8:
                    53:77:6a:f7:dc:74:25:70:df:ba:81:a2:50:22:1e:
                    36:c6:f4:d8:4d:57:2c:56:0d:89:12:37:85:03:18:
                    e7:50:94:30:2d:a3:c3:ef:db:a1:53:4f:cb:ac:53:
                    5c:d2:00:4a:d6:57:d1:61:36:87:b0:3d:36:e2:3e:
                    cc:8a:96:43:38:cc:0d:14:54:20:a6:b4:b6:99:f0:
                    80:1d:4e:8f:fb:ef:b5:75:e6:95:b0:ba:8e:b2:9e:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:EF:AD:50:58:72:D3:E3:54:7C:6A:F7:48:CC:8E:03:C2:33:DC
            X509v3 Authority Key Identifier:
                keyid:A8:4B:D9:DD:07:5C:20:A4:7B:C1:10:8A:93:4D:86:08:7B:59:86:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEvZ3QdcIKR7wRCKk02GCHtZhsc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/D944369E1ABE11F1B69EC140363D8C67/qEvZ3QdcIKR7wRCKk02GCHtZhsc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:98:06:db:75:13:dc:69:a4:29:d1:57:91:fb:59:1d:83:f8:
         9a:82:9c:de:4d:78:69:f4:fc:93:81:53:b3:3c:75:74:d5:b2:
         cb:0c:e3:95:ae:f5:dd:e8:4e:a1:83:83:63:06:af:ba:8c:09:
         ad:d6:46:01:86:fe:0e:37:a9:07:83:c9:ad:42:cd:0c:a9:dd:
         da:c9:7f:1a:86:95:cd:02:c9:36:be:17:6e:78:c5:a4:8d:34:
         15:96:0c:f8:8e:92:ff:a5:17:54:84:fc:ba:05:55:d0:ab:f4:
         2e:cb:e3:ca:5d:d2:ce:55:57:9c:db:f3:ce:90:00:c9:08:49:
         66:36:3d:d2:2e:03:86:b5:1d:7d:16:aa:8d:fc:63:da:df:51:
         47:d0:05:59:6f:17:47:eb:de:58:a1:83:70:fe:a4:68:62:04:
         3c:e4:d0:6c:9a:13:59:4f:a2:86:a1:d4:1b:d0:ed:32:7d:46:
         77:57:9f:46:67:10:07:5b:7c:24:52:36:1e:cd:78:ba:30:5d:
         3c:fe:5a:52:de:e6:66:12:47:c4:03:7e:11:4a:27:ca:c0:15:
         28:91:78:89:6f:9a:b0:51:f5:63:52:f2:c4:35:0c:fc:f9:03:
         8a:cd:6e:e7:f8:2c:db:46:9e:5e:74:c6:7f:2e:26:d4:81:df:
         68:5c:ca:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:30 2026 by rpki-client