Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File:                     QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier:          8iHgJIse+5yTCR7ddmWq+3BrOk3zaVQwfeAsSUO/Cz4=
Subject key identifier:   38:7A:6A:B9:A0:B9:5E:16:AB:06:41:78:B0:40:F7:43:FB:2B:E8:E7
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer:       /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number:          AB
Signing time:             Wed 15 Apr 2026 06:55:55 +0000
Manifest this update:     Wed 15 Apr 2026 06:55:54 +0000
Manifest next update:     Wed 22 Apr 2026 06:55:54 +0000
Files and hashes:         1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: 5dUESRfZ//mnbm339ysD/lwOMIXw0ijYc88MyIJEqPs=)
                          2: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: cG6u0zgjdvCrRZeQ4usyXAcEzT17uS3cbK/qREEeINU=)
                          3: B87594FC08B311F1954B37591C3D8C67.roa (hash: wztUnu/AtmwGJSEKvUQ+sSvPTP/4Cs6eUYir69FLSaI=)
                          4: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: kYrLbQFT1ZzGHGGu97W4fdlheMT2k3tj7Vb3H/0HdO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 06:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
        Validity
            Not Before: Apr 15 06:55:54 2026 GMT
            Not After : Apr 22 06:55:54 2026 GMT
        Subject: CN=69df367b-5f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:54:f4:a0:a5:06:10:93:ff:13:74:7b:13:
                    16:80:60:fc:06:26:2e:f1:f4:70:ca:f5:8e:36:95:
                    35:aa:33:f1:3e:b2:98:c9:0d:25:37:de:21:bf:ff:
                    82:39:f2:d5:21:ea:4c:74:12:00:05:80:e1:2c:81:
                    d4:35:9c:d7:ab:69:45:d0:28:7a:25:c9:0d:05:5e:
                    3e:e4:20:64:83:43:1a:7d:56:5d:43:55:b2:ad:b4:
                    f6:bf:02:b8:6f:d8:9f:c5:40:44:b1:01:7e:0c:c8:
                    e2:fe:56:41:dd:1f:73:09:b7:24:44:cf:f2:94:d9:
                    77:08:03:6e:02:8e:26:20:42:6e:65:54:3f:34:10:
                    b6:7a:ba:61:bf:41:26:b2:da:69:31:e3:e3:24:ac:
                    41:39:79:82:b0:47:d0:13:2f:08:41:65:db:f1:02:
                    49:3f:12:fc:92:0d:d9:84:1f:03:5b:bd:68:58:98:
                    74:d6:16:b6:c1:c7:ee:18:d6:58:3f:17:2c:92:4c:
                    66:a7:aa:af:3a:8f:2e:c5:3a:7a:7b:05:0f:96:eb:
                    cf:18:4f:85:53:f7:39:40:6c:59:f0:39:09:ed:0e:
                    b9:be:49:2b:a6:60:b8:5a:f4:8a:26:74:c9:92:9d:
                    59:33:9f:41:f3:97:1a:82:59:f6:0b:d2:ed:81:6b:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:6A:B9:A0:B9:5E:16:AB:06:41:78:B0:40:F7:43:FB:2B:E8:E7
            X509v3 Authority Key Identifier:
                keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8f:13:f5:bf:68:12:c4:d8:90:17:eb:60:7c:d4:71:67:8e:
         e9:ce:7a:3f:40:c2:b0:ea:0a:57:1a:fa:5a:4f:02:26:fe:4b:
         5e:a1:0d:5d:f7:ff:af:6b:c6:f9:df:a8:ed:20:15:a0:2b:3e:
         1d:a5:6b:46:f1:4f:0d:7d:ae:65:ad:86:87:2d:06:7a:bb:9a:
         b4:57:68:7a:9a:c6:42:03:83:6e:ed:92:6f:3b:a0:00:ae:5b:
         0e:23:15:4c:dd:2e:c0:33:cf:95:aa:39:c4:06:81:f4:b9:82:
         83:0a:87:69:95:bf:0c:f8:88:b7:96:61:04:bf:90:85:d5:5f:
         13:40:75:b6:31:bb:58:fc:fb:8e:a5:32:de:56:98:b5:31:33:
         19:cf:cd:56:7e:ce:c9:be:69:52:1d:b4:b5:74:54:c3:29:ba:
         85:c8:5e:ed:8e:16:88:84:23:84:86:65:d5:19:64:29:e6:20:
         1c:f1:f7:d9:f0:f6:0c:c9:6e:13:44:29:ac:d7:bc:b2:4c:d7:
         3f:12:67:c8:26:dd:cf:e0:6e:e3:d0:0b:52:eb:da:13:d0:09:
         93:a4:bd:5f:d7:91:61:76:b4:fa:4b:4e:6b:40:76:55:51:30:
         c7:14:61:09:d3:c1:31:26:e9:89:5a:9f:e5:aa:ab:15:83:68:
         0f:b2:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:45 2026 by rpki-client