Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File:                     qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier:          nokgccR+v0PXYHqoPkgySD1FGorFJUnWG8310hW48Tk=
Subject key identifier:   5D:03:52:A6:88:FE:FA:73:E8:BC:76:4C:DE:0F:AD:A4:D5:29:B4:B8
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer:       /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial:       0A59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number:          0A47
Signing time:             Thu 16 Apr 2026 19:38:02 +0000
Manifest this update:     Thu 16 Apr 2026 19:38:01 +0000
Manifest next update:     Thu 23 Apr 2026 19:38:01 +0000
Files and hashes:         1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: qesbYjawqw7X8Nj8QZKRSwBOi1qhNchpIGvvL6nh7xA=)
                          2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: mpij4Re6bXjGBWFyLXPJmKPd1UHVx7aiX6dvj4qN29k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
                          rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2649 (0xa59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
        Validity
            Not Before: Apr 16 19:38:01 2026 GMT
            Not After : Apr 23 19:38:01 2026 GMT
        Subject: CN=69e13a9a-99a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:ac:28:4a:10:37:7e:f3:2e:01:a9:a1:a4:
                    c3:4e:05:c9:7c:01:15:f4:58:15:51:99:6f:07:8f:
                    e5:59:2a:be:d4:8a:4b:1e:50:01:2c:c6:83:13:0d:
                    f5:71:a5:20:01:3f:e4:89:a1:bb:93:81:69:8e:5d:
                    c3:f9:5c:64:18:1b:17:15:53:6d:b2:3e:dc:22:4f:
                    3d:bf:6b:52:05:d4:71:05:2f:13:f3:57:b3:82:67:
                    22:af:15:d2:6c:b2:9d:32:70:d4:64:39:26:e7:a3:
                    e3:8e:43:c3:9b:a2:bb:50:97:fb:13:d6:82:a8:c9:
                    7d:55:74:52:ab:4f:9f:7c:c7:f4:d7:3d:eb:b7:75:
                    db:d7:51:43:9c:ef:a3:2b:b3:c1:67:3a:2e:02:3b:
                    b3:5e:77:39:ac:26:c0:f5:7b:d8:ea:f4:2f:8c:74:
                    cf:3e:ae:42:f6:41:02:fc:9c:03:7d:8b:50:2b:eb:
                    77:d1:cc:bb:df:68:81:a6:ee:d4:6b:9a:bf:6f:bf:
                    d1:44:92:c4:13:1b:66:47:9a:df:24:55:d4:df:23:
                    56:21:64:5a:d0:17:c7:9e:ca:d5:69:40:99:95:f9:
                    cc:46:5f:b2:72:a3:21:6b:24:44:2e:f9:89:f8:af:
                    98:74:3e:fb:c9:c9:90:2f:ff:76:2f:bf:ef:9c:eb:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:03:52:A6:88:FE:FA:73:E8:BC:76:4C:DE:0F:AD:A4:D5:29:B4:B8
            X509v3 Authority Key Identifier:
                keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e9:8d:04:d9:08:c1:a4:2d:19:b9:40:48:f7:55:2c:90:8a:
         c4:fe:60:95:ab:33:8c:ce:e3:f1:bb:6b:79:e8:84:b0:10:7c:
         27:42:b5:ab:ce:8b:01:2f:db:46:26:2f:bf:98:25:78:8a:47:
         a2:5a:6e:a0:bc:46:1b:15:8d:11:61:d5:51:1a:35:0c:81:69:
         df:c1:49:bc:57:0a:ca:7e:45:38:3a:f5:c6:51:7a:a8:14:93:
         ca:2f:e3:00:85:a7:3e:3b:3d:75:fa:3c:bc:9d:ee:96:bb:9b:
         49:ee:50:60:db:04:d0:75:d8:6b:d5:df:95:57:d4:b5:dc:10:
         40:c7:3e:23:00:64:66:4d:85:c3:6e:a6:07:8c:73:03:a8:00:
         6a:23:9f:f2:f9:75:1d:cf:4b:46:f7:35:c8:8e:3d:d3:10:49:
         0a:25:1c:d5:82:07:26:98:59:10:38:6a:23:d8:d9:14:50:3d:
         45:3b:1d:32:c2:84:ef:d9:c7:48:88:de:29:19:5e:fa:37:a3:
         da:b5:80:1f:f2:36:88:c1:c9:dc:7c:b8:3a:24:82:09:44:6f:
         0f:5f:56:9f:ca:f1:d6:d5:1a:9f:41:4d:6c:f7:34:bd:70:a7:
         01:41:ff:20:16:cb:1d:a3:6b:73:60:e0:5c:43:3c:44:f2:1f:
         67:e4:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:17 2026 by rpki-client