Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
File:                     qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json)
Hash identifier:          +4+4VzdQe2FSjTJgfkWMif27E7GkGevjdaLW5iO8CQs=
Subject key identifier:   64:F2:A2:B3:EC:AE:EE:76:55:48:38:6B:26:A4:5C:18:6D:12:C1:B8
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Certificate issuer:       /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial:       35AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
Manifest number:          356F
Signing time:             Thu 16 Apr 2026 14:45:42 +0000
Manifest this update:     Thu 16 Apr 2026 14:45:42 +0000
Manifest next update:     Thu 23 Apr 2026 14:45:42 +0000
Files and hashes:         1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: 8UbCymCEFOKZ9cNAGoA/SZ3awqsUUYhWzKdcTrEotJ0=)
                          2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: gGlyAExoFEUqT98bADKmBZWyQcG57UwG1nHtGghueEI=)
                          3: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: 0iMCnY3705MLKSQeDX6iv1qsWDcFTiwdaLS+CFP3lvY=)
                          4: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: lYpkRD/vPCqBa7Vd4N6W0BGqOH9jxtp9EJocrqn7xs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
                          rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13738 (0x35aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
        Validity
            Not Before: Apr 16 14:45:42 2026 GMT
            Not After : Apr 23 14:45:42 2026 GMT
        Subject: CN=69e0f616-fa1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:56:75:e3:11:0b:76:5c:e3:7f:dd:fa:e4:
                    2c:be:5d:01:f8:90:84:44:c1:ba:6a:3b:48:ab:dd:
                    15:01:11:44:cb:7a:27:e2:2f:0b:5a:af:96:89:7b:
                    f8:64:ad:b2:77:e8:b7:0d:4a:f3:46:d1:64:f8:72:
                    ff:ef:d4:c4:33:06:a1:69:b9:d9:c0:65:1d:10:b0:
                    e7:c3:d6:01:11:24:62:b5:6d:2c:16:e4:b3:5f:d3:
                    f3:da:ef:d5:6c:06:4f:27:3b:8b:82:f5:f1:f7:d5:
                    13:0e:58:e5:85:56:c4:e9:48:d5:e4:c0:15:c0:d1:
                    4c:ff:24:b6:a7:70:90:fb:15:6b:8e:70:b6:b0:53:
                    00:4e:b7:8b:3d:80:7f:7a:3b:42:07:37:64:fd:92:
                    00:2e:72:c1:43:08:04:62:7b:2b:4f:e0:25:bf:e1:
                    3a:29:33:99:b9:8f:9e:23:45:0b:7c:d1:62:95:99:
                    f7:51:2f:a6:36:b9:dd:78:7d:e6:dc:19:7d:b7:90:
                    a5:a7:98:67:f5:ff:10:62:f0:fb:1f:51:37:a9:28:
                    c0:d4:fa:a4:d5:5a:dd:e8:d5:54:69:15:2b:9b:d4:
                    28:7a:12:7d:82:73:66:ac:57:22:be:4c:d8:e5:37:
                    d0:82:b4:3a:ea:31:23:fd:e3:ea:bc:c1:56:a9:c3:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:A2:B3:EC:AE:EE:76:55:48:38:6B:26:A4:5C:18:6D:12:C1:B8
            X509v3 Authority Key Identifier:
                keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:fd:14:2f:c9:f9:ec:cf:51:b6:24:3d:c7:ed:04:04:6e:
         bb:bc:8a:ca:75:e1:84:5c:73:8f:c0:99:07:5f:a7:e1:87:e2:
         62:b2:87:bd:4e:22:d7:58:1f:d8:dd:60:a9:58:f4:2d:5a:03:
         3e:ba:1e:fe:38:8d:dd:3c:ec:7f:5f:97:54:4b:23:86:2e:76:
         25:32:7b:b1:76:fa:37:8a:6d:ff:e1:47:86:86:32:48:ad:6a:
         eb:6c:37:ce:fb:f8:21:a5:e0:c4:c6:8d:29:a2:af:4a:ef:b7:
         83:4f:97:99:a0:3b:07:e5:b5:38:30:c1:59:42:84:d6:3e:6d:
         ea:03:d7:77:26:d6:df:b5:de:ef:46:46:21:2f:8d:9c:39:58:
         06:f2:c8:49:7a:3c:1b:4a:75:12:05:c3:b5:99:e3:9b:e2:87:
         c6:1e:3f:f3:9e:42:8f:88:d0:8a:f6:92:6f:3b:96:ef:8d:1c:
         c1:01:81:79:b2:d8:65:33:fc:fe:bb:54:11:17:05:69:68:3d:
         fd:f8:1e:55:c5:8b:30:ef:b7:e3:6c:97:72:71:69:c2:9a:ca:
         7f:9a:f9:b1:9f:38:66:87:21:d2:a8:70:a6:8c:35:70:55:f9:
         1d:75:39:02:78:d2:3d:a9:05:03:bd:47:24:a9:49:5a:69:4f:
         0e:f0:d2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:28 2026 by rpki-client