Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File:                     QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier:          A2730lcaLOd5nOY4ymJDaPqOhh5C2KAauC+you/J/SE=
Subject key identifier:   36:66:51:32:20:9D:98:60:14:33:DC:19:1C:E8:18:BF:C0:55:6A:89
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer:       /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial:       07B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number:          07A9
Signing time:             Thu 16 Apr 2026 21:23:49 +0000
Manifest this update:     Thu 16 Apr 2026 21:23:49 +0000
Manifest next update:     Thu 23 Apr 2026 21:23:49 +0000
Files and hashes:         1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: dEYckJJJZDHpD2Tx8B2X4rprM6c4vEaBelRlFKcGoow=)
                          2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: EF9uieKoaY19hPq/K/Sub8whVe1rvynhE+WooVi1n/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1970 (0x7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
        Validity
            Not Before: Apr 16 21:23:49 2026 GMT
            Not After : Apr 23 21:23:49 2026 GMT
        Subject: CN=69e15365-89a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:19:8f:a3:66:5c:73:94:d6:5f:df:a8:8a:
                    4b:ef:85:81:f6:45:f3:9f:c8:e8:90:31:3f:d0:2a:
                    b0:c8:6f:c8:f0:bf:2b:e4:f5:45:f7:3d:03:df:00:
                    68:3c:83:35:76:b5:6a:a7:7b:77:6d:d7:e7:d3:93:
                    0b:bd:92:65:6b:8a:dd:f3:af:7a:97:51:4f:96:41:
                    f9:af:8c:40:66:1d:51:8f:02:ec:33:45:7e:cf:af:
                    2e:8a:67:ed:d6:a9:7c:58:61:97:a1:74:37:57:8a:
                    02:84:65:3d:c7:9b:1e:fb:8e:03:00:36:9b:96:7a:
                    b4:a8:8f:c0:e6:2d:7f:6f:85:c3:9a:46:81:16:e2:
                    f1:e9:54:ca:c8:2c:d0:7a:a8:9c:73:a8:e8:d5:27:
                    67:d2:5c:04:47:22:ee:ad:36:9c:90:9b:3c:a8:63:
                    7e:d0:17:1a:7f:30:66:f2:cd:b1:9e:91:34:11:cc:
                    59:e9:6b:37:b4:9c:1e:4a:7d:22:3c:87:2e:5b:0a:
                    8b:92:e9:35:91:d9:43:1c:0c:89:c0:d0:aa:6b:9a:
                    4a:23:9f:25:e0:53:6d:8f:66:a5:88:d9:e8:0f:68:
                    09:91:53:59:58:45:e1:6b:43:19:87:bb:ec:1b:b6:
                    3e:e7:dd:35:11:fe:e6:f2:4d:f7:e1:f3:6a:47:8a:
                    04:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:66:51:32:20:9D:98:60:14:33:DC:19:1C:E8:18:BF:C0:55:6A:89
            X509v3 Authority Key Identifier:
                keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:31:2a:54:80:17:29:24:66:5e:86:c2:1b:2f:0c:e6:b1:
         e1:47:a4:7b:ab:a2:b1:d9:62:fe:7d:1d:90:b8:a1:82:53:e2:
         26:6a:61:bb:85:9a:f2:06:45:53:0a:97:c2:87:40:89:00:e9:
         9a:c7:d2:ac:d5:b6:7c:fa:c4:e9:b8:96:76:35:d8:ac:c8:d0:
         6c:55:d5:2a:03:29:93:b0:4b:07:bd:e6:64:83:28:50:a3:da:
         1f:00:6f:a4:f1:2f:ae:e5:8c:4e:5a:ba:9c:81:0f:74:b8:66:
         86:52:e2:c9:4e:ee:13:ba:54:ee:18:2d:45:a6:c0:da:e7:77:
         d3:0e:c4:9e:81:0b:c5:0a:45:4d:c8:d2:ff:93:9d:4b:20:86:
         93:65:de:62:13:6a:91:cb:8b:07:02:a6:23:66:95:04:f2:b2:
         9e:0e:79:06:85:21:e6:53:b6:a3:d6:c9:5d:66:00:77:79:0e:
         3a:55:3a:06:9b:05:ba:c7:cc:8c:76:28:bd:34:03:74:a9:8d:
         86:17:cf:8e:c0:72:10:a1:87:27:d1:08:c5:4b:49:e5:ce:4b:
         e5:6c:6c:aa:cd:df:a9:60:ad:7f:9e:81:17:cc:1d:6e:d4:85:
         f5:f0:ce:db:f1:fe:dc:64:a2:69:69:41:da:68:4a:9c:46:71:
         81:96:70:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:53:39 2026 by rpki-client