Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File:                     qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier:          zzkUnHvCDfFfOZArHY/71mIeQYt6y6PjfwP3enfNIl8=
Subject key identifier:   66:46:8B:77:B5:80:54:01:9F:D3:A3:EC:62:33:80:30:A2:A2:58:70
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer:       /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial:       0B2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number:          0B0F
Signing time:             Thu 16 Apr 2026 19:16:34 +0000
Manifest this update:     Thu 16 Apr 2026 19:16:34 +0000
Manifest next update:     Thu 23 Apr 2026 19:16:34 +0000
Files and hashes:         1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: KPzClllZLYy+kPpCnyZcVzAWdavIg9FnvU3IFrE+trY=)
                          2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: Q7p+Vr+s6fqUfDypnxwb8pNNEvIPoH0DeJoVihgWG1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
                          rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2859 (0xb2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
        Validity
            Not Before: Apr 16 19:16:34 2026 GMT
            Not After : Apr 23 19:16:34 2026 GMT
        Subject: CN=69e13592-d25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:68:bf:18:8d:e3:38:14:7d:ef:82:54:78:cb:
                    d1:82:73:4d:ad:57:f3:57:ac:76:c2:75:41:a8:9b:
                    7f:6f:8e:86:cd:52:7d:56:8e:78:03:f0:53:69:93:
                    a3:09:b6:0a:e9:26:f5:0d:d1:35:b5:73:59:3b:c8:
                    09:4f:30:ef:a8:21:d6:3d:77:a0:30:a0:86:dc:7a:
                    8e:7c:9d:06:e8:9f:0b:c2:ea:e0:3b:ac:ce:9e:c4:
                    5e:3c:cd:65:56:fc:e3:31:60:00:91:c0:d1:8e:51:
                    d2:0e:0b:9e:e2:5b:de:2f:69:84:f2:fa:5d:ab:e4:
                    01:86:f0:67:c6:44:03:ab:4b:fa:8d:2a:f1:f3:21:
                    79:c9:d8:e3:fb:43:c0:7e:96:4e:32:48:cf:45:81:
                    e6:5b:1d:6e:5e:a0:43:6d:9e:06:51:e7:f4:0e:4c:
                    f4:d9:47:25:4f:46:12:95:0d:e8:a8:1c:07:66:81:
                    cd:31:c1:5a:07:68:6e:44:8e:99:81:c1:88:ca:5b:
                    69:36:fb:7e:0a:58:c1:ba:b5:1b:0f:3f:9e:30:d5:
                    49:25:15:69:14:1d:9c:d7:65:0f:fd:5c:aa:80:d1:
                    22:b1:04:40:e9:70:78:4f:65:1b:71:7e:df:4d:82:
                    fd:54:8f:8e:2f:f4:57:d3:4e:31:12:34:e4:16:d1:
                    15:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:46:8B:77:B5:80:54:01:9F:D3:A3:EC:62:33:80:30:A2:A2:58:70
            X509v3 Authority Key Identifier:
                keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:64:7d:85:89:45:71:99:2b:62:29:cb:eb:b7:3a:b1:d8:28:
         9c:45:3d:6c:25:1e:19:7a:14:09:04:5e:f4:6d:13:f0:c2:78:
         de:7d:e7:35:ab:09:7e:f2:39:48:68:85:3b:a2:5b:2b:6c:57:
         04:79:9a:31:c1:2e:cd:b2:44:88:56:c3:ec:6e:38:b5:4e:6f:
         7d:91:4d:a8:24:9f:8e:97:cc:01:b7:d2:be:fb:29:45:e0:c0:
         69:d2:e5:6d:49:0f:b5:3a:47:c2:b8:49:12:96:2f:be:a5:7b:
         9f:8a:0d:16:8c:d1:8a:31:5e:8b:ad:fc:d5:70:bb:ff:50:79:
         42:96:b8:c7:e7:66:e5:0f:85:d1:53:e5:b9:4f:9b:4c:5e:97:
         2f:c6:85:18:eb:3e:34:3f:c6:a4:2f:61:69:a2:fb:ab:b7:08:
         51:03:e1:23:38:ef:78:54:c4:ea:e1:fb:14:66:eb:d4:0e:29:
         14:81:5f:b9:59:fd:4a:7e:5e:0c:79:f6:f1:3a:ee:a7:09:ec:
         69:00:08:66:49:5b:e7:00:93:2a:df:e6:5e:3c:95:70:58:c9:
         05:0a:8c:85:fc:15:fc:cd:7f:0f:e6:17:e0:15:9d:81:89:58:
         b5:b5:80:95:79:7b:f9:a7:2c:bb:73:92:ba:cd:e1:98:f9:14:
         fc:1c:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:17:48 2026 by rpki-client