Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File:                     QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier:          1u37JE2qMs4VatZytT9mdkmZQOVwPitDR5ydvWG1d5Q=
Subject key identifier:   F9:EF:9A:14:D0:EF:B0:8B:51:49:C6:4F:E2:43:77:F7:01:E3:02:CC
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       0475
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number:          0467
Signing time:             Fri 17 Apr 2026 00:02:41 +0000
Manifest this update:     Fri 17 Apr 2026 00:02:41 +0000
Manifest next update:     Fri 24 Apr 2026 00:02:41 +0000
Files and hashes:         1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: NM/Y2E9j836z+UhoJYpH9KvIDromJc7bNVn8Kf0KYps=)
                          2: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: Ep2GGy4x3F/l/bcsj+NUy5RBXFijDS1DT1sCoOlf0Og=)
                          3: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: sbKErGrZ9wQReaxBfcKt6qzgDt44TVFgH+e5ifioSzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Apr 17 00:02:41 2026 GMT
            Not After : Apr 24 00:02:41 2026 GMT
        Subject: CN=69e178a1-e93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:55:d1:71:cd:97:50:09:92:35:9b:b6:2c:
                    a9:87:67:10:26:46:a0:78:ca:7f:e9:8c:43:74:40:
                    8a:00:2a:4e:fa:69:d4:29:0d:d3:33:51:7e:37:6c:
                    40:c8:ad:6d:51:49:bc:6a:6a:9e:ed:e2:28:cb:ad:
                    b8:a9:d4:b0:bc:5a:c6:af:82:30:39:0f:93:db:e3:
                    74:21:97:53:7b:23:98:bf:60:1a:5b:0b:c2:4f:9f:
                    79:2e:f3:64:8f:25:d0:ff:8e:ef:a2:92:b2:50:d4:
                    7b:6e:14:69:97:1e:32:97:ad:6b:e3:e7:09:34:78:
                    8a:78:e4:21:f2:79:81:e5:fe:51:19:2e:0b:f9:6d:
                    61:c9:65:27:7b:10:e1:7e:51:e3:72:ed:d0:72:5c:
                    00:cf:d9:38:52:50:d5:e5:00:6a:e5:24:bf:91:53:
                    f2:13:68:96:91:9f:e8:ab:8f:c7:ec:26:12:fc:bf:
                    69:19:8d:2d:61:f1:0e:db:c6:b3:fb:ae:82:44:90:
                    8e:7b:84:1d:cf:34:a7:bf:fc:8f:05:05:a5:ee:98:
                    00:2b:13:83:1d:38:09:2e:0d:77:07:2c:70:e9:0a:
                    c9:d2:35:cf:dd:ee:be:ec:57:53:c2:9d:d4:70:4c:
                    4e:fb:2d:21:b3:47:ed:43:e6:5d:f3:21:95:a6:4f:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EF:9A:14:D0:EF:B0:8B:51:49:C6:4F:E2:43:77:F7:01:E3:02:CC
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:d0:2f:78:86:16:37:20:e1:77:83:68:e5:41:36:b9:63:a0:
         d1:d6:3b:8d:1c:57:cf:25:6b:3d:d6:f0:4f:48:2f:39:87:b4:
         d7:b9:c1:ca:86:16:9e:ff:dd:ad:02:57:ec:9c:41:6b:56:e2:
         a7:fa:91:a4:5c:84:9e:f8:d0:45:3d:c6:2a:3f:14:b7:08:07:
         7c:0e:c5:ac:48:22:2f:88:29:52:f7:d2:c7:f3:33:32:30:ff:
         53:cf:6e:1b:00:b2:82:07:e1:71:1c:7d:7d:f0:64:27:66:55:
         09:3d:64:e4:aa:46:c3:14:09:b4:6e:8b:7e:bb:65:e3:4a:82:
         f5:07:83:be:5c:d8:29:fd:24:54:93:c8:6e:a5:c5:ac:3d:79:
         22:5f:2d:0f:2e:b3:12:7d:4a:ee:9b:d3:12:a6:28:b7:c3:ed:
         2b:6e:a2:e3:e7:82:1e:2b:e2:27:25:05:ba:59:3d:cc:52:61:
         70:45:d7:a9:24:dd:05:41:4d:c1:61:72:bf:88:8a:e6:bc:f3:
         8f:a3:d9:fc:b8:67:5d:b8:24:fb:ec:16:9d:b6:49:80:dd:df:
         fa:f5:df:c4:42:d8:a0:bf:de:fb:be:f6:29:e7:1e:10:25:13:
         2f:5e:7d:86:8b:48:53:21:76:b6:b9:a8:2f:c4:91:62:98:e4:
         2e:d7:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:07:55 2026 by rpki-client