Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
File:                     qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json)
Hash identifier:          VnIXVnQMP9GK3vDChxQopADDPZTK4QAwZHCH8EIlcGo=
Subject key identifier:   F7:B9:AB:A6:30:F5:40:EF:6A:36:75:44:73:95:9B:9D:61:71:7B:BB
Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
Certificate issuer:       /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
Manifest number:          024A
Signing time:             Thu 16 Apr 2026 15:51:33 +0000
Manifest this update:     Thu 16 Apr 2026 15:51:32 +0000
Manifest next update:     Thu 23 Apr 2026 15:51:32 +0000
Files and hashes:         1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: TVOJk2zOc7Yd9U6RgbeioLddgNcUBRKEswm2HGtRjrc=)
                          2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: 49BUIWXY2kRKbxVwv8L7UkKYY+v5irFyHsawrnEYjXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
        Validity
            Not Before: Apr 16 15:51:32 2026 GMT
            Not After : Apr 23 15:51:32 2026 GMT
        Subject: CN=69e10585-2dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:d7:88:84:52:b5:84:ac:9c:03:18:bb:03:
                    9a:c1:6e:b2:3d:da:f8:1d:97:e5:bf:83:65:a5:69:
                    e7:a1:ae:6c:b4:ff:b2:d5:6b:d0:4c:fd:65:23:3b:
                    13:81:88:7c:f1:b3:18:37:82:81:fa:00:5d:2f:8c:
                    68:56:29:60:bf:f6:86:1d:46:b5:f3:9a:76:97:67:
                    ad:42:60:7b:d5:77:b5:ae:ab:9a:9c:69:a7:b9:58:
                    60:25:ce:2b:95:07:9d:22:f1:fe:0f:47:c3:b3:e5:
                    1f:55:74:80:86:cc:5c:c9:56:bd:d1:c2:3f:eb:d2:
                    20:a7:d9:0e:8c:5c:2d:1b:20:03:18:08:6f:a3:c3:
                    ea:e7:e9:6c:11:f4:50:31:05:f0:f0:64:dd:74:fe:
                    d7:2d:3e:0e:03:c7:c1:83:41:9d:52:e5:dd:fd:b9:
                    e5:32:7d:e4:ff:1f:83:9b:03:5c:85:62:e0:7f:07:
                    95:01:73:b0:4a:00:b2:e5:53:fb:32:60:26:42:d3:
                    4e:81:f4:8c:89:1e:41:ff:a1:47:ed:b1:91:1f:bd:
                    1f:79:ae:ff:d7:f0:65:09:0f:e1:a5:d6:f7:55:21:
                    3b:16:69:1d:1e:be:77:7e:73:64:27:cf:0d:0d:88:
                    ec:e9:8b:b6:bc:ad:e8:47:03:29:13:ad:15:f0:36:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:AB:A6:30:F5:40:EF:6A:36:75:44:73:95:9B:9D:61:71:7B:BB
            X509v3 Authority Key Identifier:
                keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:bc:ea:c0:fc:71:e5:33:36:94:5f:99:77:c2:7d:c0:f9:dd:
         d5:fc:0f:90:05:92:41:39:0f:db:e3:31:c3:f1:1b:bc:74:ca:
         76:3d:ce:1e:df:64:b6:7e:f2:31:24:36:53:80:4d:2e:42:71:
         9d:a2:89:1b:52:1c:6e:cf:ce:92:19:44:37:b0:2c:7d:58:e6:
         a5:0d:71:91:42:c5:ae:25:20:00:1d:8c:62:97:d8:36:a9:e7:
         ee:1f:92:00:a2:6e:f1:f4:16:d8:ba:a1:0b:45:ea:29:97:ca:
         cd:4f:ce:36:a2:0b:cd:32:02:97:da:55:53:57:a0:ae:cf:c3:
         08:e6:c2:32:5d:d3:ab:52:54:31:e7:82:a7:50:b2:e1:47:92:
         f4:86:49:05:f2:55:68:1a:bd:1d:9c:a0:db:4f:0b:d3:ea:14:
         26:71:e3:43:6c:86:76:75:69:22:51:fd:85:52:30:08:c4:47:
         03:d2:fd:84:47:11:0a:c8:76:9e:01:6b:03:d6:80:22:b7:de:
         2a:6f:9a:c8:dd:f2:64:66:5d:75:56:75:b1:80:ea:c4:c1:d4:
         32:97:14:b4:17:d7:b7:a1:9b:1b:75:d4:51:ef:c1:18:84:ef:
         56:b9:56:dc:e0:db:da:66:d2:fa:13:a5:1c:13:81:81:c8:f0:
         51:d3:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:51:02 2026 by rpki-client