Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
File:                     QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft (raw, json)
Hash identifier:          PtguEOr3OuKuhGZIlBM0heTmfVmDJIdN8iUyxhgPIf4=
Subject key identifier:   BD:11:18:2D:BE:0B:97:F4:66:13:29:9A:C4:5F:3E:95:24:95:7F:1A
Authority key identifier: 43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A
Certificate issuer:       /CN=A91FFA9E/serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
Manifest number:          46
Signing time:             Fri 17 Apr 2026 08:06:14 +0000
Manifest this update:     Fri 17 Apr 2026 08:06:13 +0000
Manifest next update:     Fri 24 Apr 2026 08:06:13 +0000
Files and hashes:         1: QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl (hash: GbleaXyowU6S7dyK/4Fvq6HeNkugL718WkhZRs7Telw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl
                          rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFA9E, serialNumber=4304CA33004611724DA5C3358CF3B68061CA4A8A
        Validity
            Not Before: Apr 17 08:06:13 2026 GMT
            Not After : Apr 24 08:06:13 2026 GMT
        Subject: CN=69e1e9f6-d371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:b3:6b:42:ca:ce:b1:2b:83:00:18:73:7f:
                    1f:34:39:e0:fe:87:09:f0:c9:3b:d1:3d:98:33:6e:
                    03:21:2e:c8:2d:b8:d3:81:d9:fd:b5:e7:42:d5:ad:
                    9d:88:de:23:2c:17:35:d1:cb:9e:cd:39:5c:35:32:
                    9b:57:23:ac:ea:6b:e5:0c:9b:ca:ca:13:34:e4:78:
                    d2:5b:1e:1e:ea:fc:0c:af:45:aa:be:d1:c5:d8:19:
                    8c:54:ca:a1:12:d0:1f:94:1b:ef:0f:93:41:de:3f:
                    72:ae:94:78:ea:01:41:ed:f9:87:a6:64:62:40:3d:
                    80:88:02:87:e9:3f:ae:0e:ac:67:da:c6:83:a1:3f:
                    2e:d4:8c:57:a3:6c:e7:f6:0b:50:27:0d:2a:da:87:
                    25:0f:73:71:d0:96:e8:a8:fe:2a:15:2a:e9:60:5e:
                    64:2e:02:71:b7:e4:a9:1d:92:c9:a8:bd:82:26:f1:
                    ac:06:8b:be:86:3b:b7:a6:45:c4:c7:4c:22:0a:dd:
                    15:f9:e0:d0:d9:18:3e:49:70:2f:b8:de:9b:9b:e7:
                    6c:4a:87:13:3b:19:71:fd:e5:70:27:60:f2:c3:88:
                    52:ef:99:e5:48:82:c5:d7:46:ae:2d:b7:30:87:df:
                    68:30:15:90:4c:60:0f:8a:dc:20:69:b6:ad:ce:8c:
                    8c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:11:18:2D:BE:0B:97:F4:66:13:29:9A:C4:5F:3E:95:24:95:7F:1A
            X509v3 Authority Key Identifier:
                keyid:43:04:CA:33:00:46:11:72:4D:A5:C3:35:8C:F3:B6:80:61:CA:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwTKMwBGEXJNpcM1jPO2gGHKSoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFA9E/8F122802D59E11F082F64F17C4F9AE02/QwTKMwBGEXJNpcM1jPO2gGHKSoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:fc:9a:68:ae:29:2b:e3:f6:cb:25:a5:56:93:e8:cd:5b:31:
         ed:84:6d:08:b4:24:bb:04:7c:77:2e:72:19:56:9b:36:23:a3:
         f6:8e:de:ff:9c:ec:fe:ee:fd:8d:fe:f3:26:7d:c5:95:32:f5:
         f7:64:f2:61:f6:ff:c8:02:56:c3:92:df:4e:e1:e4:15:98:ec:
         0b:f2:e3:36:38:c0:da:ba:55:91:a4:fc:b1:71:ac:84:f1:b0:
         01:b0:79:3c:68:12:99:90:c4:09:65:46:5a:57:48:f5:7c:4c:
         44:8f:5f:df:b9:47:74:1f:c4:7a:c0:30:61:af:8e:61:0f:68:
         e8:1a:b0:42:fd:c3:df:a0:9d:b3:35:a0:3b:e8:5a:38:57:6f:
         3a:34:af:47:9c:e4:ae:07:e6:aa:13:8e:e0:bf:40:40:8f:af:
         00:a3:10:f4:ab:0e:c1:fa:65:0e:55:2b:0a:40:0a:23:2e:1c:
         58:7c:53:55:92:0a:b5:ca:d5:b2:00:e5:6e:05:75:90:bd:bd:
         3c:a5:e6:0b:3f:f1:d3:63:6c:b6:ae:1a:68:bf:74:9b:72:86:
         07:04:f5:73:d1:68:29:29:22:21:9d:ca:7f:56:61:b6:9a:86:
         84:ec:94:80:ff:52:51:cd:11:a7:0d:4e:50:68:06:76:8b:fd:
         9a:b0:33:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:25 2026 by rpki-client