Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
File:                     qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json)
Hash identifier:          LFnSUgt7rwLzs+mgqW7MYLiF9mmuNtyra4MGi9MQ+i4=
Subject key identifier:   18:2A:48:88:5D:E8:3C:6A:76:0D:58:68:EB:06:36:81:30:80:FC:69
Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
Certificate issuer:       /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
Manifest number:          68
Signing time:             Sun 05 Apr 2026 07:16:13 +0000
Manifest this update:     Sun 05 Apr 2026 07:16:12 +0000
Manifest next update:     Sun 12 Apr 2026 07:16:12 +0000
Files and hashes:         1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: EM3bjSNBbTJJSRLouK2sZyNWCR5qMyeDgyduHR07WP8=)
                          2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: Irh7MDZvJlnxMvTv5EexT1j1kWXR64vAPEi7R34OcPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
        Validity
            Not Before: Apr  5 07:16:12 2026 GMT
            Not After : Apr 12 07:16:12 2026 GMT
        Subject: CN=69d20c3d-a3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fe:76:cf:96:33:7a:7a:a2:8a:75:f5:47:c0:
                    c0:13:bf:95:65:76:b4:a4:7e:44:67:eb:25:6d:50:
                    99:18:41:b5:11:10:d7:5d:05:76:4c:be:3f:29:84:
                    2c:2d:bc:13:15:d7:bc:d8:7e:1d:2a:78:e2:be:90:
                    7f:bb:7a:b6:40:54:c9:85:c7:11:55:a4:4f:8a:31:
                    d0:c9:45:3d:99:26:8a:7d:f3:13:41:ee:e6:36:f9:
                    45:6c:d9:ab:40:7d:6d:47:7d:77:ee:47:99:db:23:
                    51:4f:81:23:91:ee:42:dd:04:72:58:d3:8a:a7:1e:
                    84:93:c0:f7:99:49:02:13:87:6f:c5:dc:8c:32:48:
                    4d:05:cd:85:e5:56:89:40:21:13:12:b3:d6:1c:95:
                    e4:28:db:24:c4:7a:42:88:98:65:8d:77:12:8b:cb:
                    c6:64:57:bb:bc:cd:93:c4:e8:b5:02:d0:9d:80:ca:
                    21:dc:f5:51:ea:b0:ef:5e:ba:60:88:06:96:6f:5c:
                    72:23:55:1a:ea:a1:9b:67:19:a7:dd:36:9c:74:b8:
                    26:6f:f3:bf:5a:77:d6:40:82:d5:a9:bf:ce:5e:cb:
                    c3:c3:3e:05:06:ee:e3:b8:5e:8e:95:5d:08:8d:c9:
                    43:38:25:05:5b:d7:b1:40:af:fe:b9:61:12:49:8a:
                    d0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2A:48:88:5D:E8:3C:6A:76:0D:58:68:EB:06:36:81:30:80:FC:69
            X509v3 Authority Key Identifier:
                keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:3a:f5:2b:15:4c:78:cb:af:6c:56:0b:6f:04:4a:84:2f:
         06:82:42:78:1d:2b:a0:22:61:08:de:0a:bb:76:6c:77:98:34:
         33:c7:0a:da:ad:f7:58:70:25:90:aa:50:58:99:78:d6:37:83:
         c1:56:8b:68:cf:2a:8d:e2:9a:58:29:1a:9e:48:03:94:bc:7b:
         23:d5:b5:f3:52:e7:e8:4f:6b:11:bb:74:8a:46:8e:d0:64:b2:
         74:39:03:36:04:99:79:cc:57:cc:7d:4b:7b:4b:cc:d7:0b:cf:
         c7:38:de:55:40:21:d3:0c:f9:b5:a3:16:80:3b:02:3a:ce:4f:
         46:53:c4:f1:be:72:1b:13:72:b9:a4:f5:4a:fe:7a:8e:4b:f6:
         e3:61:9f:5d:a9:7b:93:11:7b:44:84:81:88:f0:a4:f1:78:25:
         05:5d:22:ce:7f:99:d0:59:43:c4:57:a3:55:4d:b5:b7:fd:16:
         2e:99:2f:a5:f0:fe:31:51:32:8d:33:d7:3f:8c:cb:0b:c0:e4:
         20:b8:9b:a4:bc:ce:01:d0:d7:13:a7:80:2f:fc:54:20:69:49:
         34:5a:ec:c0:b6:d7:d8:0c:35:de:45:6a:b5:9b:ad:14:95:78:
         80:d8:1f:ff:03:99:38:81:92:51:d6:30:16:1a:8e:ae:ec:af:
         8f:6c:40:17
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MUM0QjExMC8GA1UEBRMoQThFMTkzMENCQjcyOENCRThEOUVBM0EyRjY0MEY1Mzk4
NDYzQzc1MjAeFw0yNjA0MDUwNzE2MTJaFw0yNjA0MTIwNzE2MTJaMBgxFjAUBgNV
BAMTDTY5ZDIwYzNkLWEzY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDU/nbPljN6eqKKdfVHwMATv5VldrSkfkRn6yVtUJkYQbURENddBXZMvj8phCwt
vBMV17zYfh0qeOK+kH+7erZAVMmFxxFVpE+KMdDJRT2ZJop98xNB7uY2+UVs2atA
fW1HfXfuR5nbI1FPgSOR7kLdBHJY04qnHoSTwPeZSQITh2/F3IwySE0FzYXlVolA
IRMSs9YcleQo2yTEekKImGWNdxKLy8ZkV7u8zZPE6LUC0J2AyiHc9VHqsO9eumCI
BpZvXHIjVRrqoZtnGafdNpx0uCZv879ad9ZAgtWpv85ey8PDPgUG7uO4Xo6VXQiN
yUM4JQVb17FAr/65YRJJitA3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGCpIiF3o
PGp2DVho6wY2gTCA/GkwHwYDVR0jBBgwFoAUqOGTDLtyjL6NnqOi9kD1OYRjx1Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzA5QzZDMzdBOTFG
NTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2Tm5xT2k5a0QxT1lSangx
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcU9HVERMdHlqTDZObnFPaTlrRDFPWVJqeDFJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx
QzRCLzA5QzZDMzdBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2
Tm5xT2k5a0QxT1lSangxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAfzzr1KxVMeMuvbFYLbwRKhC8GgkJ4HSugImEI3gq7dmx3mDQzxwrarfdYcCWQ
qlBYmXjWN4PBVotozyqN4ppYKRqeSAOUvHsj1bXzUufoT2sRu3SKRo7QZLJ0OQM2
BJl5zFfMfUt7S8zXC8/HON5VQCHTDPm1oxaAOwI6zk9GU8TxvnIbE3K5pPVK/nqO
S/bjYZ9dqXuTEXtEhIGI8KTxeCUFXSLOf5nQWUPEV6NVTbW3/RYumS+l8P4xUTKN
M9c/jMsLwOQguJukvM4B0NcTp4Av/FQgaUk0WuzAttfYDDXeRWq1m60UlXiA2B//
A5k4gZJR1jAWGo6u7K+PbEAX
-----END CERTIFICATE-----
Generated at Mon Apr 6 01:08:59 2026 by rpki-client