Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
File:                     QMW9PelSuS6VkhpP1t99sHtKKSE.mft (raw, json)
Hash identifier:          EZcf7jem9q+wYTfGzmjnGPn9c6ODvjR4fEWfoclTdaM=
Subject key identifier:   F7:73:CE:11:FE:27:5E:C9:98:03:BA:77:01:09:35:94:45:C9:A4:D9
Authority key identifier: 40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
Certificate issuer:       /CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
Certificate serial:       06D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
Manifest number:          0896
Signing time:             Sat 04 Apr 2026 22:03:07 +0000
Manifest this update:     Sat 04 Apr 2026 22:03:06 +0000
Manifest next update:     Sat 11 Apr 2026 22:03:06 +0000
Files and hashes:         1: QMW9PelSuS6VkhpP1t99sHtKKSE.crl (hash: pBl8zk/RbtOjI6hd5RKpYD9WXEV+nY4rUUfJe6m9Jkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963, serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
        Validity
            Not Before: Apr  4 22:03:06 2026 GMT
            Not After : Apr 11 22:03:06 2026 GMT
        Subject: CN=69d18a9b-2137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:35:04:91:6b:4b:50:cf:7e:43:f7:a9:73:
                    db:73:9e:84:49:f9:10:0f:66:c0:da:76:fb:5d:e3:
                    25:42:3e:43:a8:00:c2:9b:62:47:b0:0a:78:d6:a5:
                    ea:79:96:fd:0e:8e:77:46:10:86:e4:0e:9e:ab:9f:
                    0c:61:d9:6f:26:45:64:ac:6b:ad:1c:28:39:b4:ee:
                    d5:ff:f0:e5:d8:55:06:12:98:b8:9f:9a:69:4b:12:
                    62:41:f4:36:de:44:25:27:24:48:30:c2:1c:bc:4f:
                    c8:eb:9c:ae:14:86:4c:14:97:ee:e3:85:d1:51:fa:
                    e5:58:24:20:7a:6e:df:1e:b5:ef:06:4f:7e:43:f1:
                    20:98:9b:39:16:21:9a:18:26:be:06:17:4d:5d:b3:
                    a0:02:47:b0:54:69:b3:d9:63:ef:5a:07:9a:66:cb:
                    53:ec:e1:66:da:22:5b:0b:f7:0b:67:aa:9a:0d:ee:
                    05:d7:d8:24:6a:1c:d0:c2:98:48:15:32:48:4f:46:
                    48:d2:61:a5:4f:df:fd:80:57:63:16:ae:af:d8:e0:
                    34:92:38:ae:7a:66:2b:34:9c:73:69:80:eb:5a:ed:
                    7f:6e:dc:26:f7:e7:c2:32:f9:9d:94:44:5b:b4:bf:
                    31:4a:7e:e7:9d:1d:94:e6:c8:4e:5c:79:87:bb:1f:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:73:CE:11:FE:27:5E:C9:98:03:BA:77:01:09:35:94:45:C9:A4:D9
            X509v3 Authority Key Identifier:
                keyid:40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:13:af:27:93:cf:30:4f:c1:56:e7:8b:03:76:23:23:e6:46:
         e0:d5:e0:fb:c9:92:b6:b7:ff:38:74:5d:a8:bf:39:7a:23:7e:
         29:4c:6f:54:2a:bc:6e:a6:96:51:6f:43:4a:b2:f7:1f:35:73:
         69:10:50:c5:a9:af:46:bf:23:21:d5:66:ea:63:c0:16:23:d7:
         80:09:97:1d:e8:b0:b7:6b:21:ab:30:85:7c:1a:f6:e9:5b:6e:
         94:5e:37:a8:7d:7f:9b:85:5e:ff:7c:57:9e:30:ff:4b:bb:dd:
         6b:54:73:65:49:51:37:4a:94:77:64:d0:d0:bb:f0:3d:7e:e6:
         d2:01:e2:55:ff:48:ad:5b:56:86:8a:af:06:1c:11:ac:b0:89:
         5c:21:98:00:30:fd:88:64:61:67:d5:fb:35:3c:af:da:4d:e8:
         74:1e:ac:81:f0:f5:20:2f:6b:b8:ac:7f:af:88:3e:69:b6:91:
         3e:60:d5:90:d3:21:92:9c:7b:46:7f:75:8e:5c:67:dc:fd:30:
         26:ee:c6:58:50:aa:15:b4:8a:a1:10:5c:96:e3:bb:97:bd:56:
         b0:2a:b1:70:19:9d:86:e3:33:32:a1:5b:a8:88:04:da:79:96:
         9c:ba:21:bd:10:94:ca:08:9f:5c:36:8f:54:d9:af:aa:4b:27:
         d5:8c:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:51 2026 by rpki-client