Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
File:                     q-SlyJP0_Kxy2WRGir563z5vyP4.mft (raw, json)
Hash identifier:          v7H7kT4xgEhCIDer/wMnuCNnioBrXBhLrLCIE6la1TM=
Subject key identifier:   39:F4:CB:C2:40:22:1F:07:0C:E9:20:12:18:2D:B4:B8:9D:75:A4:03
Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
Certificate issuer:       /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
Manifest number:          0308
Signing time:             Sun 05 Apr 2026 00:58:20 +0000
Manifest this update:     Sun 05 Apr 2026 00:58:19 +0000
Manifest next update:     Sun 12 Apr 2026 00:58:19 +0000
Files and hashes:         1: q-SlyJP0_Kxy2WRGir563z5vyP4.crl (hash: q0vvypXoOrFfTg5kczPE22tqxetokeKqRYZ1oJfJqYU=)
                          2: 942BF3C013CA11ED983E350EC4F9AE02.roa (hash: LczRyamjv+q6qql4U5+k9/pRxqo+Z2BSI6X/Qd9169k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl
                          rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91894BE, serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
        Validity
            Not Before: Apr  5 00:58:19 2026 GMT
            Not After : Apr 12 00:58:19 2026 GMT
        Subject: CN=69d1b3ac-1d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:d6:7e:0b:b1:db:b3:12:1d:0f:8c:0e:25:
                    40:33:ef:8f:ae:49:05:f6:1a:cb:fa:3a:b2:bf:d9:
                    9e:a4:d4:b0:5a:d4:2c:0f:f1:36:74:03:c5:ab:f8:
                    11:91:25:21:7f:63:94:f1:cf:02:70:65:a3:e7:7f:
                    bf:74:a7:5a:04:16:43:1d:8e:c1:9a:49:0c:32:af:
                    25:03:7c:cd:84:93:aa:a7:1a:40:12:0a:a2:8b:66:
                    78:da:6e:33:3a:ed:b2:87:ec:05:fc:bf:be:6e:df:
                    26:5a:f9:34:fb:96:9c:2d:40:25:b8:33:7a:54:f6:
                    96:38:ff:d2:b0:e8:44:96:6f:05:11:7b:3b:89:db:
                    da:04:6e:ca:c9:da:f1:73:8d:f7:1c:87:90:0c:b7:
                    90:1d:7c:8f:20:2f:4f:aa:f6:9c:d9:e1:9e:3a:6c:
                    ee:fd:f6:34:70:d5:6e:23:3d:3e:f6:d4:81:e2:24:
                    01:36:7f:36:95:6d:a2:ed:0f:99:62:2c:9b:fc:2e:
                    6d:75:b6:7c:51:32:fc:c6:fe:5f:5f:a8:c4:4c:36:
                    61:c0:41:30:4f:02:90:4b:3f:93:e8:3f:c9:a2:ef:
                    7f:70:78:50:75:1e:d0:04:9a:66:5b:a9:1e:84:b6:
                    15:9f:40:a1:d1:93:ee:52:3d:e8:e6:5f:32:6c:62:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F4:CB:C2:40:22:1F:07:0C:E9:20:12:18:2D:B4:B8:9D:75:A4:03
            X509v3 Authority Key Identifier:
                keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:45:4f:4f:4b:6f:99:3c:64:b0:b4:34:0f:0a:8e:4f:31:b2:
         e8:96:2d:50:ae:a5:e2:54:7f:a2:50:de:13:e5:5a:1b:82:68:
         3b:15:c4:d9:58:8c:26:cb:dd:18:5f:7d:1f:21:1d:ea:5f:9e:
         75:a0:e8:b6:3b:1f:a5:37:bc:9c:a6:f2:ec:9d:e4:30:83:f7:
         ed:1b:b3:3b:8e:ab:91:2a:02:d0:41:d2:ff:25:b0:a9:69:29:
         f1:b7:23:42:86:e9:d8:00:85:d0:a2:8e:72:43:72:57:65:ec:
         66:e4:92:ef:34:cf:85:ce:53:11:0d:c9:8c:0c:58:47:12:0c:
         d1:a1:76:e1:43:a7:b7:9d:d8:64:3d:5b:39:61:d6:7f:98:15:
         c2:34:fe:d8:9a:5c:66:0d:34:07:a7:98:b0:cf:73:5f:b3:48:
         0d:39:ec:1f:3c:83:22:f6:5d:3e:a7:cb:4e:68:e4:dd:8a:5d:
         64:4d:b0:fd:0d:aa:af:8f:52:2f:0c:fd:40:2c:a1:a3:bc:6f:
         4f:03:a9:79:3f:16:9a:90:13:96:c7:46:82:f2:78:ef:80:43:
         67:4e:23:31:97:81:88:36:f0:23:90:28:2e:cb:f6:71:96:59:
         00:c8:94:ae:b1:d8:49:44:61:a1:61:e3:11:3c:37:20:72:fb:
         2b:68:ab:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODk0QkUxMTAvBgNVBAUTKEFCRTRBNUM4OTNGNEZDQUM3MkQ5NjQ0NjhBQkU3QURG
M0U2RkM4RkUwHhcNMjYwNDA1MDA1ODE5WhcNMjYwNDEyMDA1ODE5WjAYMRYwFAYD
VQQDEw02OWQxYjNhYy0xZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy53Wfgux27MSHQ+MDiVAM++PrkkF9hrL+jqyv9mepNSwWtQsD/E2dAPFq/gR
kSUhf2OU8c8CcGWj53+/dKdaBBZDHY7BmkkMMq8lA3zNhJOqpxpAEgqii2Z42m4z
Ou2yh+wF/L++bt8mWvk0+5acLUAluDN6VPaWOP/SsOhElm8FEXs7idvaBG7Kydrx
c433HIeQDLeQHXyPIC9Pqvac2eGeOmzu/fY0cNVuIz0+9tSB4iQBNn82lW2i7Q+Z
Yiyb/C5tdbZ8UTL8xv5fX6jETDZhwEEwTwKQSz+T6D/Jou9/cHhQdR7QBJpmW6ke
hLYVn0Ch0ZPuUj3o5l8ybGLcswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDn0y8JA
Ih8HDOkgEhgttLiddaQDMB8GA1UdIwQYMBaAFKvkpciT9PysctlkRoq+et8+b8j+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTRCRS8wQjREMDI5QzEz
QzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9LeHkyV1JHaXI1NjN6NXZ5
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EtU2x5SlAwX0t4eTJXUkdpcjU2M3o1dnlQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTRCRS8wQjREMDI5QzEzQzUxMUVEOUY1QUYyNkFDNEY5QUUwMi9xLVNseUpQMF9L
eHkyV1JHaXI1NjN6NXZ5UDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWEVPT0tvmTxksLQ0DwqOTzGy6JYtUK6l4lR/olDeE+VaG4JoOxXE2ViMJsvd
GF99HyEd6l+edaDotjsfpTe8nKby7J3kMIP37RuzO46rkSoC0EHS/yWwqWkp8bcj
Qobp2ACF0KKOckNyV2XsZuSS7zTPhc5TEQ3JjAxYRxIM0aF24UOnt53YZD1bOWHW
f5gVwjT+2JpcZg00B6eYsM9zX7NIDTnsHzyDIvZdPqfLTmjk3YpdZE2w/Q2qr49S
Lwz9QCyho7xvTwOpeT8WmpATlsdGgvJ474BDZ04jMZeBiDbwI5AoLsv2cZZZAMiU
rrHYSURhoWHjETw3IHL7K2iraw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:16 2026 by rpki-client