Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File:                     qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier:          zkJnpIl1kSStZt80DJvQ9KoL8JUKib5qfVtGDFA0TmA=
Subject key identifier:   39:03:2D:35:10:6B:34:05:DB:0E:2E:74:1D:64:56:02:D8:D5:54:B4
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer:       /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number:          01D5
Signing time:             Sun 05 Apr 2026 03:32:34 +0000
Manifest this update:     Sun 05 Apr 2026 03:32:33 +0000
Manifest next update:     Sun 12 Apr 2026 03:32:33 +0000
Files and hashes:         1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: 9gmH2vBrLkhpIgjGN7nXI2FriiJPAbVr8lE9jgQOnac=)
                          2: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: p6zGTgqZJ7iiiCzsm415AfpPsLOlXyGxbt61Izp1Z6U=)
                          3: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 6JnWBHrw4ffDiGiVWAOckF4qnqqFhoHfVR3johcA4II=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:32:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
        Validity
            Not Before: Apr  5 03:32:33 2026 GMT
            Not After : Apr 12 03:32:33 2026 GMT
        Subject: CN=69d1d7d2-260d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:44:ab:07:55:c0:35:eb:66:2e:55:04:1b:
                    18:05:3a:60:06:32:ac:b2:50:ce:c6:39:05:fe:bb:
                    3f:a4:fe:32:7c:d4:f0:7c:a5:44:99:4b:37:eb:1d:
                    44:dd:8a:62:71:78:e3:16:a0:76:e3:22:19:ca:5e:
                    b4:f7:2e:71:04:15:1f:40:a4:09:51:93:d0:c5:3e:
                    96:e2:88:2d:e0:5e:0f:f0:e9:98:a6:97:5b:41:99:
                    b5:0d:44:e2:bd:66:6c:14:98:aa:c8:3a:98:62:6b:
                    7b:52:3b:aa:d2:28:bd:89:7f:cb:09:ed:e6:c4:5a:
                    65:64:db:58:40:28:01:7b:8b:ef:3c:b5:14:4e:25:
                    06:e6:a4:98:17:6f:cc:8d:ca:c3:80:04:57:7e:c8:
                    46:71:6c:b0:6e:10:98:9c:09:de:82:11:d4:99:59:
                    bf:d7:6e:b8:24:e7:c6:31:a1:ee:fd:da:5b:b5:c0:
                    01:3a:bc:35:36:d4:34:39:bf:e7:de:37:fa:79:40:
                    45:d8:24:7a:b5:b7:f1:fe:d9:a0:b2:1c:19:2f:c1:
                    55:3d:b5:86:0f:c6:ab:20:c9:45:69:5f:9b:5e:6a:
                    8f:35:30:01:cf:c1:01:b8:cf:97:e1:bf:6f:d9:b7:
                    07:ba:3b:63:0c:2f:c2:13:58:94:04:d5:7e:27:75:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:03:2D:35:10:6B:34:05:DB:0E:2E:74:1D:64:56:02:D8:D5:54:B4
            X509v3 Authority Key Identifier:
                keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:8b:4f:ae:7a:cb:54:90:56:ab:97:87:51:72:41:c3:5f:46:
         f3:42:0d:9b:e9:bf:0f:63:11:21:c2:e6:00:f1:38:42:94:9d:
         ca:d7:b6:97:bd:22:1f:9a:ed:46:5f:1c:94:a5:29:cd:22:80:
         63:34:97:e9:34:2f:e6:a6:a9:06:b2:ff:1a:de:13:78:f1:b3:
         06:db:ed:5b:ea:e4:46:8f:1b:84:15:3a:95:23:06:84:38:3b:
         2b:cc:83:01:29:44:6b:59:53:c9:8d:3c:d4:7f:0e:4b:6c:0a:
         b8:d4:23:5b:16:0b:90:17:aa:53:35:db:ea:c9:b2:0a:82:d4:
         a3:fd:72:55:64:61:37:27:05:13:a2:d4:b2:bb:25:da:8e:81:
         af:f9:ca:d7:25:da:0f:95:c6:bf:d4:ef:b6:f2:2b:0b:81:e4:
         41:ba:dd:0c:dc:00:1e:42:09:fa:12:35:8f:56:85:a7:96:0b:
         1a:d7:4d:ad:64:0f:f8:bb:a8:eb:43:76:f1:9d:3e:e7:ef:a2:
         5a:67:2f:5e:96:82:c5:0a:2b:7b:82:b7:16:ab:c1:51:78:b2:
         9b:96:d9:0d:13:a9:b9:1c:3d:ae:4e:7d:8c:0a:0e:b1:e4:22:
         5e:f2:65:33:01:6d:d1:88:a5:b4:a3:f6:2b:1a:93:ab:e4:5b:
         4f:10:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:11 2026 by rpki-client