Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
File:                     qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft (raw, json)
Hash identifier:          JN8wWn1OcPK9b4p0ovV3LufiNQDbvkfWnzeOH2qbZ44=
Subject key identifier:   80:DA:C7:44:7E:46:3B:4D:94:D6:D6:89:64:A9:D8:6E:0F:21:F3:90
Authority key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
Certificate issuer:       /CN=A91AC075/serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
Manifest number:          10
Signing time:             Sun 05 Apr 2026 08:23:31 +0000
Manifest this update:     Sun 05 Apr 2026 08:23:31 +0000
Manifest next update:     Sun 12 Apr 2026 08:23:31 +0000
Files and hashes:         1: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl (hash: v0o4fPpFef0rpj39CvJ0xrFiobIpf//WeEnevIWI6TY=)
                          2: 4D14307E1C2C11F186EF2187353D8C67.roa (hash: 8n1lBtRiuUToqQoaz+XovDqW+aJBw7UTosZ8OjYJOZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
        Validity
            Not Before: Apr  5 08:23:31 2026 GMT
            Not After : Apr 12 08:23:31 2026 GMT
        Subject: CN=69d21c03-6810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:d0:94:47:49:b5:66:e1:f4:48:fa:0d:4a:
                    f7:94:d0:42:1d:07:bf:0d:63:38:5e:3d:85:d4:24:
                    7a:f5:3f:21:33:f0:3f:07:d8:c3:4f:ce:16:31:df:
                    e1:b4:21:5b:9c:10:4e:b9:e6:7d:bb:46:25:20:47:
                    52:5d:eb:63:51:fa:45:5e:af:43:47:37:89:f4:99:
                    0e:c3:a0:15:46:f4:da:a3:e6:ae:83:58:35:f7:8a:
                    2e:d6:de:f5:e0:42:34:6f:96:d9:f4:c5:bb:73:a4:
                    09:ce:18:0b:4e:01:05:af:88:eb:14:0c:68:14:0e:
                    fd:72:c5:c2:a5:fe:8b:1d:fc:62:5b:73:d3:c2:94:
                    be:03:06:21:6c:32:83:e8:ab:0e:7f:09:9e:af:34:
                    45:d8:50:9e:76:7e:e7:a4:f8:30:26:60:10:d0:1d:
                    e1:fe:1c:3d:0a:ba:1f:b0:12:37:b4:fb:8d:5a:5a:
                    27:e3:49:01:c6:52:30:9a:96:e1:19:7e:a6:e4:55:
                    0a:3f:8f:e2:42:fb:8e:b8:7b:f9:4d:05:79:a8:f2:
                    dc:bf:93:0b:a1:d9:4a:f0:c6:b8:e9:a4:67:d9:bc:
                    50:2f:ab:f7:26:36:df:e4:97:ba:42:8e:35:0d:4a:
                    8a:87:bd:ea:fb:89:46:55:db:09:36:4d:b6:51:7d:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DA:C7:44:7E:46:3B:4D:94:D6:D6:89:64:A9:D8:6E:0F:21:F3:90
            X509v3 Authority Key Identifier:
                keyid:AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:08:df:e3:ef:66:f9:c2:68:b2:34:94:d2:96:ff:bb:3d:85:
         6c:a7:6e:ae:99:d0:69:ce:dd:95:c0:b3:34:cb:23:4e:c1:27:
         94:6f:cc:de:7d:e6:01:e3:a0:f6:41:aa:41:51:d1:b3:95:3f:
         bf:c5:ea:55:c9:9a:64:b4:c6:7c:4a:8d:22:b5:e3:d3:ce:ee:
         21:7d:d9:2d:d8:6a:2a:da:d7:5c:ed:e2:9b:52:8d:33:a9:02:
         29:6c:46:d3:c3:78:79:b3:5a:ef:76:00:03:7f:51:c4:a2:92:
         dc:e1:a4:04:65:fb:db:ff:13:bb:f1:7f:9b:f9:dd:e1:62:0c:
         d8:45:e6:63:d6:7b:4b:8e:20:fa:ad:c5:00:c7:ce:84:ce:a2:
         14:d8:ad:94:3e:70:62:34:61:6b:d4:cb:7e:33:bf:18:da:c6:
         2f:2b:85:79:35:61:0a:f0:40:8c:38:6d:fc:94:f1:f8:cc:10:
         cf:a8:fc:14:9a:9a:0f:97:8f:0f:41:f8:b6:76:d7:15:35:fb:
         14:70:d8:54:6b:88:8a:af:55:28:b8:ca:13:1a:66:ed:71:ec:
         74:c9:4e:ca:43:f1:2f:8b:93:d8:82:6d:0f:78:b7:f7:a7:34:
         d7:28:1f:d8:8f:7b:51:bd:44:18:7c:a8:53:eb:d6:ce:38:c5:
         b2:52:0b:24
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzA3NTExMC8GA1UEBRMoQUFEODE3OTlGNjQ4NzBCOTFBMDlEMkMwNEI4N0QwRjk2
MDdFRjAxQzAeFw0yNjA0MDUwODIzMzFaFw0yNjA0MTIwODIzMzFaMBgxFjAUBgNV
BAMTDTY5ZDIxYzAzLTY4MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+MdCUR0m1ZuH0SPoNSveU0EIdB78NYzhePYXUJHr1PyEz8D8H2MNPzhYx3+G0
IVucEE655n27RiUgR1Jd62NR+kVer0NHN4n0mQ7DoBVG9Nqj5q6DWDX3ii7W3vXg
QjRvltn0xbtzpAnOGAtOAQWviOsUDGgUDv1yxcKl/osd/GJbc9PClL4DBiFsMoPo
qw5/CZ6vNEXYUJ52fuek+DAmYBDQHeH+HD0Kuh+wEje0+41aWifjSQHGUjCaluEZ
fqbkVQo/j+JC+464e/lNBXmo8ty/kwuh2UrwxrjppGfZvFAvq/cmNt/kl7pCjjUN
SoqHver7iUZV2wk2TbZRfWFFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgNrHRH5G
O02U1taJZKnYbg8h85AwHwYDVR0jBBgwFoAUqtgXmfZIcLkaCdLAS4fQ+WB+8Bww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMDc1L0Q2Nzc4NDMwMUMy
QTExRjE5REQxNjA0QjM1M0Q4QzY3L3F0Z1htZlpJY0xrYUNkTEFTNGZRLVdCLThC
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcXRnWG1mWkljTGthQ2RMQVM0ZlEtV0ItOEJ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
MDc1L0Q2Nzc4NDMwMUMyQTExRjE5REQxNjA0QjM1M0Q4QzY3L3F0Z1htZlpJY0xr
YUNkTEFTNGZRLVdCLThCdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBBCN/j72b5wmiyNJTSlv+7PYVsp26umdBpzt2VwLM0yyNOwSeUb8zefeYB46D2
QapBUdGzlT+/xepVyZpktMZ8So0itePTzu4hfdkt2Goq2tdc7eKbUo0zqQIpbEbT
w3h5s1rvdgADf1HEopLc4aQEZfvb/xO78X+b+d3hYgzYReZj1ntLjiD6rcUAx86E
zqIU2K2UPnBiNGFr1Mt+M78Y2sYvK4V5NWEK8ECMOG38lPH4zBDPqPwUmpoPl48P
Qfi2dtcVNfsUcNhUa4iKr1UouMoTGmbtcex0yU7KQ/Evi5PYgm0PeLf3pzTXKB/Y
j3tRvUQYfKhT69bOOMWyUgsk
-----END CERTIFICATE-----
Generated at Mon Apr 6 02:15:31 2026 by rpki-client