Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File:                     qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier:          PXX/hkZO06JwkK3NRq3mebtfwBfV3uSD2MLsGcP5a9w=
Subject key identifier:   20:05:0E:36:51:EA:7F:74:B0:2C:59:93:CA:60:A0:F4:B3:2D:94:8F
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer:       /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial:       0A53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number:          0A41
Signing time:             Sat 04 Apr 2026 19:32:30 +0000
Manifest this update:     Sat 04 Apr 2026 19:32:29 +0000
Manifest next update:     Sat 11 Apr 2026 19:32:29 +0000
Files and hashes:         1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: iJIEGOAFOwhvDZYRSgsc+nXln0fPcJUvg4+cGicje2A=)
                          2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: mpij4Re6bXjGBWFyLXPJmKPd1UHVx7aiX6dvj4qN29k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
                          rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2643 (0xa53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
        Validity
            Not Before: Apr  4 19:32:29 2026 GMT
            Not After : Apr 11 19:32:29 2026 GMT
        Subject: CN=69d1674e-21c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:a8:ab:11:10:78:80:db:57:f4:6c:ef:90:
                    36:1b:57:61:b9:8e:bd:6a:3c:7c:c5:8f:21:69:2e:
                    b6:0d:92:7e:a4:e8:80:67:07:65:e1:99:8c:1d:62:
                    75:8c:2d:03:de:29:3f:a2:3f:45:65:56:85:c0:f0:
                    9a:f4:03:b6:1b:30:9e:f7:65:38:b7:35:76:e1:9b:
                    a5:29:e5:a4:77:e1:2c:7b:fc:69:89:ec:db:54:a2:
                    26:cd:6a:7a:19:90:0a:3d:fa:b1:91:e4:0a:20:da:
                    c7:07:b3:b2:8a:97:8e:9d:75:13:ec:70:c5:f1:a2:
                    0f:25:6d:2b:90:07:48:9f:3b:6e:99:a5:e5:c4:f9:
                    73:98:24:7e:76:6c:c4:ee:4f:c6:78:13:b5:dc:bc:
                    1e:cb:b4:b2:ea:b4:fa:1f:55:3b:40:61:90:3f:c5:
                    93:16:c3:ff:f3:35:79:86:9b:f0:0f:98:19:2d:79:
                    a2:e4:7f:5f:a5:68:88:ce:6b:3d:ac:e5:47:9e:ff:
                    0c:9f:fa:14:20:c3:d7:1b:72:92:08:0a:5c:7e:3f:
                    4b:74:2b:74:96:8e:38:62:0d:55:32:1d:d6:14:b0:
                    d0:45:de:b2:70:24:08:51:ad:fb:4a:37:cd:8f:56:
                    9d:41:00:7b:d3:da:97:c2:ef:e2:70:bb:cf:15:0f:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:05:0E:36:51:EA:7F:74:B0:2C:59:93:CA:60:A0:F4:B3:2D:94:8F
            X509v3 Authority Key Identifier:
                keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:24:15:a2:fb:8a:07:ad:df:f4:ed:99:2a:23:96:27:0d:
         5a:dc:58:c3:db:6c:79:cc:3d:6d:53:ee:31:80:c1:dd:e3:10:
         20:55:a8:22:bb:fb:49:59:2f:e0:02:f2:0a:ff:ec:86:ca:d8:
         96:bd:0c:28:56:0f:6a:55:6e:f7:3d:af:2c:4b:d4:78:46:af:
         36:aa:ba:b9:33:16:96:76:86:5b:7f:e0:fd:b0:d8:49:d7:3f:
         8e:9e:68:22:69:e8:f6:09:05:64:52:1a:2f:c9:4c:c2:97:07:
         b1:30:ad:92:0b:d8:da:62:0c:87:f3:2b:a5:c6:64:7b:be:50:
         2a:ca:e4:27:c7:6e:aa:56:a1:df:11:a5:cc:d7:4e:ee:90:4d:
         3c:ed:8f:3a:49:ef:0b:6c:e0:ef:5a:a0:c6:9a:9a:40:1f:31:
         25:bd:e1:9a:60:27:3e:b0:75:07:1b:d5:66:55:d9:c5:27:b7:
         1d:79:c9:2f:c8:b1:75:72:36:b1:bf:7e:65:8c:50:b4:8a:b6:
         64:f4:bc:4d:87:b5:05:e4:aa:47:84:c2:87:4d:67:c0:12:59:
         9f:4e:8d:89:c6:e9:d8:5e:53:54:3a:90:d5:22:8c:0b:81:b4:
         9e:5e:b5:9d:66:5f:d5:e7:45:7c:cf:92:58:e8:25:c9:1b:af:
         e7:4e:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:16 2026 by rpki-client