Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
File:                     1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft (raw, json)
Hash identifier:          AAxTWAhzZtfVJKzIEocUhVMs5fSlZrnvkK+hohopY4Y=
Subject key identifier:   FC:0C:38:42:56:39:DB:16:48:98:E9:1F:5A:3E:B3:CE:FE:14:A3:41
Authority key identifier: D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C
Certificate issuer:       /CN=A91DB916/serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
Manifest number:          01C9
Signing time:             Sun 05 Apr 2026 03:15:42 +0000
Manifest this update:     Sun 05 Apr 2026 03:15:42 +0000
Manifest next update:     Sun 12 Apr 2026 03:15:42 +0000
Files and hashes:         1: 1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl (hash: ir8h3rD12wMZuJUyTt92lLvYgMjm5OSv6ii3kHON5R4=)
                          2: 18066BD682CD11EE82EA6452C4F9AE02.roa (hash: Gl8y4EmzZL1NX5RYCfAfBRbeX6KbXaMy1Rd+L5zLIxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB916, serialNumber=D50D11837308AB1F15A75F351643FB7FC014854C
        Validity
            Not Before: Apr  5 03:15:42 2026 GMT
            Not After : Apr 12 03:15:42 2026 GMT
        Subject: CN=69d1d3de-dd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:f9:4a:48:82:e3:4e:b6:c4:2f:7d:79:78:
                    a2:c3:da:4c:ab:53:cc:48:e4:f6:40:63:6c:b3:f8:
                    13:b0:ef:48:01:62:16:7b:65:6d:ac:10:ac:ab:19:
                    59:f5:d6:13:89:b2:5f:ef:55:00:6c:b5:f7:8a:63:
                    67:ca:f2:97:75:e3:f2:1f:5e:38:83:86:4f:0d:2e:
                    e2:74:a8:d2:57:16:3e:92:34:d6:39:1e:e1:83:13:
                    6f:59:ac:a4:5d:a2:1d:0c:bd:a7:60:58:db:14:81:
                    3d:bd:4a:a6:e4:39:d0:62:dc:c9:b5:6c:28:a9:98:
                    a8:4f:30:b2:e9:9b:1c:52:00:d0:79:5e:d6:5e:3c:
                    28:79:70:68:30:34:9a:a3:bf:47:e2:d4:ae:a7:00:
                    79:76:7a:8e:b6:80:19:f6:7e:e0:c0:74:bf:57:19:
                    45:e0:de:90:ff:df:31:33:9f:2d:c0:f2:ab:11:1a:
                    5c:db:af:ee:64:44:f1:16:19:82:e4:0e:0c:fe:d1:
                    67:2f:9e:34:15:82:72:be:88:73:a7:38:92:12:e9:
                    d1:15:c8:ad:53:70:8b:49:65:fa:06:53:48:3e:61:
                    a3:b2:7b:50:e7:44:9f:0f:bb:67:14:91:21:b5:14:
                    ce:93:26:88:7f:1a:01:7d:1a:ce:6e:d4:30:c1:41:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0C:38:42:56:39:DB:16:48:98:E9:1F:5A:3E:B3:CE:FE:14:A3:41
            X509v3 Authority Key Identifier:
                keyid:D5:0D:11:83:73:08:AB:1F:15:A7:5F:35:16:43:FB:7F:C0:14:85:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB916/74EC397E7D3D11EE9AF7391AC4F9AE02/1Q0Rg3MIqx8Vp181FkP7f8AUhUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:7e:fc:27:af:00:d8:7b:7b:11:5a:75:5d:7e:37:57:00:
         1a:89:97:93:ea:9b:5f:9c:89:ab:64:32:34:89:da:4a:25:30:
         c5:fb:4d:c3:81:4e:92:0f:4c:be:c1:4a:13:22:32:cc:c2:79:
         33:34:bf:55:a5:2a:e2:e6:b6:5c:95:13:a9:cc:da:36:67:a6:
         0c:02:80:8b:b8:25:37:da:76:bc:2e:ec:8f:ec:9d:da:82:8a:
         3b:c2:74:16:2f:84:5f:50:72:97:9c:49:8f:f4:8e:4a:1a:e0:
         60:50:ed:e5:ce:fe:9b:85:7e:52:68:32:d8:dd:a7:5c:08:8e:
         ee:f3:8e:aa:1c:0f:2f:e5:66:b7:6b:12:33:f4:5d:2d:7f:2e:
         25:32:f5:4c:98:94:86:8c:59:61:a0:ac:c9:b3:5c:25:e8:a5:
         2f:09:c3:f0:62:5d:57:dc:b9:1c:65:a5:8c:1a:94:a2:72:4c:
         e8:a4:57:1c:22:b1:b5:66:6c:ea:cb:65:2d:0d:52:28:0b:ae:
         3e:a8:bb:34:14:75:e9:56:34:6e:4d:de:e0:1d:32:64:2c:2d:
         6f:60:c7:89:51:e9:6f:67:93:ce:4a:5d:8c:5a:a2:6c:e7:48:
         e1:5d:0f:b0:c3:76:1e:8c:7e:eb:a6:ab:4c:3a:70:3a:5d:c2:
         e0:ee:c9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:29 2026 by rpki-client