Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File:                     QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier:          TMfHBGns2muQ7iUoTpFowBAktaPp1twmAKeIbMkJ4GQ=
Subject key identifier:   AE:A4:7C:DE:68:21:D5:44:1A:48:AF:F7:88:AE:0C:B6:8A:86:F2:34
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer:       /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial:       3531
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number:          352A
Signing time:             Sat 04 Apr 2026 14:59:25 +0000
Manifest this update:     Sat 04 Apr 2026 14:59:24 +0000
Manifest next update:     Sat 11 Apr 2026 14:59:24 +0000
Files and hashes:         1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: f13lY9Qo1ofEbbmLM/lpiPI5+NaDZ4urr9I6Fo1O9Ac=)
                          2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: Te4mjLd0tS0Pp8TK/M4FDw7bPNKLJP9S5lFxUos08I4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13617 (0x3531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
        Validity
            Not Before: Apr  4 14:59:24 2026 GMT
            Not After : Apr 11 14:59:24 2026 GMT
        Subject: CN=69d1274c-2b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:af:64:52:15:b1:e0:33:52:77:78:3d:ae:
                    8f:54:1c:69:7b:aa:f5:4e:a5:f0:a1:7c:c0:ee:6f:
                    1a:19:9b:3c:f7:6f:5b:b5:5f:c9:73:60:6e:42:ea:
                    cd:2f:63:e4:43:b2:55:58:97:ec:44:3f:5a:1b:aa:
                    9b:c3:67:45:6f:66:3c:f1:6b:4b:21:d8:76:54:55:
                    c1:2d:17:07:14:90:00:15:5d:75:5b:0a:d4:f1:ce:
                    86:f8:f0:54:6c:d7:dd:57:b5:17:0d:3a:54:ea:42:
                    c1:6e:1c:3b:dd:8a:5e:b2:37:80:c7:49:0f:24:82:
                    06:c9:51:4c:e6:17:b0:9f:7c:0b:55:d0:ee:e5:be:
                    27:79:77:8f:3a:c2:53:f7:17:70:8b:cc:0f:4a:52:
                    a5:70:bb:2e:7c:f6:9d:04:04:db:2e:1e:b0:b3:60:
                    60:ba:f4:27:8a:83:bb:9e:ca:ce:03:60:14:df:43:
                    7b:0f:8a:2a:bc:49:f5:2e:1d:7b:4b:e3:40:37:6a:
                    3a:40:c9:77:0a:e4:8b:fe:8b:b9:58:31:3b:26:3d:
                    c6:0a:23:af:29:b1:7d:c2:88:c8:1b:51:ce:1b:7b:
                    16:dd:b0:87:4e:7f:4d:06:61:66:d2:95:2f:aa:6f:
                    9f:7d:2f:7b:62:94:e9:90:67:fa:64:05:22:d3:6a:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A4:7C:DE:68:21:D5:44:1A:48:AF:F7:88:AE:0C:B6:8A:86:F2:34
            X509v3 Authority Key Identifier:
                keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:36:bf:94:16:9b:8f:0b:10:37:cc:4b:79:05:6c:dc:f7:3b:
         8b:00:ff:cb:54:f2:e3:6d:c9:de:bb:7c:03:84:a8:62:11:89:
         6d:16:28:24:bc:71:92:b3:b9:6e:27:c7:7a:d3:f6:f9:ef:f1:
         4b:ec:14:0b:79:05:d7:b9:c7:10:a6:ab:78:5d:fc:79:70:2b:
         7c:68:91:02:a0:b7:db:a0:86:5c:97:8f:e6:84:53:00:f7:6c:
         85:59:ad:9a:c7:32:8d:c3:83:7d:1d:4d:eb:33:f5:e5:21:ea:
         e1:cf:fe:91:28:c2:3f:31:42:4c:54:67:96:4d:f3:3d:f7:cc:
         13:ab:a9:cd:7f:90:9f:05:86:bd:b0:df:8c:ff:c3:05:1e:87:
         67:0c:a3:60:ae:26:9d:57:4b:f3:54:ef:ea:8c:ef:11:b5:8f:
         39:d8:90:70:30:13:c3:74:b0:ff:ff:2d:59:86:90:2b:55:1d:
         ef:9e:1d:fc:a9:75:2e:0b:24:2b:a4:4f:88:1e:2f:c3:49:c5:
         65:02:ab:47:c2:49:77:53:fd:ca:76:1d:fc:e1:b1:41:3a:da:
         7c:7e:11:5e:3d:f6:67:4d:0a:6c:70:70:22:51:91:04:eb:0c:
         51:6a:31:d1:80:e4:14:de:bd:d3:cc:cc:bb:1c:f7:9e:ad:6e:
         7c:a7:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:08 2026 by rpki-client