Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
File:                     Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json)
Hash identifier:          E4l6S/4hvYWDjRnZizSPzGvtgejb9ybYIEsT99I2rxo=
Subject key identifier:   FE:BB:46:B1:5D:73:C0:38:EF:75:EC:FA:50:9B:47:6B:2B:93:EC:9A
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Certificate issuer:       /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
Manifest number:          017A
Signing time:             Sun 05 Apr 2026 04:09:27 +0000
Manifest this update:     Sun 05 Apr 2026 04:09:26 +0000
Manifest next update:     Sun 12 Apr 2026 04:09:26 +0000
Files and hashes:         1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: rA/twLOye9P8braIP4qRHSd9JXXKg1mjerCoFHBXtmM=)
                          2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: KlNM/yfkSE+noMo4pBbPbKUObjnAMx3gXh75VDyO61o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
                          rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
        Validity
            Not Before: Apr  5 04:09:26 2026 GMT
            Not After : Apr 12 04:09:26 2026 GMT
        Subject: CN=69d1e077-149c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:87:c8:19:7c:3d:d6:7b:5e:34:2d:43:98:
                    98:07:8b:7d:6e:50:78:3b:72:e7:72:f7:98:c2:f8:
                    aa:c4:fb:37:b8:f6:8a:9c:37:4b:62:86:1c:a6:37:
                    3e:6a:1e:12:ee:2a:3d:2a:02:9e:95:80:82:db:6e:
                    90:19:5e:d7:4d:01:8c:32:8d:e9:5e:b2:58:06:71:
                    c4:a9:aa:48:eb:71:9e:d8:17:dc:dd:a5:e3:ac:61:
                    5f:3d:59:27:db:b4:8a:72:65:c1:e9:dc:a2:88:d5:
                    6a:80:f4:25:66:73:13:b4:b5:6d:a1:ee:e3:b9:31:
                    80:1d:7a:35:d9:e4:e8:7f:15:66:56:52:57:20:c5:
                    03:24:c9:34:cd:07:1f:37:0f:79:87:31:c7:3a:70:
                    46:e1:d6:dc:60:ba:82:84:0c:bd:56:22:f1:d4:3c:
                    30:f3:f7:55:d6:34:88:af:e5:13:59:9d:fd:3c:f7:
                    a5:bb:c4:60:68:e2:9b:8b:af:16:0c:85:6f:bf:bd:
                    3a:c5:53:bf:89:9f:ee:70:03:42:4d:6c:9c:37:c2:
                    9b:88:08:f3:6c:b9:be:de:c2:29:6b:e2:69:29:16:
                    7e:4a:49:68:d8:70:1d:4e:25:26:43:b0:43:c7:29:
                    17:87:73:cf:f3:0e:05:39:bb:f6:eb:9a:f2:93:af:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BB:46:B1:5D:73:C0:38:EF:75:EC:FA:50:9B:47:6B:2B:93:EC:9A
            X509v3 Authority Key Identifier:
                keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:33:ca:14:c1:21:6e:2b:11:af:ad:b4:c5:7d:23:36:b8:55:
         7a:10:ff:f0:69:dd:fd:69:b0:c8:a3:e4:ae:c5:b8:63:fc:f0:
         b1:85:5a:e9:6a:b5:ff:3e:d9:1a:85:94:66:50:99:ee:a6:6b:
         8e:c4:48:36:25:0b:f2:57:30:85:0d:0a:be:68:fe:d2:63:db:
         f1:6b:f3:2b:fc:47:db:3d:3f:6a:1b:20:c6:a1:e8:fa:58:f6:
         a7:7e:95:b3:cc:1a:35:1f:9e:d8:8c:03:76:48:58:94:a6:57:
         6a:c8:04:5b:23:0b:ee:7f:cd:06:80:25:1e:bc:84:a4:7d:88:
         0e:d5:69:7f:95:66:ae:02:74:aa:5d:12:60:f5:21:0c:f0:3d:
         c4:9f:10:67:63:65:52:38:4e:e7:63:58:3d:ce:17:0d:8a:72:
         76:97:2f:69:0d:c0:96:c9:ed:ab:de:de:28:13:b3:a0:87:00:
         31:5d:36:06:5e:a7:ad:4e:a7:12:99:25:31:7e:d1:e0:dc:f8:
         e1:ce:48:97:67:6c:14:8a:a2:6f:ae:cc:d1:a8:7b:d0:53:0a:
         27:d8:35:41:81:bb:e1:d7:f3:0d:ba:36:dc:fd:61:75:97:bb:
         eb:94:af:39:6c:51:80:60:ff:74:f0:7a:86:86:60:c3:fd:a3:
         54:de:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:41 2026 by rpki-client