Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
File:                     QqvQ9dysTQxkACUczEnW_9l1Q78.mft (raw, json)
Hash identifier:          JaFYDKsk69W9hgel3XCb9Co1rWLoEPSaZarz1Xae9hc=
Subject key identifier:   CD:D8:86:70:63:6B:0A:EC:8B:51:6A:2A:9D:65:63:AC:62:69:79:FA
Authority key identifier: 42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF
Certificate issuer:       /CN=A9147609/serialNumber=42ABD0F5DCAC4D0C6400251CCC49D6FFD97543BF
Certificate serial:       15D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
Manifest number:          1F8B
Signing time:             Sat 04 Apr 2026 16:38:23 +0000
Manifest this update:     Sat 04 Apr 2026 16:38:22 +0000
Manifest next update:     Sat 11 Apr 2026 16:38:22 +0000
Files and hashes:         1: QqvQ9dysTQxkACUczEnW_9l1Q78.crl (hash: 1zlRYaqcaYP/8/IhG5Nud3f3LurJguHD9MgZ5+0eK5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.crl
                          rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5588 (0x15d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147609, serialNumber=42ABD0F5DCAC4D0C6400251CCC49D6FFD97543BF
        Validity
            Not Before: Apr  4 16:38:22 2026 GMT
            Not After : Apr 11 16:38:22 2026 GMT
        Subject: CN=69d13e7f-7d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:06:b7:48:6f:57:da:4e:e3:5b:c5:8f:b1:
                    f6:cf:e0:7d:83:ce:c1:c9:b1:d0:51:5f:e2:96:6c:
                    be:f7:63:b2:a1:70:56:de:48:51:e4:90:08:77:a6:
                    0c:39:ef:48:84:d6:cc:0f:90:c6:14:01:53:1f:a9:
                    d4:28:40:81:b4:66:53:bf:14:f3:45:17:65:b2:5e:
                    73:06:e3:72:31:25:f6:4e:c7:80:2e:04:ba:cf:a8:
                    a5:fe:6b:65:c0:98:93:e9:c0:5e:9f:02:03:af:cf:
                    b3:66:ea:f5:bf:df:ee:bc:22:ab:8f:eb:bc:5d:e2:
                    8a:47:0b:51:f7:a1:73:f2:65:50:48:ca:37:d5:54:
                    80:ba:62:36:a5:fd:5b:bb:89:f7:93:8a:41:83:27:
                    26:ee:09:ef:77:01:5a:7f:7c:5d:5a:ea:38:55:16:
                    46:d1:b7:cc:77:f3:33:04:44:64:6c:17:f1:88:62:
                    cb:16:b4:1f:8a:d0:b6:c5:67:9b:8a:1d:7f:fb:13:
                    c5:60:87:e2:b3:d9:50:4d:0a:9d:ae:66:6c:74:a3:
                    fd:c1:75:d4:4f:72:c1:71:4b:84:50:28:8a:75:51:
                    4a:77:4c:de:90:f1:6c:c1:3f:a6:d5:ec:db:a3:2d:
                    e6:47:f9:43:72:c6:92:65:4b:73:91:49:0e:fe:a5:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D8:86:70:63:6B:0A:EC:8B:51:6A:2A:9D:65:63:AC:62:69:79:FA
            X509v3 Authority Key Identifier:
                keyid:42:AB:D0:F5:DC:AC:4D:0C:64:00:25:1C:CC:49:D6:FF:D9:75:43:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqvQ9dysTQxkACUczEnW_9l1Q78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/QqvQ9dysTQxkACUczEnW_9l1Q78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:de:49:dd:93:df:e6:bc:ad:7e:d1:40:72:71:71:b9:ee:26:
         07:c1:3b:f4:24:06:18:4d:0e:fb:bd:3f:c6:87:b1:df:6c:99:
         3e:ea:69:ce:37:67:c8:70:a9:83:4e:ab:6c:6b:fe:22:90:ce:
         48:7d:73:bf:9a:48:d7:12:af:06:7a:94:42:b0:16:ae:28:0a:
         52:50:4b:a7:e9:f5:6f:5d:9a:3e:b9:20:53:b8:23:8a:12:1a:
         0b:cd:01:31:9a:aa:6b:1c:8d:c9:99:95:47:68:8e:8e:37:7e:
         d0:4d:24:24:d5:10:fc:13:73:af:4f:87:b0:11:15:3b:8c:d4:
         e6:97:0e:53:f9:2a:19:ac:ff:c4:d1:22:94:01:b8:b6:ca:55:
         38:15:f6:72:7e:35:1a:94:e0:c4:79:6c:a5:97:0e:bf:1e:40:
         8a:47:ad:b3:37:08:f9:b6:60:36:59:7e:c1:04:5a:11:ce:1e:
         3e:47:0a:9e:3a:f5:0b:9b:09:63:ad:47:da:b3:83:8a:65:62:
         ea:ae:fc:c1:3c:9c:fe:ab:9a:19:55:b8:7c:f5:28:a5:4b:0d:
         5a:02:65:13:c8:64:97:ef:81:cb:97:1e:89:24:60:69:22:22:
         6d:a1:dd:ed:64:11:4c:d4:df:ad:3c:70:7d:01:63:9e:e3:02:
         62:8b:b1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:05:39 2026 by rpki-client