Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
File:                     Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json)
Hash identifier:          1ihXGpNjR9a0fXzdkIki9OTgbNZDEAvjgaY+RJNdQ/U=
Subject key identifier:   E9:90:6E:80:93:8D:7D:2B:E4:72:40:00:C7:68:D3:AC:E4:C0:50:D3
Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
Certificate issuer:       /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
Manifest number:          01C1
Signing time:             Sun 05 Apr 2026 03:17:12 +0000
Manifest this update:     Sun 05 Apr 2026 03:17:12 +0000
Manifest next update:     Sun 12 Apr 2026 03:17:12 +0000
Files and hashes:         1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: AM/OlLs7ARFYlWc2BTZzg0smSYxfoRBsamphSK8uYAQ=)
                          2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: gEpkbZAOCiAGZqrCOuhhWC5OkOPHde0fYqgs1m5gseY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
                          rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
        Validity
            Not Before: Apr  5 03:17:12 2026 GMT
            Not After : Apr 12 03:17:12 2026 GMT
        Subject: CN=69d1d438-f355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ae:cf:f4:34:e2:a4:82:bf:34:04:9b:b1:ca:
                    1e:8f:01:db:50:11:8e:87:37:e5:f5:ab:bb:8b:d4:
                    90:d5:58:86:3a:0f:b3:47:eb:d8:fc:14:66:30:4a:
                    db:cc:fe:2b:0e:24:c4:e9:27:f8:a7:8b:46:1f:ed:
                    91:18:9d:ee:a0:60:ef:f7:fc:c8:7e:31:00:94:68:
                    23:da:3b:59:04:ff:2b:4d:03:70:bb:54:a0:ba:d2:
                    79:ab:55:b7:44:be:70:69:15:b4:93:31:f6:3f:54:
                    2d:01:bb:ec:94:7a:c5:d2:20:cb:91:55:ec:59:fd:
                    7a:fe:a6:26:81:ff:2c:af:18:24:db:70:2d:94:87:
                    1e:60:d9:3d:80:12:a3:ed:54:61:68:64:7e:c2:fb:
                    9e:aa:17:10:a0:01:d8:81:a7:f5:24:99:94:4c:72:
                    e3:6b:c4:de:fb:33:74:a1:c9:8d:57:f9:99:a2:c5:
                    93:c1:54:f2:71:ed:36:f9:96:26:0e:81:1b:41:a0:
                    27:2e:8c:cb:81:d8:0d:44:c6:5a:8d:da:5a:6c:38:
                    9c:11:a1:4a:18:13:b4:8c:3a:1a:bd:f5:9d:64:98:
                    11:1a:0f:9e:97:9d:9d:be:55:29:a2:b4:66:9f:94:
                    6e:23:f6:4f:98:18:e8:cd:7a:f7:83:85:92:12:79:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:90:6E:80:93:8D:7D:2B:E4:72:40:00:C7:68:D3:AC:E4:C0:50:D3
            X509v3 Authority Key Identifier:
                keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:37:dd:f7:d1:e1:dc:9a:88:16:9a:a4:57:0d:02:37:76:42:
         ba:75:67:aa:e9:a6:83:a1:34:4e:95:25:b3:8d:bc:48:b6:6b:
         db:11:cb:2a:22:c9:2d:4e:6b:ad:8b:9e:3b:95:41:6a:96:36:
         ab:d3:9c:79:45:de:b7:46:6e:ba:a2:ec:74:64:5d:61:9c:f5:
         d6:b9:3f:26:e1:dc:15:ac:e7:ee:79:a2:ad:34:09:f6:42:90:
         41:3c:e4:24:5b:a5:f5:09:10:f5:c0:67:29:a1:cc:cb:8a:fc:
         b7:23:81:55:c1:c6:d4:23:e9:ea:6b:47:d8:5f:55:3b:f6:5d:
         86:d3:c2:44:ca:71:fa:6b:56:2a:fc:24:e4:ee:7f:a7:18:c1:
         4d:a7:f7:dc:5f:a4:13:8d:1c:79:1b:bd:9e:64:d9:c8:4e:bb:
         16:71:0c:2a:10:cc:ff:c0:0f:15:7b:1c:da:f1:d7:c4:c2:dd:
         b5:d7:d0:6a:1e:c4:9b:01:24:8a:92:3f:e4:c9:31:cd:af:62:
         75:21:e3:75:10:be:52:36:5f:53:94:7f:28:cf:7e:db:8a:47:
         e7:29:4c:22:07:13:b7:65:e0:d0:a2:0a:b7:e2:1c:3d:10:13:
         f6:a4:c1:f8:35:05:3d:ed:bb:b2:19:cb:94:ef:d5:e8:45:36:
         4f:e9:4c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:42 2026 by rpki-client