Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
File:                     cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json)
Hash identifier:          emO1Jldt4iPfbrFiIw5GzVCQd4E8Xn2RmsyCTcz95AE=
Subject key identifier:   A0:38:B2:19:C5:AB:6B:B8:75:AD:1E:79:C7:91:32:38:F0:02:DF:8E
Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
Certificate issuer:       /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Certificate serial:       07A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
Manifest number:          0798
Signing time:             Sat 04 Apr 2026 21:18:56 +0000
Manifest this update:     Sat 04 Apr 2026 21:18:56 +0000
Manifest next update:     Sat 11 Apr 2026 21:18:56 +0000
Files and hashes:         1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: SJt5hAAveFX9O1AaahDypyWkJAfK5nKtr1o49fcufjA=)
                          2: D3B421A2366811F0A18FF40AC4F9AE02.roa (hash: omkWE5Y2i4Y9rB60Umc+HfIUljZckcLxEOKEtjkJ+XM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl
                          rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1953 (0x7a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
        Validity
            Not Before: Apr  4 21:18:56 2026 GMT
            Not After : Apr 11 21:18:56 2026 GMT
        Subject: CN=69d18040-d119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:b1:23:27:a1:c5:40:09:17:c1:3f:e8:fe:
                    5a:d1:f2:ba:8c:b8:ed:6a:83:30:25:bf:67:47:d5:
                    34:d3:61:f8:9b:26:8c:69:53:ba:d1:c4:07:94:f7:
                    a6:30:d7:ce:68:b8:a0:41:29:40:79:ef:24:ea:27:
                    f8:1d:e2:48:71:23:c2:92:b1:9b:93:94:17:7a:ce:
                    d5:e5:56:b6:36:4c:a8:7c:04:14:6d:29:3e:67:5d:
                    35:49:7d:94:34:4e:11:69:35:64:37:ed:3f:15:af:
                    51:bb:a6:f4:fe:ee:10:fa:07:cd:d6:ad:c0:13:0c:
                    6d:c1:2e:a3:a2:21:a5:d5:c7:81:05:32:23:cc:10:
                    93:3f:7a:fe:7d:d7:c5:38:69:1f:c8:c2:8c:de:44:
                    45:78:d1:88:5a:1f:2a:49:38:06:73:57:df:c3:24:
                    50:a1:55:95:5a:08:02:85:b2:ff:7c:49:71:d8:27:
                    db:d6:dd:df:0a:3b:0e:48:9b:f6:51:8b:6c:d0:64:
                    a3:11:54:bf:da:1b:74:3b:d8:f0:ae:f1:34:c3:55:
                    b0:5b:6a:3f:f3:1f:3d:f1:ef:68:e2:49:43:25:d4:
                    f7:e0:43:d2:84:4e:6f:a6:95:8a:7f:f3:58:3d:b0:
                    c8:ba:01:a2:16:89:8f:29:ad:e8:22:80:36:ec:18:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:38:B2:19:C5:AB:6B:B8:75:AD:1E:79:C7:91:32:38:F0:02:DF:8E
            X509v3 Authority Key Identifier:
                keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:de:c3:c7:cd:c9:a0:0f:9a:d3:66:bd:1f:63:82:7d:11:51:
         d7:b7:ce:53:f8:f3:76:82:67:11:4e:79:61:36:28:07:ac:30:
         fe:6d:0f:b7:d8:e5:4f:f7:12:ee:ce:97:65:47:e1:84:44:a2:
         9b:d2:3f:76:d2:59:65:06:e0:d7:62:d0:9d:d8:f8:fb:8d:e8:
         39:50:c6:3a:40:b1:d8:24:9e:dd:3c:e7:74:9e:05:48:68:a3:
         71:94:a1:77:c6:e2:6c:b0:8b:ac:1d:10:9c:c7:73:b8:5d:60:
         57:ac:b7:47:de:de:02:ba:82:7b:e0:93:38:9f:35:02:ff:79:
         05:37:10:be:0f:fd:e7:f4:d8:0e:e3:6d:d1:2d:89:51:d9:9d:
         05:55:8f:c3:60:23:de:77:37:cf:d0:3c:2b:cc:0f:a9:a9:96:
         98:4f:ee:f1:27:a2:37:d2:2b:4f:59:0f:6f:01:3d:58:c5:f0:
         9e:05:f0:c4:b2:ec:b3:57:70:5d:49:f5:12:9a:93:c4:e4:19:
         a6:f9:38:3e:ce:b6:c4:f6:c1:ec:e4:eb:a6:68:11:a8:f1:2e:
         17:57:ea:be:47:0a:f0:71:b4:3c:fa:f9:7d:b4:4d:48:7b:d7:
         9b:26:e0:7f:ba:71:45:8d:08:22:19:f4:8f:fa:8c:5a:3d:57:
         21:c8:b4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:49 2026 by rpki-client